Mirrors/coredns
1
0
Fork 0
mirror of https://github.com/coredns/coredns.git synced 2026-10-09 12:05:22 -04:00
Code Issues Packages Projects Releases Wiki Activity

plugin/forward: support DNS-over-QUIC upstreams (#8474)

Browse Source 
Signed-off-by: houyuwushang <liuluoqianqiu@outlook.com>
This commit is contained in:
houyuwushang
2026-09-08 12:51:18 +08:00
committed by GitHub
parent 71a60e140b
commit e1d3fe6bc6
13 changed files with 1679 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
plugin/forward/setup_test.go
View File

@@ -48,6 +48,7 @@ func TestSetup(t *testing.T) {
forward com ::2`, false, ".", nil, 2, proxy.Options{HCRecursionDesired: true, HCDomain: "."}, "plugin"},
{"forward . tls://[2400:3200::1%dns.alidns.com]:853 {\ntls\n}\n", false, ".", nil, 2, proxy.Options{HCRecursionDesired: true, HCDomain: "."}, ""},
{"forward . https://127.0.0.1 \n", false, ".", nil, 2, proxy.Options{HCRecursionDesired: true, HCDomain: "."}, ""},
{"forward . quic://127.0.0.1 \n", false, ".", nil, 2, proxy.Options{HCRecursionDesired: true, HCDomain: "."}, ""},
// negative
{"forward . https://1.1.1.1/ \n", true, "", nil, 0, proxy.Options{HCRecursionDesired: true, HCDomain: "."}, "paths are not allowed in HTTPS upstream addresses"},
{"forward . a27.0.0.1", true, "", nil, 0, proxy.Options{HCRecursionDesired: true, HCDomain: "."}, "failed to resolve"},
@@ -94,6 +95,17 @@ func TestSetup(t *testing.T) {
}
}
func TestSetupKeepsDoTAndDoQAtSameAddress(t *testing.T) {
c := caddy.NewTestController("dns", `forward . tls://127.0.0.1 quic://127.0.0.1`)
fs, err := parseForward(c)
if err != nil {
t.Fatalf("parseForward() failed: %v", err)
}
if got := len(fs[0].proxies); got != 2 {
t.Fatalf("proxy count = %d, want 2", got)
}
}
func TestSourceAddress(t *testing.T) {
tests := []struct {
input string
@@ -147,6 +159,8 @@ func TestSplitZone(t *testing.T) {
"https://127.0.0.1%example.net:443", "https://127.0.0.1:443", "example.net",
}, {
"https://127.0.0.1%example.net", "https://127.0.0.1", "example.net",
}, {
"quic://127.0.0.1%example.net:853", "quic://127.0.0.1:853", "example.net",
}, {
"tls://127.0.0.1:854", "tls://127.0.0.1:854", "",
}, {
@@ -193,10 +207,16 @@ func TestSetupTLS(t *testing.T) {
{`forward . tls://127.0.0.1%example.net:854 {
tls
}`, false, "example.net", ""},
{`forward . quic://127.0.0.1%doq.example:853 {
tls
}`, false, "doq.example", ""},
// SNI specifications clash test
{`forward . tls://127.0.0.1%example.net:854 {
tls_servername foo
}`, true, "", "both forward ('foo') and proxy level ('example.net') TLS servernames are set for upstream proxy 'tls://127.0.0.1:854'"},
{`forward . quic://127.0.0.1%doq.example:853 {
tls_servername foo
}`, true, "", "both forward ('foo') and proxy level ('doq.example') TLS servernames are set for upstream proxy 'quic://127.0.0.1:853'"},
{`forward . 127.0.0.1 {
tls_servername dns
}`, false, "", ""},