Mirrors/coredns
1
0
Fork 0
mirror of https://github.com/coredns/coredns.git synced 2026-04-05 11:45:33 -04:00
Code Issues Packages Projects Releases Wiki Activity
4,702 Commits 8 Branches 80 Tags
2263340fabe8982bb82fe05f90b350aebc4153a2
Commit Graph

4 Commits

Author SHA1 Message Date
Seena Fallah
471d62926d plugin/tsig: add require_opcode directive for opcode-based TSIG (#7828) 
Extend the tsig plugin to require TSIG signatures based on DNS opcodes,
similar to the existing qtype-based requirement.

The new require_opcode directive accepts opcode names (QUERY, IQUERY,
STATUS, NOTIFY, UPDATE) or the special values "all" and "none".

This is useful for requiring TSIG on dynamic update (UPDATE) or zone
transfer notification (NOTIFY) requests while allowing unsigned queries.

Example:
```
  tsig {
    secret key. NoTCJU+DMqFWywaPyxSijrDEA/eC3nK0xi3AMEZuPVk=
    require_opcode UPDATE NOTIFY
  }
```

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
 2026-03-27 21:05:49 +02:00
Chris O'Haver
8737ad49b3 plugin/tsig: Document unimplemented secondary tsig transfers (#5605) 
document unimplemented secondary tsig; clarify plugin description
 2022-09-07 11:39:31 -04:00
coredns[bot]
390e88637e auto remove trailing whitespaces 
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
 2022-06-28 10:30:12 +00:00
Chris O'Haver
68e141eff2 plugin/tsig: new plugin TSIG (#4957) 
* expose tsig secrets via dnsserver.Config
* add tsig plugin

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
 2022-06-27 15:48:34 -04:00