dependabot[bot]
f9dde873ea
build(deps): bump google.golang.org/api from 0.287.1 to 0.288.0 ( #8330 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.287.1 to 0.288.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.287.1...v0.288.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.288.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 22:08:42 +03:00
dependabot[bot]
6407da1d3a
build(deps): bump github.com/pires/go-proxyproto from 0.14.0 to 0.15.0 ( #8325 )
...
Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto ) from 0.14.0 to 0.15.0.
- [Release notes](https://github.com/pires/go-proxyproto/releases )
- [Commits](https://github.com/pires/go-proxyproto/compare/v0.14.0...v0.15.0 )
---
updated-dependencies:
- dependency-name: github.com/pires/go-proxyproto
dependency-version: 0.15.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 20:20:19 +03:00
dependabot[bot]
908c417901
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #8324 )
...
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.28 to 1.32.30.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.28...config/v1.32.30 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.30
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 20:12:38 +03:00
dependabot[bot]
0a5a142f25
build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 ( #8336 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.82.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.82.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 20:10:13 +03:00
dependabot[bot]
e2cfeeaecc
build(deps): bump github.com/aws/aws-sdk-go-v2/credentials ( #8326 )
...
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2 ) from 1.19.27 to 1.19.29.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.27...credentials/v1.19.29 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
dependency-version: 1.19.29
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 19:02:11 +03:00
dependabot[bot]
899eac64d5
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #8327 )
2026-07-22 17:07:59 +03:00
dependabot[bot]
5055bba5f5
build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 ( #8332 )
2026-07-22 17:07:18 +03:00
dependabot[bot]
658fef8ffb
build(deps): bump actions/stale from 10.3.0 to 10.4.0 ( #8333 )
2026-07-22 17:06:56 +03:00
dependabot[bot]
db7dac269b
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 ( #8323 )
2026-07-22 17:06:31 +03:00
dependabot[bot]
243191c774
build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 ( #8329 )
2026-07-22 17:06:07 +03:00
Yong Tang
e0a8eb8a46
Add max conn limit to https3 ( #8187 )
...
* Add max conn limit to https3
This PR adds max conn limit to https3, similiar to https
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Add Test to cover change
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Address review feedback
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Update README and setup
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Update plugin/https3/README.md
Co-authored-by: Ville Vesilehto <ville@vesilehto.fi >
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
---------
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
Co-authored-by: Ville Vesilehto <ville@vesilehto.fi >
2026-07-21 15:52:31 -07:00
Yong Tang
989a188d13
plugin/forward: Fix UDP forwarding so a malformed upstream datagram wont block valid ones later ( #8287 )
...
* plugin/plugin: Fix UDP forwarding so a malformed upstream datagram wont block valid ones later
This PR fixes UDP forwarding so a malformed upstream datagram
does not prevent CoreDNS from accepting a subsequent valid response
before the existing read deadline.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Address review and add additonal tests
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Cover branch
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
---------
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-21 15:21:25 -07:00
maximilize
d1a6ab0eb9
plugin/auto: fix inverted arguments in duplicate-origin warning ( #8317 )
...
The warning added in #8216 passed the skipped file where the kept file
belongs and vice versa, so it logged "using <skipped> instead of <kept>"
— the reverse of what Walk actually does. Swap the arguments (and use
cleanPath for both) so the message names the file that is being used.
Strengthen TestWalkWarnsForDuplicateOrigin to assert the direction; it
only checked that both names appeared, so the inversion passed before.
Signed-off-by: maximilize <3752128+maximilize@users.noreply.github.com >
2026-07-21 12:55:47 +03:00
Ville Vesilehto
0410236577
test(file): stabilize mtime reload ( #8318 )
...
Make mtime reload tests tolerate slow scheduling and coarse filesystem
timestamp resolution. This keeps immediate rewrites observable and
avoids checking zone contents before the reload completes.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2026-07-20 14:54:13 -07:00
houyuwushang
98bdb44f4d
plugin/hosts: make unsupported type fallthrough opt-in ( #8282 )
2026-07-19 19:59:12 -07:00
Yong Tang
201d86a098
core: Add connection-level concurrency limiting to DNS-over-QUIC ( #8213 )
...
