mapping client networks to work with ECS

Unbound
1

hi,

is there a way to instruct unbound to send a client subnet X where the real client IP belongs to subnet Y?

consider this example:

client 172.21.22.23/24

unbound 192.0.2.1
ecs 203.0.113.0/24

auth ns

or

client 172.31.32.33/24

unbound 192.0.2.1
ecs 233.252.0.0/24

auth ns

thank you

2

Hi Antonio,

This is not possible.

If you control the clients you can have them include an ECS option with the desired network and Unbound will use that.

My next bet would be NATing so that Unbound sees the fake client IP.

Best regards,
-- Yorgos