-
-
Notifications
You must be signed in to change notification settings - Fork 257
Description
Blocky at the moment uses one cache for all groups. This works for most cases, except when you want DNS responses intended for one group not to be served to others.
For example, at the moment, I have blocky configured to send DNS requests from TV to Clash program. It will return a fake IP address and any traffic to the fake IP range will be intercepted and sent to Clash by IPtables rule on the router. This allows for a DIY smart DNS to access geo restricted services provided you have access to proxies.
The problem is that if a device other than TV requests a domain shared by TV, blocky will resolve and cache the real IP there by bypassing the proxy and get geo restricted. On the flip side, if TV resolves the domain first, traffic from other devices for that domain will go down the proxy rather than outside.
This feature would also be useful for another scenario where you would want to use Family safe DNS for devices used by kids and standard DNS for others. This may require blocky not to fall back to default group when group specific DNS resolvers aren't available to avoid bypassing the filtering.