* core: Add connection-level concurrency limiting to DNS-over-QUIC
This PR adds max connections to prevent unbounded connection goroutine growth
for DoQ
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Add test to cover change
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
---------
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-19 03:52:42 -07:00
Ville Vesilehto
077774e0cd
ci: run plugin tests on Windows ( #8314 )
...
Plugin package tests previously ran only on Linux, so Windows-
specific failures were never caught. Run them in CI and make the
affected tests portable across platforms.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2026-07-19 03:52:23 -07:00
Yong Tang
96ec17d5c6
plugin/forward: Fix incorrect retry of local DNS message serialization failures ( #8313 )
...
This PR fixes the forward plugin incorrectly retrying deterministic
local DNS message serialization failures as if they were upstream transport errors.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-19 03:48:00 -07:00
Ville Vesilehto
57f73b4a43
Merge commit from fork
...
Ensure DoH, DoH3, DoQ, and DNS-over-gRPC continue to reject RFC 2136
UPDATE requests before dispatch. This guards the common request
acceptance policy across every affected transport.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2026-07-18 20:36:05 -07:00
Ville Vesilehto
c1fe47bc3a
test(tls): make keylog path test portable ( #8311 )
...
Directory permission checks can be bypassed by privileged users and may
behave differently on filesystems with nonstandard permission semantics.
Make the bad-path case deterministic so TLS keylog tests remain portable
across supported environments.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2026-07-18 20:11:48 -07:00
Ncesam
e1f4d0cb90
plugin/rewrite: normalize exact cname rewrite targets and preserve all records ( #8285 )
...
Signed-off-by: ncesam <rybushkin09@bk.ru >
2026-07-15 18:06:03 -07:00
Ncesam
99b683aa41
plugin/transfer: collect all notify errors instead of shadowing ( #8283 )
...
* plugin/transfer: collect all notify errors instead of shadowing
Signed-off-by: ncesam <rybushkin09@bk.ru >
* plugin/transfer: add regression test for notify multiple failures
Signed-off-by: ncesam <rybushkin09@bk.ru >
---------
Signed-off-by: ncesam <rybushkin09@bk.ru >
2026-07-15 18:05:01 -07:00
Ville Vesilehto
530b0a5ff2
Merge commit from fork
...
DoH, DoQ, and DNS-over-gRPC unpack messages without the acceptance
checks used by UDP and TCP. An unauthenticated request with a large
QDCOUNT can therefore force excessive allocations while names are
decoded and exhaust server memory.
Enforce the same request policy across all server transports.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2026-07-15 17:54:46 -07:00
dependabot[bot]
d5e54040ff
build(deps): bump the go-etcd-io group with 2 updates ( #8292 )
...
Bumps the go-etcd-io group with 2 updates: [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd ) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd ).
Updates `go.etcd.io/etcd/api/v3` from 3.6.12 to 3.6.13
- [Release notes](https://github.com/etcd-io/etcd/releases )
- [Commits](https://github.com/etcd-io/etcd/compare/v3.6.12...v3.6.13 )
Updates `go.etcd.io/etcd/client/v3` from 3.6.12 to 3.6.13
- [Release notes](https://github.com/etcd-io/etcd/releases )
- [Commits](https://github.com/etcd-io/etcd/compare/v3.6.12...v3.6.13 )
---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/api/v3
dependency-version: 3.6.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-etcd-io
- dependency-name: go.etcd.io/etcd/client/v3
dependency-version: 3.6.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-etcd-io
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 23:03:41 +03:00
dependabot[bot]
a1aef3a70f
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #8294 )
...
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.26 to 1.32.28.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.26...config/v1.32.28 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.28
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 23:02:51 +03:00
dependabot[bot]
04280acbf4
build(deps): bump github.com/aws/aws-sdk-go-v2/credentials ( #8299 )
2026-07-15 12:15:08 -07:00
dependabot[bot]
8fe5801bf1
build(deps): bump google.golang.org/api from 0.280.0 to 0.287.1 ( #8295 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.280.0 to 0.287.1.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.280.0...v0.287.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.287.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 07:30:23 -07:00
dependabot[bot]
621eb4d05b
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #8301 )
...
