dns-timeout

Sets the maximum time Radiator waits when resolving a RADIUS backend hostname. For a RADIUS DNS-SD backend, it bounds the NAPTR, SRV, and address discovery operation. The default is 5s. This deadline is separate from TCP connection establishment and RADIUS request processing. DNS-SD discovery uses the shorter of this value and the backend action timeout, when configured.

Set the timeout above normal resolver latency but low enough to detect unavailable DNS service promptly. Increasing it tolerates slower lookups but delays backend discovery and fallback when a lookup cannot complete.

connect {
    protocol tls;
    host "radsec.example.org";
    port 2083;
    dns-timeout 5s;
}

This parameter accepts values greater than zero and no longer than 365d. It supports duration units.