Chris O'Haver
c4d02442ef
add tsig to codeowners; update chaos authors ( #5479 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-07-01 10:06:30 -07:00
coredns[bot]
390e88637e
auto remove trailing whitespaces
...
Signed-off-by: coredns[bot] <bot@bot.coredns.io >
2022-06-28 10:30:12 +00:00
Chris O'Haver
68e141eff2
plugin/tsig: new plugin TSIG ( #4957 )
...
* expose tsig secrets via dnsserver.Config
* add tsig plugin
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-06-27 15:48:34 -04:00
Yong Tang
0218a34008
Fix out-of-index issue in rewrite plugin ( #5462 )
...
This PR fixes another out-of-index issue in rewrite to avoid
security vuln.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2022-06-26 16:06:43 -07:00
Ondřej Benkovský
e0dead4aa2
plugin/kubernetes : make kubernetes client log in CoreDNS format ( #5461 )
...
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com >
2022-06-26 14:49:45 -07:00
Yong Tang
4a40e9e3a0
Fix a crash in rewrite plugin when rule type is missing ( #5459 )
2022-06-25 09:17:35 -07:00
Ondřej Benkovský
501e50312e
plugin/trace: make zipkin and datadog reporters log errors using CoreDNS logger ( #5452 )
2022-06-23 03:40:13 -07:00
Ondřej Benkovský
af4d84d915
plugin/trace: read trace context info from headers for DOH ( #5439 )
...
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com >
2022-06-20 07:08:53 -07:00
Chris O'Haver
037e4920c2
plugin/health: Bypass proxy in self health check ( #5401 )
...
* add detail to docs; bypass proxy in self health check
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-06-17 15:49:53 -04:00
Chris O'Haver
dded10420b
plugin/cache: Add option to adjust SERVFAIL response cache TTL ( #5320 )
...
* add servfail cache opt
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-06-17 15:48:57 -04:00
Chris O'Haver
d60ce0c8d4
retain response AD bit if requestor's AD bit was set ( #5191 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-06-17 15:47:35 -04:00
Chris O'Haver
d679f2e7d0
fix 'verify' option name in readme ( #5441 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-06-17 15:31:16 -04:00
Ondřej Benkovský
dcc3d76018
remove unused coredns_forward_sockets_open metric ( #5431 )
...
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com >
2022-06-13 07:30:34 -07:00
Chris O'Haver
4690d10f87
plugin/cache: Reword serve_stale docs for clarity ( #5394 )
...
* reword for clarity; use consistent terminology
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-06-07 09:43:03 -04:00
Andy Lindeman
6e58595c61
Log the literal value, not a format string ( #5425 )
...
Signed-off-by: Andy Lindeman <andy@lindeman.io >
2022-06-05 13:17:00 -04:00
coredns[bot]
8f7f150bf3
auto go fmt
...
Signed-off-by: coredns[bot] <bot@bot.coredns.io >
2022-05-30 10:29:34 +00:00
Radim Hatlapatka
91bcbc2e3a
recover from panic log including stacktrace to help finding the origin ( #5392 )
2022-05-24 14:36:36 +02:00
Tintin
71f68a3363
Fixing issue #5376 by adding a check to parse out Zone info ( #5387 )
...
* Fixing #5376 by adding a check to parse out Zone information
Signed-off-by: Tintin <samrath.sodi@gmail.com >
* using IndexByte instead of strings.Split()
Signed-off-by: Tintin <samrath.sodi@gmail.com >
* using plugin logger for logging parsing failure
Signed-off-by: Tintin <samrath.sodi@gmail.com >
* using var keywork instead of short declaration operator
Signed-off-by: Tintin <samrath.sodi@gmail.com >
* reordering imports
Signed-off-by: Tintin <samrath.sodi@gmail.com >
2022-05-20 06:52:30 +02:00
RetoHaslerMGB
d594d61341
Correct timeout description ( #5388 )
2022-05-19 02:48:25 -07:00
coredns[bot]
68316f4efb
auto remove trailing whitespaces
...
Signed-off-by: coredns[bot] <bot@bot.coredns.io >
2022-05-17 10:29:52 +00:00
Chris O'Haver
4d1d9adb0e
fix and document zone-match regex-no-match case ( #5180 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-05-13 23:23:28 -04:00
lobshunter
dbb8a12394
plugin/dnstap: support FQDN TCP endpoint ( #5377 )
...
