aboutsummaryrefslogtreecommitdiff
path: root/plugin (follow)
AgeCommit message (Collapse)AuthorFilesLines
2023-01-11plugin/etcd: update documentation (#5847)Gravatar Vico Chu 1-1/+1
Signed-off-by: Vico Chu <vico24826@gmail.com> Signed-off-by: Vico Chu <vico24826@gmail.com>
2022-12-28plugin/timeouts - Allow ability to configure listening server timeouts (#5784)Gravatar Rich 5-0/+297
2022-12-13Drop obsolete client-go auth plugins (#5806)Gravatar Stephen Kitt 1-3/+1
* Drop obsolete client-go auth plugins The OpenStack plugin is no longer available, even in version 0.24.4 of client-go; see https://github.com/kubernetes/client-go/blob/v0.24.4/plugin/pkg/client/auth/openstack/openstack_stub.go It is replaced by the client-keystone-auth credential plugin. The plugin has been entirely removed in client-go 0.26.0, which breaks the build when any other dependency pulls in client-go 0.26.0 or later. The GCP plugin is deprecated in K8s 1.22+ and unavailable in 1.26+ (although it is still stubbed in client-go 0.26.0). Is it replaced by the gke-gcloud-auth-plugin credential plugin. Signed-off-by: Stephen Kitt <skitt@redhat.com> * Update plugin/kubernetes/setup.go Signed-off-by: Stephen Kitt <skitt@redhat.com> Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
2022-12-13plugin/kubernetes: error NXDOMAIN for TXT lookups (#5737)Gravatar LAMRobinson 2-5/+29
plugin/kubernetes: fix NXDOMAIN/NOERROR responses for TXT queries Signed-off-by: Laurence Robinson <laurence_robinson@live.co.uk> Co-authored-by: Laurence Robinson <laurence.robinson@deshaw.com>
2022-12-07plugin/geoip: Add GLSB example (#5795)Gravatar Chris O'Haver 1-0/+21
* add glsb example Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-12-01plugin/edns: remove truncating of question section on bad EDNS version (#5787)Gravatar Ben Kaplan 2-6/+15
* plugin/edns: remove truncating of question section on bad EDNS version EDNS requests of "Unknown Version" removed the query section altogether. Not sure why since this is not require (see [link](https://kb.isc.org/docs/edns-compatibility-dig-queries) This cause issues with DNS solutions that uses this information (initial queried name, type and class) in order to route the response to the right client (e.g. PDNS). The change here is to keep the inital query section as is. Signed-off-by: Ben Kaplan <ben.kaplan@redis.com> * adding tests for edns0 version check Signed-off-by: Ben Kaplan <ben.kaplan@redis.com> * adding tests for non-edns0 version check Signed-off-by: Ben Kaplan <ben.kaplan@redis.com> Signed-off-by: Ben Kaplan <ben.kaplan@redis.com>
2022-11-28plugin/dnstap: Fix behavior when multiple dnstap plugins specified (#5773)Gravatar Chris O'Haver 6-119/+218
* fix multiple dnstap plugins behavior Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-11-04dont match external services when endpoint is specified (#5734)Gravatar Chris O'Haver 2-8/+20
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-11-01plugin/acl: adding ability to drop queries (#5722)Gravatar rsclarke 6-2/+194
Both block and filter actions write responses to the client based upon the source IP address of the UDP packet containing the query. An attacker spoofing the source IP address to that of their target, can elicit a response to be sent to the victim host, known as DNS Reflection. If an attacker is able to elicit a large response from a relatively small query, with a spoofed source IP address, they are able to increase the amount of data sent to the victim, known as DNS Amplification. Scaling this from one to many queries allows an attacker to perform an effective Denial of Service (DoS) attack against their target. Adding the drop action enables CoreDNS to ignore queries of a given type or network range from being processed and a response written, where an operator knows ahead of time, should not originate or be destined to. Signed-off-by: rsclarke <hey@rsclarke.dev> Signed-off-by: rsclarke <hey@rsclarke.dev>
2022-10-21plugin/cache: cache now uses source query DNSSEC option for upstream refresh ↵Gravatar Grant Spence 7-85/+69
