mirror of
https://github.com/coredns/coredns.git
synced 2026-07-15 20:20:10 -04:00
18a58b9e89
This fix prevents CoreDNS `autopath` from bypassing `acl` checks when it rewrites an allowed query into a name within an ACL-protected zone. Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
81 lines
1.4 KiB
INI
81 lines
1.4 KiB
INI
# Directives are registered in the order they should be executed.
|
|
#
|
|
# Ordering is VERY important. Every plugin will feel the effects of all other
|
|
# plugin below (after) them during a request, but they must not care what plugin
|
|
# above them are doing.
|
|
|
|
# How to rebuild with updated plugin configurations: Modify the list below and
|
|
# run `go generate && go build`
|
|
|
|
# The parser takes the input format of:
|
|
#
|
|
# <plugin-name>:<package-name>
|
|
# Or
|
|
# <plugin-name>:<fully-qualified-package-name>
|
|
#
|
|
# External plugin example:
|
|
#
|
|
# log:github.com/coredns/coredns/plugin/log
|
|
# Local plugin example:
|
|
# log:log
|
|
|
|
root:root
|
|
metadata:metadata
|
|
geoip:geoip
|
|
cancel:cancel
|
|
tls:tls
|
|
proxyproto:proxyproto
|
|
quic:quic
|
|
grpc_server:grpc_server
|
|
https:https
|
|
https3:https3
|
|
timeouts:timeouts
|
|
multisocket:multisocket
|
|
reload:reload
|
|
nsid:nsid
|
|
bufsize:bufsize
|
|
bind:bind
|
|
debug:debug
|
|
trace:trace
|
|
ready:ready
|
|
health:health
|
|
pprof:pprof
|
|
prometheus:metrics
|
|
errors:errors
|
|
log:log
|
|
dnstap:dnstap
|
|
local:local
|
|
dns64:dns64
|
|
any:any
|
|
chaos:chaos
|
|
loadbalance:loadbalance
|
|
tsig:tsig
|
|
rewrite:rewrite
|
|
autopath:autopath
|
|
acl:acl
|
|
cache:cache
|
|
header:header
|
|
dnssec:dnssec
|
|
minimal:minimal
|
|
template:template
|
|
transfer:transfer
|
|
hosts:hosts
|
|
route53:route53
|
|
azure:azure
|
|
clouddns:clouddns
|
|
k8s_external:k8s_external
|
|
kubernetes:kubernetes
|
|
file:file
|
|
auto:auto
|
|
secondary:secondary
|
|
etcd:etcd
|
|
loop:loop
|
|
forward:forward
|
|
grpc:grpc
|
|
erratic:erratic
|
|
whoami:whoami
|
|
on:github.com/coredns/caddy/onevent
|
|
sign:sign
|
|
view:view
|
|
nomad:nomad
|