aboutsummaryrefslogtreecommitdiff
path: root/plugin (follow)
AgeCommit message (Collapse)AuthorFilesLines
2023-08-10Fix typos (#6235)Gravatar Zhizhen He 11-14/+15
* Fix typos and add todo to fix spelling of dnsutil.MaximumDefaulTTL Signed-off-by: Zhizhen He <hezhizhen.yi@gmail.com>
2023-08-09fix keepttl parsing (#6250)Gravatar Chris O'Haver 1-0/+1
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2023-07-31[RFC-9250]: Add QUIC server support (#6182)Gravatar João Henri 5-0/+17
Add DNS-over-QUIC server Signed-off-by: jaehnri <joao.henri.cr@gmail.com> Signed-off-by: João Henri <joao.henri.cr@gmail.com>
2023-07-30implement Name function on secondary plugin (#6230)Gravatar Diogenes Pelisson 1-0/+3
Signed-off-by: Diogenes Pelisson <diogenes.pelisson@gmail.com>
2023-07-10Change default value to 1232 (#6183)Gravatar Petr Menšík 3-10/+16
* Change default value to 1232 As specified by DNS flag day 2020, good and decent default value avoiding fragmentation issues should be 1232. It is quite likely 1500 would work reliably on local ethernet networks. Value 512 is set implicitly and must be used for all clients, which did not include OPT RR with explicit value they support. Since MR #5368 it should work correctly. Signed-off-by: Petr Menšík <pemensik@redhat.com> * Adapt bufsize test to new default value Check also buffer size smaller than legacy value is not accepted. Signed-off-by: Petr Menšík <pemensik@redhat.com> * Update bufsize documentation Mention also increasing request size is not possible, it can only reduce the accepted size. Signed-off-by: Petr Menšík <pemensik@redhat.com> --------- Signed-off-by: Petr Menšík <pemensik@redhat.com>
2023-07-04Fix forward metrics for backwards compatibility (#6178)Gravatar Pat Downey 14-78/+87
2023-06-26fix ports panic (#6179)Gravatar rokkiter 1-2/+13
Signed-off-by: rokkiter <101091030+rokkiter@users.noreply.github.com>
2023-06-19plugin/kubernetes: filter ExternalName services from matching double ↵Gravatar Dan Wilson 2-2/+10
subdomain wildcard (#6162) remove double subdomain reference from review feedback not subdoman Signed-off-by: emaildanwilson <dan@controlplane.com> Co-authored-by: emaildanwilson <dan@controlplane.com>
2023-06-17test: use `t.TempDir` to create temporary test directory (#6164)Gravatar Eng Zer Jun 5-51/+24
2023-06-12plugin/kubernetes: Remove Endpoint and EndpointSlice v1beta Support (#6147)Gravatar Chris O'Haver 4-276/+1
* remove endpoint and endpointslicev1beta watch support Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * adjust readme Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * informer object changes Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * remove unused funcs Signed-off-by: Chris O'Haver <cohaver@infoblox.com> --------- Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2023-06-09replace reviewdog fully by golangci-lint (#6139)Gravatar Ondřej Benkovský 14-118/+119
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2023-06-07plugin/kubernetes: fix headless/endpoint query panics when endpoints are ↵Gravatar Chris O'Haver 2-50/+119
disabled (#6137) * always create listers, so we dont panic Signed-off-by: Chris O'Haver <cohaver@infoblox.com> --------- Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2023-06-01Revert "plugin/tls: respect the path specified by root plugin (#5944)" (#6136)Gravatar Chris O'Haver 4-26/+2
This reverts commit d0375bc0269eccb1966ccf38a9b43263d551dee4.
