mirror of https://github.com/coredns/coredns.git synced 2025-12-20 09:05:14 -05:00

Files

Ville Vesilehto 0d8cbb1a6b Merge commit from fork

Add configurable resource limits to prevent potential DoS vectors
via connection/stream exhaustion on gRPC, HTTPS, and HTTPS/3 servers.

New configuration plugins:
- grpc_server: configure max_streams, max_connections
- https: configure max_connections
- https3: configure max_streams

Changes:
- Use netutil.LimitListener for connection limiting
- Use gRPC MaxConcurrentStreams and message size limits
- Add QUIC MaxIncomingStreams for HTTPS/3 stream limiting
- Set secure defaults: 256 max streams, 200 max connections
- Setting any limit to 0 means unbounded/fallback to previous impl

Defaults are applied automatically when plugins are omitted from
config.

Includes tests and integration tests.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

2025-12-17 19:08:59 -08:00

chaos_test.go

fix: remove unnecessary conversion (#6258 )

2023-08-14 15:14:09 +02:00

chaos.go

plugin/chaos: randomize author list (#2794 )

2019-04-23 23:21:28 +08:00

fuzz.go

update all +build statements (#5271 )

2022-03-18 07:11:14 -07:00

log_test.go

Clean up tests logging (#1979 )

2018-07-19 16:23:06 +01:00

README.md

typo fixes (#3169 )

2019-08-21 16:08:55 -04:00

setup_test.go

For caddy v1 in our org (#4018 )

2020-09-24 18:14:41 +02:00

setup.go

add golangci-lint linter (#5499 )

2022-07-10 11:06:33 -07:00

zowners.go

Merge commit from fork

2025-12-17 19:08:59 -08:00

README.md

chaos

Name

chaos - allows for responding to TXT queries in the CH class.

Description

This is useful for retrieving version or author information from the server by querying a TXT record for a special domain name in the CH class.

Syntax

chaos [VERSION] [AUTHORS...]

VERSION is the version to return. Defaults to CoreDNS-<version>, if not set.
AUTHORS is what authors to return. This defaults to all GitHub handles in the OWNERS files.

Note that you have to make sure that this plugin will get actual queries for the following zones: version.bind, version.server, authors.bind, hostname.bind and id.server.

Examples

Specify all the zones in full.

version.bind version.server authors.bind hostname.bind id.server {
    chaos CoreDNS-001 info@coredns.io
}

Or just default to .:

.  {
    chaos CoreDNS-001 info@coredns.io
}

And test with dig:

% dig @localhost CH TXT version.bind
...
;; ANSWER SECTION:
version.bind.		0	CH	TXT	"CoreDNS-001"
...