diff options
| author |  OctoHuman <17958767+OctoHuman@users.noreply.github.com>
| 2021-11-22 01:49:13 -0600 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2021-11-22 08:49:13 +0100 |
| commit | 29f6d0a6b20e9f3e7509867d932f11efd443c72b (patch) | |
| tree | 78444668cd3079dbc302d93426403f6d470c36a3 /plugin/forward/README.md | |
| parent | a9d9d2b71e59a25df1575cd2534ea289a11ce90a (diff) | |
| download | coredns-29f6d0a6b20e9f3e7509867d932f11efd443c72b.tar.gz coredns-29f6d0a6b20e9f3e7509867d932f11efd443c72b.tar.zst coredns-29f6d0a6b20e9f3e7509867d932f11efd443c72b.zip | |
Docs: Add warning to use tls_servername (#4992)
Signed-off-by: OctoHuman <17958767+OctoHuman@users.noreply.github.com>
Diffstat (limited to 'plugin/forward/README.md')
| -rw-r--r-- | plugin/forward/README.md | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/plugin/forward/README.md b/plugin/forward/README.md index 8bc0e2c8b..892701f70 100644 --- a/plugin/forward/README.md +++ b/plugin/forward/README.md @@ -79,7 +79,9 @@ forward FROM TO... { * `tls_servername` **NAME** allows you to set a server name in the TLS configuration; for instance 9.9.9.9 needs this to be set to `dns.quad9.net`. Multiple upstreams are still allowed in this scenario, but they have to use the same `tls_servername`. E.g. mixing 9.9.9.9 (QuadDNS) with 1.1.1.1 - (Cloudflare) will not work. + (Cloudflare) will not work. Using TLS forwarding but not setting `tls_servername` results in anyone + being able to man-in-the-middle your connection to the DNS server you are forwarding to. Because of this, + it is strongly recommended to set this value when using TLS forwarding. * `policy` specifies the policy to use for selecting upstream servers. The default is `random`. * `random` is a policy that implements random upstream selection. * `round_robin` is a policy that selects hosts based on round robin ordering. |