* plugin/dnstap: support FQDN TCP endpoint
Signed-off-by: lob <pengyu@pingcap.com >
* plugin/dnstap: remove unused variable
Signed-off-by: lob <pengyu@pingcap.com >
2022-05-12 14:13:26 -04:00
dilyevsky
2895b06732
[plugin/route53] Cleanup AWS config/credentials setup. ( #5370 )
...
Signed-off-by: Dmitry Ilyevsky <ilyevsky@gmail.com >
2022-05-09 13:35:42 -04:00
Patrick W. Healy
a5b9749462
Don't add OPT RR to non-EDNS0 queries ( #5368 )
...
* Don't add OPT RR to non-EDNS0 queries
Signed-off-by: Patrick W. Healy <phealy@phealy.com >
Signed-off-by: Patrick W. Healy <patrick.healy@microsoft.com >
* Update plugin/bufsize/README.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com >
Signed-off-by: Patrick W. Healy <patrick.healy@microsoft.com >
Co-authored-by: Chris O'Haver <cohaver@infoblox.com >
2022-05-06 15:34:12 -04:00
Lorenz Brun
7a7b0a2b9b
Bump Kubernetes to 1.24 ( #5364 )
...
Signed-off-by: Lorenz Brun <lorenz@monogon.tech >
2022-05-04 13:38:21 -04:00
Chris O'Haver
c02cd52208
fix k8s start up timeout ticker ( #5361 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-05-03 10:06:36 -04:00
Balazs Nagy
4ae29a449c
geoip: read source IP from EDNS0 subnet if provided ( #5183 )
...
* geoip: read source IP from EDNS0 subnet if provided
This patch implements EDNS backend processing (similar in powerdns: https://doc.powerdns.com/authoritative/settings.html#setting-edns-subnet-processing ). This feature comes very handy to test whether your geo config is working properly.
Signed-off-by: Balazs Nagy <julsevern@gmail.com >
2022-05-02 18:25:02 +01:00
Antoine Tollenaere
66f2ac7568
plugin/cache: Add refresh mode setting to serve_stale ( #5131 )
...
This PR adds an optional REFRESH_MODE parameter on the serve_stale configuration directive of the
cache plugin, which verifies that the upstream is still unavailable before returning stale entries.
Signed-off-by: Antoine Tollenaere <atollena@gmail.com >
2022-05-02 13:16:33 -04:00
Chris O'Haver
c4bc1a5471
plugin/cache: Fix cache poisoning exploit ( #5174 )
2022-05-01 05:57:03 -07:00
Chris O'Haver
5a4437bb23
plugin/bind: Fix listener collision notes in readme ( #5349 )
...
* clarify listener collision notes in readme
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
* formatting
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-04-28 10:06:15 -04:00
xuweiwei
c1857f4889
plugin/file: unified NoData result ( #5086 )
...
Signed-off-by: xuweiwei <xuweiwei_yewu@cmss.chinamobile.com >
2022-04-25 12:05:24 -04:00
Marius Kimmina
15e470ed24
add positive tests to TestTLS function ( #5330 )
...
Signed-off-by: Marius Kimmina <mar.kimmina@gmail.com >
2022-04-25 07:36:50 -07:00
Chris O'Haver
0e5d276125
plugin/template: fix rcode option documentation ( #5328 )
...
* docs: fix incorrect default rcode value, and reference source for valid values
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-04-23 16:51:56 -04:00
Ondřej Benkovský
a929b0b1ec
plugin/health : rework overloaded goroutine to support graceful shutdown ( #5244 )
...
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com >
2022-04-13 13:09:03 -04:00
hansedong
0622a6c66c
plugin/forward: configurable domain support for healthcheck ( #5281 )
...
* plugin/forward: configurable domain support for healthcheck
Signed-off-by: hansedong <admin@yinxiaoluo.com >
2022-04-12 12:39:48 -04:00
Chris O'Haver
e60c179194
plugin/k8s_external: Set authoritative bit in responses ( #5284 )
...
set authoritative bit in responses
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-04-12 11:01:15 -04:00
Yong Tang
882b2d913d
Update ACL plugin's README to capture the edge case ( #5311 )
...
