diff --git a/lib/genMicrovmGuestModule.nix b/lib/genMicrovmGuestModule.nix
index 2ccdf1f2..170b03ff 100644
--- a/lib/genMicrovmGuestModule.nix
+++ b/lib/genMicrovmGuestModule.nix
@@ -101,6 +101,8 @@ in
       IPv6PrivacyExtensions = false;
       LinkLocalAddressing = "ipv6";
     };
+    # Keep the static resolver below as the only DNS server; router advertisements and DHCPv6
+    # still provide addresses and routes but must not add their own resolver entries.
     dhcpV6Config.UseDNS = false;
     ipv6AcceptRAConfig.UseDNS = false;
     routes = [