TCP worked, UDP silently died: shipping a DNS proxy to fly.io

I shipped v0.2.0 of dnsink — a Rust DNS proxy with threat-intelligence feeds and DNS tunneling detection — to fly.io this week. TCP worked on the first deploy. UDP silently dropped every reply. This is the debug. dnsink is a small Rust daemon that sits between a DNS client and its upstream resolver.