unixd/client - discover servers via dns

[Firstyear]

Similar to AD sites and services, we could allow discovery of a domain and it's local servers via dns. This would assist with roaming clients, which tend to be the exception not the norm. But it would also eliminate our reliance on load balancers too.

[Firstyear]

The barrier here is web browsers probably can't consume it. I think there were some possible attempts though ....

[Firstyear]

cc @phoenixbackups

[yaleman]

Is this mDNS or SRV records? 🤔 I'm down with both... but SRV's are probably easiest to start with.

[Firstyear]

Probably SRV to start with. But I don't know if https://datatracker.ietf.org/doc/rfc9460/ is widely supported for browsers/dns servers yet, and I think the DNS rfc prohibits https from being a SRV. More research needed :)

[yaleman]

Yeah, it's not really something I'd expect to work for browser-side things - how would that ever work from a UX perspective though?

For SRVs I wouldn't say it's a HTTPS service, I'd suggest _kanidm._tcp.<domain> with the port set to 443.