As described in the summary, kresd does not honor if the forwarding should be done by UDP or TCP
UDP & TLS work, but TCP doesn't, indeed. However there is no trivial way to turn this on, so I will solve this later.
Could you please verify whether this works? > https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=9a45c759d6367516bfb0c9a5516a50fc7920c5e5
Hello Michael, I've applied your changes and can confirm that the configured protocol now is used properly.
After some more testing, I had to admit, when selecting TLS as proto no connection to an upstream server could be created, because the resolver is forced to use TCP. So the patch slightly needs to be adjusted to only set the TCP flag when TCP should is configured.