(#5671) Signed-off-by: Grant Spence <gspence@redhat.com> Signed-off-by: Grant Spence <gspence@redhat.com>
2022-10-20plugin/k8s_external: Fix rcode for headless services (#5657)Gravatar Miciah Dashiel Butler Masters 2-6/+6
Signed-off-by: Miciah Masters <miciah.masters@gmail.com> Signed-off-by: Miciah Masters <miciah.masters@gmail.com>
2022-10-11plugin/file: fix file leak (#5687)Gravatar Yong Tang 1-9/+18
2022-10-11plugin/forward: fix ticker leak in golang (#5689)Gravatar Yong Tang 1-0/+1
2022-10-11plugin/auto: fix ticker leak in golang (#5688)Gravatar Yong Tang 1-0/+1
2022-10-11plugin/hosts: fix ticker leak in golang (#5690)Gravatar Yong Tang 1-0/+1
2022-10-11plugin/reload : stop scheduler on shutdown (#5686)Gravatar Ondřej Benkovský 1-0/+1
2022-10-03plugin/template : add support for extended DNS errors (#5659)Gravatar Ondřej Benkovský 5-0/+94
* plugin/template : add support for extended DNS errors Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-09-17plugin/view : fix README (#5627)Gravatar Ondřej Benkovský 1-1/+1
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com> Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-09-15plugin/template: fix formatting with go fmt (#5622)Gravatar Erik Johansson 2-5/+5
Signed-off-by: Erik Johansson <ejohansson@spotify.com> Signed-off-by: Erik Johansson <ejohansson@spotify.com>
2022-09-15plugin/template: Add parseInt template function (#5609)Gravatar Erik Johansson 5-20/+116
* plugin/template: Add parseInt template function Signed-off-by: Erik Johansson <ejohansson@spotify.com>
2022-09-15plugin/template : add view label into plugin metrics (#5620)Gravatar Ondřej Benkovský 3-13/+13
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-09-14plugin/prometheuss : make plugin enabled metric view aware (#5618)Gravatar Ondřej Benkovský 3-4/+4
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com> Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-09-12plugin/acl : add view label into metrics (#5615)Gravatar Ondřej Benkovský 3-8/+10
Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com> Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-09-12auto go fmtGravatar coredns[bot] 1-2/+2
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
2022-09-08plugin/view: Advanced routing interface and new 'view' plugin (#5538)Gravatar Chris O'Haver 21-58/+503
* introduce new interface "dnsserver.Viewer", that allows a plugin implementing it to decide if a query should be routed into its server block. * add new plugin "view", that uses the new interface to enable a user to define expression based conditions that must be met for a query to be routed to its server block. Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-09-07plugin/tsig: Document unimplemented secondary tsig transfers (#5605)Gravatar Chris O'Haver 1-4/+11
document unimplemented secondary tsig; clarify plugin description
2022-09-07Do not expand query UDP buffer size if already set to a smaller value (#5602)Gravatar Chris Narkiewicz 2-58/+79
Signed-off-by: Krzysztof Narkiewicz <knarkiewicz@bloomberg.net> Signed-off-by: Krzysztof Narkiewicz <knarkiewicz@bloomberg.net> Co-authored-by: Krzysztof Narkiewicz <knarkiewicz@bloomberg.net>
2022-09-07Identity and version support for the dnstap plugin (#5555)Gravatar Daniel Jolly 4-10/+67
* Added identity and version support to dnstap plugin Signed-off-by: Daniel Jolly <code@danieljolly.com> * Added missing commas Signed-off-by: Daniel Jolly <code@danieljolly.com> * Moved byte slice conversions to setup rather than handler. Fixed indentation issue. Signed-off-by: Daniel Jolly <code@danieljolly.com> * Improved setup config parsing and added tests to detect various configurations Signed-off-by: Daniel Jolly <code@danieljolly.com> Signed-off-by: Daniel Jolly <code@danieljolly.com> Co-authored-by: Daniel Jolly <code@danieljolly.com>
2022-09-05auto go fmtGravatar coredns[bot] 2-5/+5
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
2022-08-30plugin/k8s_external: Resolve headless services (#5505)Gravatar TomasKohout 15-81/+491