* Update ACL plugin's README to capture the edge case
This PR adds a note in ACL plugin's README to capture the edge case
where source ip of the client may be different from the source ip
observed by coredns server (in situations such as Source NAT).
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Update plugin/acl/README.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com >
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Update plugin/acl/README.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com >
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
Co-authored-by: Chris O'Haver <cohaver@infoblox.com >
2022-04-07 12:09:44 -07:00
Yong Tang
c8844a8555
Replace io.LimitReader with http.MaxBytesReader ( #5241 )
...
Previously we use io.LimitReader to limit the number of bytes
from http request. However, there is a subtle difference between
io.LimitReader and io.ReadAll as io.LimitReader will return
a Reader, not a ReadCloser. As such the behavior will actually
be difference in case of error handling (and when to close).
This PR changes io.LimitReader to http.MaxBytesReader
so that the behavior can be preserved (except the number of bytes).
See https://stackoverflow.com/a/52699702
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2022-04-04 15:02:08 -04:00
Chris O'Haver
17fca59628
Comment reason for non-exact match in direct cname loop checks ( #5294 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-04-04 15:00:17 -04:00
Chris O'Haver
4d76faa4b4
plugin/etcd: Fix multi record TXT lookups ( #5293 )
...
* fix multi-record txt
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-04-04 14:59:16 -04:00
coredns[bot]
7b880386ce
auto go fmt
...
Signed-off-by: coredns[bot] <bot@bot.coredns.io >
2022-03-28 10:28:36 +00:00
Chris O'Haver
3df3147f8c
plugin/k8s_external: Persist tc bit from lookup to client response ( #4716 )
...
* persist reponse tc bit from lookup to client
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-03-25 13:50:23 -04:00
Yong Tang
90fd1ceb01
Avoid copy of large value in range ( #5243 )
2022-03-18 10:13:58 -07:00
Chris O'Haver
90680b7077
only warn when getting interface list fails ( #5272 )
...
Signed-off-by: Chris O'Haver <cohaver@infoblox.com >
2022-03-18 07:11:53 -07:00
Qasim Sarfraz
74b84a1377
update all +build statements ( #5271 )
...
* update all +build statements
Signed-off-by: MQasimSarfraz <syed.qasim.sarfraz@gmail.com >
* remove old +build style
Signed-off-by: MQasimSarfraz <syed.qasim.sarfraz@gmail.com >
2022-03-18 07:11:14 -07:00
xuweiwei
6788557507
plugin/file: add CAA record test case ( #5219 )
...
Signed-off-by: xuweiwei <xuweiwei_yewu@cmss.chinamobile.com >
2022-03-16 12:30:37 -04:00
Yong Tang
21fc65bfc8
[plugin/clouddns] Add additional doc in explaining credentials file field is optional ( #5231 )
...
This PR adds additional doc in explaining credentials file field is optional,
in case user might be concerned to save an filename location in Corefile.
Technically since Corefile does not save plaintext secret for clouddns
(unlikely route53/azure), this is not too big of a concern, as far as I can see.
Still it is worth to pointing out in documentation.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2022-03-16 12:28:25 -04:00
Yong Tang
aa7818e1d3
Update to avoid pseudo-random number ( #5225 )
...
* Update to avoid pseudo-random number
This PR update the usage of rand so that non-global seed is used.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Add concurrency-safe random source
See https://stackoverflow.com/questions/48958886/how-to-create-a-thread-safe-rand-source
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2022-03-16 12:24:58 -04:00
Yong Tang
54531d0a44
Clean up dependency on github.com/golang/protobuf ( #5222 )
...
This PR cldean up remaining left over of github.com/golang/protobuf in coredns,
as github.com/golang/protobuf has been deprecated.
Note the github.com/golang/protobuf is now only indirectly
used by external libraries. Manually updating coredns' dependency to futher clean up has been tried.
However, it was not possible as external library usages of github.com/golang/protobuf are too interleaved.
This PR fixes 4939.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2022-03-14 09:09:50 -07:00
coredns[bot]
74830b35fd
auto go fmt
...
Signed-off-by: coredns[bot] <bot@bot.coredns.io >
2022-03-14 10:28:20 +00:00