though we changed to use the NRPT - the interface metric on the tun is still very low (usually is set to 5). Because of this the TUN is constantly considered the 'main' adapter and as such the DNS server on this adapter is used as the default adapter. This results in all DNS traffic still landing on the ziti tun.
dovholuknf
commented
3 years ago
though we changed to use the NRPT - the interface metric on the tun is still very low (usually is set to 5). Because of this the TUN is constantly considered the 'main' adapter and as such the DNS server on this adapter is used as the default adapter. This results in all DNS traffic still landing on the ziti tun.
manually set the interface metric to a very high value - 255 so that it will be very low on the list of interfaces (likely below even localhost which is generally set to 75) see https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/automatic-metric-for-ipv4-routes for additional information