mirror of
https://github.com/coredns/coredns.git
synced 2025-12-21 17:45:15 -05:00
0d8cbb1a6b
Add configurable resource limits to prevent potential DoS vectors via connection/stream exhaustion on gRPC, HTTPS, and HTTPS/3 servers. New configuration plugins: - grpc_server: configure max_streams, max_connections - https: configure max_connections - https3: configure max_streams Changes: - Use netutil.LimitListener for connection limiting - Use gRPC MaxConcurrentStreams and message size limits - Add QUIC MaxIncomingStreams for HTTPS/3 stream limiting - Set secure defaults: 256 max streams, 200 max connections - Setting any limit to 0 means unbounded/fallback to previous impl Defaults are applied automatically when plugins are omitted from config. Includes tests and integration tests. Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
80 lines
1.4 KiB
INI
80 lines
1.4 KiB
INI
# Directives are registered in the order they should be executed.
|
|
#
|
|
# Ordering is VERY important. Every plugin will feel the effects of all other
|
|
# plugin below (after) them during a request, but they must not care what plugin
|
|
# above them are doing.
|
|
|
|
# How to rebuild with updated plugin configurations: Modify the list below and
|
|
# run `go generate && go build`
|
|
|
|
# The parser takes the input format of:
|
|
#
|
|
# <plugin-name>:<package-name>
|
|
# Or
|
|
# <plugin-name>:<fully-qualified-package-name>
|
|
#
|
|
# External plugin example:
|
|
#
|
|
# log:github.com/coredns/coredns/plugin/log
|
|
# Local plugin example:
|
|
# log:log
|
|
|
|
root:root
|
|
metadata:metadata
|
|
geoip:geoip
|
|
cancel:cancel
|
|
tls:tls
|
|
quic:quic
|
|
grpc_server:grpc_server
|
|
https:https
|
|
https3:https3
|
|
timeouts:timeouts
|
|
multisocket:multisocket
|
|
reload:reload
|
|
nsid:nsid
|
|
bufsize:bufsize
|
|
bind:bind
|
|
debug:debug
|
|
trace:trace
|
|
ready:ready
|
|
health:health
|
|
pprof:pprof
|
|
prometheus:metrics
|
|
errors:errors
|
|
log:log
|
|
dnstap:dnstap
|
|
local:local
|
|
dns64:dns64
|
|
acl:acl
|
|
any:any
|
|
chaos:chaos
|
|
loadbalance:loadbalance
|
|
tsig:tsig
|
|
cache:cache
|
|
rewrite:rewrite
|
|
header:header
|
|
dnssec:dnssec
|
|
autopath:autopath
|
|
minimal:minimal
|
|
template:template
|
|
transfer:transfer
|
|
hosts:hosts
|
|
route53:route53
|
|
azure:azure
|
|
clouddns:clouddns
|
|
k8s_external:k8s_external
|
|
kubernetes:kubernetes
|
|
file:file
|
|
auto:auto
|
|
secondary:secondary
|
|
etcd:etcd
|
|
loop:loop
|
|
forward:forward
|
|
grpc:grpc
|
|
erratic:erratic
|
|
whoami:whoami
|
|
on:github.com/coredns/caddy/onevent
|
|
sign:sign
|
|
view:view
|
|
nomad:nomad
|