Episode Details

Daniel runs a commercial VPN, Tailscale, and Cloudflare WARP on a single laptop — and all three want to control DNS. The failure mode is silent: queries leak to the wrong resolver while pages still load. We break down where these clients collide, why the OS can't represent multiple resolvers, and the configuration strategy to make them coexist — including a local DNS proxy as a choke point, client-specific overrides, and how to guarantee no unencrypted fallback.