Bumps [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2 ) from 1.42.4 to 1.43.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/amp/v1.42.4...service/s3/v1.43.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
dependency-version: 1.43.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 07:29:59 -07:00
dependabot[bot]
751e0c25e7
build(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds ( #8303 )
...
Bumps [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2 ) from 1.18.29 to 1.18.30.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.29...config/v1.18.30 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
dependency-version: 1.18.30
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 07:29:35 -07:00
dependabot[bot]
92f677c89c
build(deps): bump github.com/pires/go-proxyproto from 0.13.0 to 0.14.0 ( #8304 )
...
Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto ) from 0.13.0 to 0.14.0.
- [Release notes](https://github.com/pires/go-proxyproto/releases )
- [Commits](https://github.com/pires/go-proxyproto/compare/v0.13.0...v0.14.0 )
---
updated-dependencies:
- dependency-name: github.com/pires/go-proxyproto
dependency-version: 0.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 07:29:03 -07:00
dependabot[bot]
ccc7745f2e
build(deps): bump sigs.k8s.io/mcs-api from 0.5.0 to 0.5.1 ( #8308 )
...
Bumps [sigs.k8s.io/mcs-api](https://github.com/kubernetes-sigs/mcs-api ) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/kubernetes-sigs/mcs-api/releases )
- [Changelog](https://github.com/kubernetes-sigs/mcs-api/blob/master/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/mcs-api/compare/v0.5.0...v0.5.1 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/mcs-api
dependency-version: 0.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 07:28:39 -07:00
dependabot[bot]
f76b78c8a9
build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.42.1 ( #8305 )
...
Bumps [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2 ) from 1.42.0 to 1.42.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.42.0...v1.42.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
dependency-version: 1.42.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 17:02:55 +03:00
dependabot[bot]
9d831348f9
build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 ( #8297 )
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 8.2.0 to 8.3.2.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](fac544c07d...11f9893b08support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 17:02:41 +03:00
dependabot[bot]
36e802a6df
build(deps): bump docker/login-action from 4.2.0 to 4.4.0 ( #8298 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](650006c6eb...af1e73f918support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 17:02:25 +03:00
dependabot[bot]
c6191e2bf1
build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 ( #8307 )
...
Bumps [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2 ) from 1.63.4 to 1.64.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ecs/v1.63.4...service/s3/v1.64.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/route53
dependency-version: 1.64.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 17:01:38 +03:00
dependabot[bot]
2bff8bb74e
build(deps): bump github/codeql-action/upload-sarif ( #8296 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...99df26d4f1support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:54:25 +03:00
dependabot[bot]
f4e55c166e
build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 ( #8300 )
...
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...99df26d4f1support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:54:01 +03:00
dependabot[bot]
035b553840
build(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 ( #8293 )
...
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...99df26d4f1support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:53:38 +03:00
dependabot[bot]
6829a7308f
build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.0 ( #8302 )
...
Bumps [github/codeql-action/init](https://github.com/github/codeql-action ) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8aad20d150...99df26d4f1support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:52:58 +03:00
Yong Tang
18a58b9e89
plugin/acl: Fix autopath from bypassing acl checks ( #8290 )
...
This fix prevents CoreDNS `autopath` from bypassing `acl` checks
when it rewrites an allowed query into a name within an ACL-protected zone.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-14 22:36:06 -07:00
Yong Tang
1ba14119d0
plugin/acl: Fix blocked clients from receiving cached DNS answers ( #8289 )
...
This PR fixes plugin ordering so ACL checks run before cache lookups,
preventing blocked clients from receiving cached DNS answers populated by allowed clients
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-14 22:26:49 -07:00
houyuwushang
7cd99da013
plugin/secondary: reset catalog members on ID change ( #8281 )
...
