<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Rémi,</p>
<pre>> In the meantime you could exclude the range using [1] to make sure that
> this is really the root cause of your issue.</pre>
<pre></pre>
<p></p>
<p>We already identified that dnsdist was the root cause by
restarting dnsdist after it inserted the IP in the DynBlock and
checking it was truncating new queries event after whitelisting.
This lead to the BPF map remaining unchagned (the IP was still in
it, so queries were supposed to be TC but were whitelisted), and
the new queries were not truncated anymore, as the DynBlock was
empty on userspace side.</p>
<pre>> We might be able to get rid of that now, or at the very least we should
> make it optional.</pre>
<p></p>
<p>That would really be a time-saver for us !</p>
<p>Best,</p>
<p>Pierre Grié</p>
</body>
</html>