Allow PS5 Payload Manager catalog DNS
This commit is contained in:
@@ -33,14 +33,21 @@ The maintained LAN deployment runs on `net-utils01` from
|
||||
| User Guide gateway | `192.168.20.30:80` and `:443` TCP | Redirect to the local Relapse page |
|
||||
|
||||
Configure the PS5 with primary DNS `192.168.20.30` and secondary DNS `0.0.0.0`.
|
||||
The DNS gateway resolves `manuals.playstation.net` locally, forwards only
|
||||
`homebrew.page`, `github.com`, and `release-assets.githubusercontent.com` to its
|
||||
configured upstream resolver, and returns NXDOMAIN for other names.
|
||||
The DNS gateway resolves `manuals.playstation.net` locally and forwards only
|
||||
`homebrew.page`, `itsplk.github.io`, `github.com`, and
|
||||
`release-assets.githubusercontent.com` to its configured upstream resolver. These
|
||||
names cover the homebrew store and the official PS5 Payload Manager catalog and
|
||||
downloads; every other name receives NXDOMAIN.
|
||||
|
||||
The console needs LAN access to DNS UDP/TCP 53 and TCP 80, 443, and 8000 on
|
||||
`192.168.20.30`. For the homebrew store it also needs WAN egress on TCP 443 to the
|
||||
three allowlisted domains; no WAN ingress rule is required. The server needs DNS
|
||||
egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by default).
|
||||
`192.168.20.30`. For the homebrew store and Payload Manager it also needs WAN egress
|
||||
on TCP 443 to the four allowlisted domains; no WAN ingress rule is required. The
|
||||
server needs DNS egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by
|
||||
default).
|
||||
|
||||
The Payload Manager supports arbitrary custom repository URLs. Those hosts are not
|
||||
allowed automatically: review the repository JSON, payload URLs, checksums, and
|
||||
redirect destinations before adding another exact hostname to `FORWARDED_DOMAINS`.
|
||||
|
||||
To deploy a reviewed commit:
|
||||
|
||||
|
||||
Reference in New Issue
Block a user