Signed-off-by: houyuwushang <liuluoqianqiu@outlook.com >
2026-07-14 18:51:12 -07:00
Yong Tang
5131b8f944
plugin/proxyproto: Apply an explicitly configured default policy evenwhen no allow list is present. ( #8278 )
...
* plugin/proxyproto: Apply an explicitly configured default policy even when no allow list is present.
This PR fix the issue where explicitly configured default reject policy
is ignoreed when no allo list is present
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* golint fix
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
---------
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-13 17:34:30 -07:00
Yong Tang
e16e829181
plugin/forward: Fix issue in DoH health checks used a default TLS instead of the configured CA ( #8279 )
...
This PR fixes issue in forward plugin where default TLS instead of
configured CA was used.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-13 17:34:18 -07:00
Yong Tang
4ebf66a74e
plugin/forward: Fix incorrect failover counter reset ( #8277 )
...
* plugin/forward: Fix incorrect failover counter reset
This PR fixes the isseue where resetting the failover counter caused
retry the same upstreams until timeout instead of stopping after one pass.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* golint fix
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
---------
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-13 17:34:06 -07:00
Yong Tang
e5053d50ad
plugin/file: Fix panic on zero-valued SOA refresh ( #8276 )
...
This PR fixes panic with zero-valued SOA refresh
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-13 17:33:51 -07:00
Omkhar Arasaratnam
38e26f25c4
plugin/file: do not expand wildcard across a closer empty non-terminal ( #8223 )
...
A query for a name that sits below a closer empty non-terminal was wrongly
answered with a shallower wildcard record instead of NXDOMAIN. Per RFC 4592
2.2.1 a wildcard is the source of synthesis only when the wildcard owner's
parent is the closest encloser of the queried name; if an empty non-terminal
exists between that parent and the queried name, it is the closer encloser and
the shallower wildcard must not be expanded.
Guard the wildcard expansion in Zone.Lookup with closerENTExists, which walks
the strict ancestors of the queried name between the wildcard parent and the
name and reports whether any of them is an empty non-terminal.
Adds TestLookupWildcardRespectsCloserEmptyNonTerminal, which asserts NXDOMAIN
for a name below a closer empty non-terminal and keeps a no-regression case
where a plain wildcard with no closer empty non-terminal still applies.
Signed-off-by: Omkhar Arasaratnam <omkhar@linkedin.com >
Co-authored-by: Omkhar Arasaratnam <omkhar@linkedin.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-11 03:03:52 -07:00
Nikolaus Schuetz
af1e34ebc8
test: poll instead of fixed sleeps across several tests ( #8275 )
...
Several tests slept a fixed duration then took a single snapshot of an
async result, racing whatever they waited on:
- forward health tests waited 20ms for the health-check goroutine to bump
an atomic counter,
- the auto plugin tests (dns + metrics) waited 50-110ms for a file-watch
reload to be picked up,
- the file ZoneReload test waited 30ms (self-described as could still be
racy) for a reload,
- the overloaded health test slept 1s for its background goroutine to fire
its first request.
Replace each with a bounded poll of the actual condition (the atomic
counter, a dns.Exchange response, a metrics scrape, z.ApexIfDefined, or a
channel signalled by the test's own handler) so they pass as soon as the
awaited state is reached and no longer flake when it is slower than the
fixed wait. Test-only.
Signed-off-by: Nikolaus Schuetz <nikolauspschuetz@gmail.com >
2026-07-10 15:20:57 -07:00
houyuwushang
6ec70a0603
request/cache: bind responses and entries to QCLASS ( #8272 )
...
Signed-off-by: houyuwushang <liuluoqianqiu@outlook.com >
2026-07-10 15:18:27 -07:00
Yong Tang
2d42f0e8f5
Enforce doker build test ( #8271 )
...
This PR enforce docker-build test so that every PR will check to make
sure the docker build (which reliesd on if base image, binary, etc
are still correct), is actually available and working.
Note previously, we only check a dry run of docker push, but not actually
build the docker image (as binary was fetched from release version on github).
This PR fetch local binary build instead as there maynot be the same in different
release versions of binary.
This is related 8228
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-07-10 00:24:39 -07:00
