mirror of
https://github.com/coredns/coredns.git
synced 2026-10-08 19:45:21 -04:00
4382b80a35
* core: upgrade Go requirement to 1.26.0 As golang 1.27 has been released, this PR - Bump Go version requirement to 1.26.0 - Update Go build version to 1.27.0 This is also for solving the issue encountered in 8092 of k8s update Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Bump golang ci Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Fix Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Fix Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Fix Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Migrate faillint to forbidigo, as failint has not bee updated for more than a year Signed-off-by: Yong Tang <yong.tang.github@outlook.com> --------- Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
quic
Name
quic - configures DNS-over-QUIC (DoQ) server options.
Description
The quic plugin allows you to configure parameters for the DNS-over-QUIC (DoQ) server to fine-tune the security posture and performance of the server.
This plugin can only be used once per quic Server Block.
Syntax
quic {
max_streams POSITIVE_INTEGER
worker_pool_size POSITIVE_INTEGER
}
max_streamslimits the number of concurrent QUIC streams per connection. This helps prevent DoS attacks where an attacker could open many streams on a single connection, exhausting server resources. The default value is 256 if not specified.worker_pool_sizedefines the size of the worker pool for processing QUIC streams across all connections. The default value is 512 if not specified. This limits the total number of concurrent streams that can be processed across all connections.
Examples
Enable DNS-over-QUIC with default settings (256 concurrent streams per connection, 512 worker pool size):
quic://.:8853 {
tls cert.pem key.pem
quic
whoami
}
Set custom limits for maximum QUIC streams per connection and worker pool size:
quic://.:8853 {
tls cert.pem key.pem
quic {
max_streams 16
worker_pool_size 65536
}
whoami
}