*add option for resolving headless Services without external IPs in k8s_external Signed-off-by: Tomas Kohout <tomas.kohout1995@gmail.com>
2022-08-30chore: remove duplicate word in comments (#5592)Gravatar Abirdcfly 1-1/+1
* chore: remove duplicate word in comments Signed-off-by: Abirdcfly <fp544037857@gmail.com> * auto go mod tidy Signed-off-by: coredns[bot] <bot@bot.coredns.io> Signed-off-by: Abirdcfly <fp544037857@gmail.com> Signed-off-by: coredns[bot] <bot@bot.coredns.io> Co-authored-by: coredns[bot] <bot@bot.coredns.io>
2022-08-17plugin/rewrite: Allow configuring min and max TTL values when rewriting TTL ↵Gravatar AndreasHuber-CH 3-23/+93
(#5508)
2022-08-15plugin/forward: health_check needs to normalize a specified domain name (#5543)Gravatar Vancl 3-8/+19
* plugin/forward: convert the specified domain of health_check to Fqdn * plugin/forward: update readme for health check Signed-off-by: vanceli <vanceli@tencent.com>
2022-08-14Add PTR records to supported types (#5565)Gravatar Alex 2-1/+43
* Add PTR records to supported types Signed-off-by: Alex Bulatov <xbulat@gmail.com> * Add extra line Signed-off-by: Alex Bulatov <xbulat@gmail.com> * Fix title Signed-off-by: Alex Bulatov <xbulat@gmail.com> Signed-off-by: Alex Bulatov <xbulat@gmail.com>
2022-08-12plugin/header: Add support for query modification (#5548) (#5556)Gravatar Christoph Heer 6-49/+174
2022-08-03add CNAME example to README (#5537)Gravatar Chris O'Haver 1-0/+16
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-28plugin/cache: Add cache disable option (#5540)Gravatar Chris O'Haver 6-3/+158
* add cache disable options Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-25plugin/acl : add support for Extended DNS Errors (#5532)Gravatar Ondřej Benkovský 2-235/+247
* plugin/acl : add support for Extended DNS Errors Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com> * fixup! plugin/acl : add support for Extended DNS Errors Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-07-21remove redundant continue in test (#5529)Gravatar Abirdcfly 1-1/+0
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
2022-07-20plugin/forward: Enable multiple forward declarations (#5127)Gravatar Chris O'Haver 5-70/+173
* enable multiple declarations of forward plugin Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-19remove trailing empty lines per linter (#5526)Gravatar Chris O'Haver 2-2/+0
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-18core: add log listeners for k8s_event plugin (#5451)Gravatar Shane Xie 3-8/+299
add log listener interface Signed-off-by: xh4n3 <xyn1016@gmail.com>
2022-07-18plugin/ready: Reset list of readiness plugins on startup (#5492)Gravatar Chris O'Haver 2-0/+9
* reset readiness plugins list on startup Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-11auto go fmtGravatar coredns[bot] 1-1/+1
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
2022-07-10add golangci-lint linter (#5499)Gravatar Ondřej Benkovský 87-160/+52
2022-07-08plugin/trace : make zipkin HTTP reporter more configurable using Corefile ↵Gravatar Ondřej Benkovský 4-33/+105
(#5460) * plugin/trace : make zipkin HTTP reporter more configurable using Corefile Signed-off-by: Ondřej Benkovský <ondrej.benkovsky@jamf.com>
2022-07-07plugin/file/cache: Add metadata for wildcard record responses (#5308)Gravatar Chris O'Haver 5-3/+93
For responses synthesized by known wildcard records, publish metadata containing the wildcard record name Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-06plugin/k8s_external: Add support for PTR requests (#5435)Gravatar Chris O'Haver 12-44/+163
* Exclude External IP addresses from being added to the existing kubernetes' plugin IP->Service index * Add support for PTR requests on External IPs of Services to the k8s_external plugin Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-06dont lameduck when reloading (#5472)Gravatar Chris O'Haver 2-1/+13
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
2022-07-01add tsig to codeowners; update chaos authors (#5479)Gravatar Chris O'Haver 1-1/+1
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>