mirror of
https://github.com/coredns/coredns.git
synced 2026-07-24 00:20:15 -04:00
e0a8eb8a46
* Add max conn limit to https3 This PR adds max conn limit to https3, similiar to https Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Add Test to cover change Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Address review feedback Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Update README and setup Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Update plugin/https3/README.md Co-authored-by: Ville Vesilehto <ville@vesilehto.fi> Signed-off-by: Yong Tang <yong.tang.github@outlook.com> --------- Signed-off-by: Yong Tang <yong.tang.github@outlook.com> Co-authored-by: Ville Vesilehto <ville@vesilehto.fi>
50 lines
1.3 KiB
Markdown
50 lines
1.3 KiB
Markdown
# https3
|
|
|
|
## Name
|
|
|
|
*https3* - configures DNS-over-HTTPS/3 (DoH3) server options.
|
|
|
|
## Description
|
|
|
|
The *https3* plugin allows you to configure parameters for the DNS-over-HTTPS/3 (DoH3) server to fine-tune the security posture and performance of the server. HTTPS/3 uses QUIC as the underlying transport.
|
|
|
|
This plugin can only be used once per HTTPS3 listener block.
|
|
|
|
## Syntax
|
|
|
|
```txt
|
|
https3 {
|
|
max_streams POSITIVE_INTEGER
|
|
max_connections POSITIVE_INTEGER
|
|
}
|
|
```
|
|
|
|
* `max_streams` limits the number of concurrent QUIC streams per connection. This helps prevent unbounded streams on a single connection, exhausting server resources. The default value is 256 if not specified. Set to 0 to use underlying QUIC transport default.
|
|
* `max_connections` limits the number of concurrent HTTPS/3 connections accepted by the server. The default value is 200 if not specified. Connections above the configured limit are rejected. Set to 0 to disable the CoreDNS connection limit.
|
|
|
|
## Examples
|
|
|
|
Set custom limits for maximum streams:
|
|
|
|
```
|
|
https3://.:443 {
|
|
tls cert.pem key.pem
|
|
https3 {
|
|
max_streams 50
|
|
}
|
|
whoami
|
|
}
|
|
```
|
|
|
|
Set values to 0 for QUIC transport default, matching CoreDNS behaviour before v1.14.0:
|
|
|
|
```
|
|
https3://.:443 {
|
|
tls cert.pem key.pem
|
|
https3 {
|
|
max_streams 0
|
|
}
|
|
whoami
|
|
}
|
|
```
|