2023-06-01plugin/tls: respect the path specified by root plugin (#5944)Gravatar Marius Kimmina 4-2/+26
Signed-off-by: Marius Kimmina <mar.kimmina@gmail.com>
2023-05-29refactor: use standard library instead of `isIn` (#6125)Gravatar yyzxw 1-12/+3
Signed-off-by: yyzxw <1020938856@qq.com> Signed-off-by: xiaowu.zhu <xiaowu.zhu@daocloud.io>
2023-05-26plugin/forward: fix descriptions in README.md (#6123)Gravatar Justin 1-3/+3
Signed-off-by: Justin <cattyhouse@users.noreply.github.com>
2023-05-26add support unix socket for GRPC (#5943)Gravatar junhwong 7-1/+91
2023-05-25fuzz: fix forward plugin target (#6115)Gravatar Catena cyber 1-2/+3
Signed-off-by: Philippe Antoine <contact@catenacyber.fr>
2023-05-04Bump golang to 1.20.0 (#6070)Gravatar Ayato Tokubi 1-1/+1
Signed-off-by: Ayato Tokubi <atokubi@redhat.com>
2023-05-03Fix temp file close error (#6068)Gravatar Ben Kochie 1-7/+5
Avoid Go 1.20 test error by not attempting to close the testing temp file unless there was an error in Read(). * Use a CreateTemp() to create unique test files. * Defer the deletion of the temp file. Woarkaround for: https://github.com/golang/go/issues/59938 Signed-off-by: SuperQ <superq@gmail.com>
2023-04-29plugin/forward: Continue waiting after receiving malformed responses (#6014)Gravatar Chris O'Haver 1-2/+12
* forward: continue waiting after malformed responses Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * add test Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * fix test Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * clean up Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * clean up Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * move test to /test/. Add build tag. Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * install libpcap-dev for e2e tests Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * sudo the test Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * remove stray err check Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * disable the test Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * use -exec flag to run test binary as root Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * run new test by itself in a new workflow Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * fix test name Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * only for udp Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * remove libpcap test workflow action Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * remove test, since it cant run in ci Signed-off-by: Chris O'Haver <cohaver@infoblox.com> * and remove gopacket package Signed-off-by: Chris O'Haver <cohaver@infoblox.com> --------- Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2023-04-25plugin/kubernetes: rename client-go metrics label "url" to "host" (#6040)Gravatar Yashpal 2-9/+9
2023-04-25fix some comments (#6052)Gravatar cui fliter 3-4/+4
Signed-off-by: cui fliter <imcusg@gmail.com>
2023-04-25Fix typo (#6053)Gravatar Dan Salmon 1-1/+1
2023-04-22plugin/dnssec: on delegation, sign DS or NSEC of no DS. (#5899)Gravatar jeremiejig 5-9/+365
* When returning NS for delegation point, we sign any DS Record or if not found we generate a NSEC proving absence of DS. This follow behaviour describe in rfc4035 (Section 3.1.4) * DS request at apex behave as before. * Fix edge case of requesting NSEC which prove that NSEC does not exist. Signed-off-by: Jeremiejig <me@jeremiejig.fr>
2023-04-22plugin/kubernetes: expose client-go internal request metrics (#5991)Gravatar Yashpal 2-0/+79
2023-04-20update informer for client-go 0.27 (#6038)Gravatar Chris O'Haver 3-7/+7
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2023-04-16Prevent fail counter of a proxy overflows (#5990)Gravatar Vancl 3-1/+42
Signed-off-by: vanceli <vanceli@tencent.com> Signed-off-by: Vance Li <vncl@YingyingM1.local> Co-authored-by: vanceli <vanceli@tencent.com>
2023-04-13[rewrite] Introduce cname target rewrite rule to rewrite plugin (#6004)Gravatar Amila Senadheera 7-5/+362
* cname target rewrite part in answer sec tion Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * upstream request Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * fix looping issue Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * support exact, prefix, suffix, substring, and regex types for cname rewrite Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * support any qtype, corrected prefix, suffix, substring types behavior Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * unit tests added, mocked the upstream call Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * fix lint errors Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * add newline to fix test issue Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * add default rewrite type, add readme Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * readme grammar fix Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * reuse rewrite types Signed-off-by: amila <amila.15@cse.mrt.ac.lk> * comment fixed Signed-off-by: amila <amila.15@cse.mrt.ac.lk> --------- Signed-off-by: amila <amila.15@cse.mrt.ac.lk>
2023-03-29plugin/health: Poll localhost by default (#5934)Gravatar W. Trevor King 3-7/+29
defaulting to localhost makes things explicit in CoreDNS code, and will give us valid URIs in the logs Signed-off-by: W. Trevor King <wking@tremily.us>
2023-03-24plugin/forward: Allow Proxy to be used outside of forward plugin. (#5951)Gravatar Pat Downey 19-210/+529
