Hi, I would have expected that > stub-tls-upstream: no < would countermand > tls-upstream: yes < for the stub-zone but it appears not to be the case. Is it by design that it is superseding?