mirror of
https://github.com/coredns/coredns.git
synced 2026-10-09 03:55:21 -04:00
4382b80a35
* core: upgrade Go requirement to 1.26.0 As golang 1.27 has been released, this PR - Bump Go version requirement to 1.26.0 - Update Go build version to 1.27.0 This is also for solving the issue encountered in 8092 of k8s update Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Bump golang ci Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Fix Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Fix Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Fix Signed-off-by: Yong Tang <yong.tang.github@outlook.com> * Migrate faillint to forbidigo, as failint has not bee updated for more than a year Signed-off-by: Yong Tang <yong.tang.github@outlook.com> --------- Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
https3
Name
https3 - configures DNS-over-HTTPS/3 (DoH3) server options.
Description
The https3 plugin allows you to configure parameters for the DNS-over-HTTPS/3 (DoH3) server to fine-tune the security posture and performance of the server. HTTPS/3 uses QUIC as the underlying transport.
This plugin can only be used once per HTTPS3 listener block.
Syntax
https3 {
max_streams POSITIVE_INTEGER
max_connections POSITIVE_INTEGER
}
max_streamslimits the number of concurrent QUIC streams per connection. This helps prevent unbounded streams on a single connection, exhausting server resources. The default value is 256 if not specified. Set to 0 to use underlying QUIC transport default.max_connectionslimits the number of concurrent HTTPS/3 connections accepted by the server. The default value is 200 if not specified. Connections above the configured limit are rejected. Set to 0 to disable the CoreDNS connection limit.
Examples
Set custom limits for maximum streams:
https3://.:443 {
tls cert.pem key.pem
https3 {
max_streams 50
}
whoami
}
Set values to 0 for QUIC transport default, matching CoreDNS behaviour before v1.14.0:
https3://.:443 {
tls cert.pem key.pem
https3 {
max_streams 0
}
whoami
}