* plugin/forward: Move Proxy into pkg/plugin/proxy, to allow forward.Proxy to be used outside of forward plugin. Signed-off-by: Patrick Downey <patrick.downey@dioadconsulting.com>
2023-03-24plugin/k8s_extenral: Supports fallthrough option (#5959)Gravatar Vancl 4-22/+66
* Add fallthrough option to k8s_external plugin to allow transitioning control to the next plugin if the domain is not found * Exit on start up if required plugin is not present. Signed-off-by: vanceli <vanceli@tencent.com> --------- Signed-off-by: vanceli <vanceli@tencent.com> Co-authored-by: vanceli <vanceli@tencent.com>
2023-03-23fix: clouddns plugin answers limited to one response (#5986)Gravatar Marcos Mendez 2-3/+23
* inserts all records in the loop. checks for insert errors. adds test. fixes #5985 Signed-off-by: Marcos Mendez <marcos_mendez@homedepot.com>
2023-03-03DoH: Allow http as the protocol (#5762)Gravatar Sebastian Dahlgren 2-44/+55
This change avoids the hard coding of HTTPS, allowing flexibility in whether HTTP or HTTPS is used. Signed-off-by: Sebastian Dahlgren <sebdah@fb.com>
2023-02-20dnstap tls support (#5917)Gravatar Denis MACHARD 4-6/+52
Signed-off-by: dmachard <5562930+dmachard@users.noreply.github.com>
2023-02-15send notifies after adding zones all zones (#5774)Gravatar Chris O'Haver 4-5/+21
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2023-02-15plugin/loadbalance: Improve weights update (#5906)Gravatar Gabor Dozsa 2-20/+26
Don't lock weights for duration of parsing weight file. Add missing check to reject zero weight values. Signed-off-by: Gabor Dozsa <gabor.dozsa@ibm.com>
2023-02-10fix typo for log output (#5909)Gravatar Fish-pro 1-1/+1
Signed-off-by: Fish-pro <zechun.chen@daocloud.io>
2023-02-09Use http constants instead of string (#5908)Gravatar Fish-pro 4-7/+7
Signed-off-by: Fish-pro <zechun.chen@daocloud.io>
2023-01-30plugin/forward: fix broken tap plugins when dnstap plugins specified (#5890)Gravatar Gerhard Tan 5-13/+60
* plugin/forward: fix broken tap plugins when dnstap plugins specified --------- Signed-off-by: Gerhard Tan <gwohau.tan@gmail.com>
2023-01-27Add weighted-round-robin policy to loadbalance plugin (#5662)Gravatar Gabor Dozsa 8-36/+975
* Add weighted-round-robin policy to loadbalance plugin Signed-off-by: Gabor Dozsa <gabor.dozsa@ibm.com>
2023-01-27plugin/cache: add a new keepttl option (#5879)Gravatar Arthur Outhenin-Chalandre 6-1/+87
adds a new option `keepttl` to the cache plugin Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-01-11plugin/etcd: update documentation (#5847)Gravatar Vico Chu 1-1/+1
Signed-off-by: Vico Chu <vico24826@gmail.com> Signed-off-by: Vico Chu <vico24826@gmail.com>
2022-12-28plugin/timeouts - Allow ability to configure listening server timeouts (#5784)Gravatar Rich 5-0/+297
2022-12-13Drop obsolete client-go auth plugins (#5806)Gravatar Stephen Kitt 1-3/+1
* Drop obsolete client-go auth plugins The OpenStack plugin is no longer available, even in version 0.24.4 of client-go; see https://github.com/kubernetes/client-go/blob/v0.24.4/plugin/pkg/client/auth/openstack/openstack_stub.go It is replaced by the client-keystone-auth credential plugin. The plugin has been entirely removed in client-go 0.26.0, which breaks the build when any other dependency pulls in client-go 0.26.0 or later. The GCP plugin is deprecated in K8s 1.22+ and unavailable in 1.26+ (although it is still stubbed in client-go 0.26.0). Is it replaced by the gke-gcloud-auth-plugin credential plugin. Signed-off-by: Stephen Kitt <skitt@redhat.com> * Update plugin/kubernetes/setup.go Signed-off-by: Stephen Kitt <skitt@redhat.com> Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
2022-12-13plugin/kubernetes: error NXDOMAIN for TXT lookups (#5737)Gravatar LAMRobinson 2-5/+29
plugin/kubernetes: fix NXDOMAIN/NOERROR responses for TXT queries Signed-off-by: Laurence Robinson <laurence_robinson@live.co.uk> Co-authored-by: Laurence Robinson <laurence.robinson@deshaw.com>
2022-12-07plugin/geoip: Add GLSB example (#5795)Gravatar Chris O'Haver 1-0/+21
* add glsb example Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-12-01plugin/edns: remove truncating of question section on bad EDNS version (#5787)Gravatar Ben Kaplan 2-6/+15
* plugin/edns: remove truncating of question section on bad EDNS version EDNS requests of "Unknown Version" removed the query section altogether. Not sure why since this is not require (see [link](https://kb.isc.org/docs/edns-compatibility-dig-queries) This cause issues with DNS solutions that uses this information (initial queried name, type and class) in order to route the response to the right client (e.g. PDNS). The change here is to keep the inital query section as is. Signed-off-by: Ben Kaplan <ben.kaplan@redis.com> * adding tests for edns0 version check Signed-off-by: Ben Kaplan <ben.kaplan@redis.com> * adding tests for non-edns0 version check Signed-off-by: Ben Kaplan <ben.kaplan@redis.com> Signed-off-by: Ben Kaplan <ben.kaplan@redis.com>
2022-11-28plugin/dnstap: Fix behavior when multiple dnstap plugins specified (#5773)Gravatar Chris O'Haver 6-119/+218
* fix multiple dnstap plugins behavior Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-11-04dont match external services when endpoint is specified (#5734)Gravatar Chris O'Haver 2-8/+20
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>