mirror of
				https://github.com/coredns/coredns.git
				synced 2025-10-29 01:04:15 -04:00 
			
		
		
		
	This adds an online dnssec middleware. The middleware will sign responses on the fly. Negative responses are signed with NSEC black lies.
		
			
				
	
	
		
			74 lines
		
	
	
		
			1.9 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			74 lines
		
	
	
		
			1.9 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| package cache
 | |
| 
 | |
| import (
 | |
| 	"github.com/miekg/coredns/middleware"
 | |
| 
 | |
| 	"github.com/miekg/dns"
 | |
| 	"github.com/prometheus/client_golang/prometheus"
 | |
| 	"golang.org/x/net/context"
 | |
| )
 | |
| 
 | |
| // ServeDNS implements the middleware.Handler interface.
 | |
| func (c Cache) ServeDNS(ctx context.Context, w dns.ResponseWriter, r *dns.Msg) (int, error) {
 | |
| 	state := middleware.State{W: w, Req: r}
 | |
| 
 | |
| 	qname := state.Name()
 | |
| 	qtype := state.QType()
 | |
| 	zone := middleware.Zones(c.Zones).Matches(qname)
 | |
| 	if zone == "" {
 | |
| 		return c.Next.ServeDNS(ctx, w, r)
 | |
| 	}
 | |
| 
 | |
| 	do := state.Do() // might need more from OPT record?
 | |
| 
 | |
| 	if i, ok := c.get(qname, qtype, do); ok {
 | |
| 		resp := i.toMsg(r)
 | |
| 		state.SizeAndDo(resp)
 | |
| 		w.WriteMsg(resp)
 | |
| 
 | |
| 		cacheHitCount.WithLabelValues(zone).Inc()
 | |
| 		return dns.RcodeSuccess, nil
 | |
| 	}
 | |
| 	cacheMissCount.WithLabelValues(zone).Inc()
 | |
| 
 | |
| 	crr := NewCachingResponseWriter(w, c.cache, c.cap)
 | |
| 	return c.Next.ServeDNS(ctx, crr, r)
 | |
| }
 | |
| 
 | |
| func (c Cache) get(qname string, qtype uint16, do bool) (*item, bool) {
 | |
| 	nxdomain := nameErrorKey(qname, do)
 | |
| 	if i, ok := c.cache.Get(nxdomain); ok {
 | |
| 		return i.(*item), true
 | |
| 	}
 | |
| 
 | |
| 	// TODO(miek): delegation was added double check
 | |
| 	successOrNoData := successKey(qname, qtype, do)
 | |
| 	if i, ok := c.cache.Get(successOrNoData); ok {
 | |
| 		return i.(*item), true
 | |
| 	}
 | |
| 	return nil, false
 | |
| }
 | |
| 
 | |
| var (
 | |
| 	cacheHitCount = prometheus.NewCounterVec(prometheus.CounterOpts{
 | |
| 		Namespace: middleware.Namespace,
 | |
| 		Subsystem: subsystem,
 | |
| 		Name:      "hit_count_total",
 | |
| 		Help:      "Counter of DNS requests that were found in the cache.",
 | |
| 	}, []string{"zone"})
 | |
| 
 | |
| 	cacheMissCount = prometheus.NewCounterVec(prometheus.CounterOpts{
 | |
| 		Namespace: middleware.Namespace,
 | |
| 		Subsystem: subsystem,
 | |
| 		Name:      "miss_count_total",
 | |
| 		Help:      "Counter of DNS requests that were not found in the cache.",
 | |
| 	}, []string{"zone"})
 | |
| )
 | |
| 
 | |
| const subsystem = "cache"
 | |
| 
 | |
| func init() {
 | |
| 	prometheus.MustRegister(cacheHitCount)
 | |
| 	prometheus.MustRegister(cacheMissCount)
 | |
| }
 |