houyuwushang 70b5d6b5be core/dnsserver: add opt-in opcode admission (#8469) ...

Keep miekg/dns's default request policy unless a plugin explicitly registers an additional opcode. Aggregate the policy at the listener, then enforce it again after zone routing so mixed server blocks on one socket remain isolated.

Apply the same policy to UDP, TCP, and DNS-over-TLS while preserving TSIG verification and the one-question requirement.

Signed-off-by: houyuwushang <liuluoqianqiu@outlook.com>

2026-08-26 01:41:28 -07:00

..

address_test.go

add golangci-lint linter (#5499)

2022-07-10 11:06:33 -07:00

address.go

plugin/view: Advanced routing interface and new 'view' plugin (#5538)

2022-09-08 14:56:27 -04:00

config_test.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

config.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

example_test.go

core/dnsserver: document in-process embedding (#8436)

2026-08-13 23:26:01 -07:00

https_test.go

test(dnsserver): improve core/dnsserver test coverage (#7317)

2025-05-22 06:40:13 -07:00

https.go

core: Add full TSIG verification in DoH transport (#8013)

2026-04-09 15:24:00 +03:00

log_test.go

Clean up tests logging (#1979)

2018-07-19 16:23:06 +01:00

onstartup_test.go

test(dnsserver): improve core/dnsserver test coverage (#7317)

2025-05-22 06:40:13 -07:00

onstartup.go

chore(lint): bump golangci-lint to v2.11.1 (#7905)

2026-03-06 11:50:24 -08:00

quic_test.go

feat(core): expose TLS ConnectionState (SNI) for DoQ (#8129)

2026-05-28 15:45:48 -07:00

quic.go

feat(core): expose TLS ConnectionState (SNI) for DoQ (#8129)

2026-05-28 15:45:48 -07:00

register_test.go

core/dnsserver: normalize server block zones (#8320)

2026-07-22 19:04:15 -07:00

register.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

server_grpc_test.go

Merge commit from fork

2026-07-18 20:36:05 -07:00

server_grpc.go

Merge commit from fork

2026-07-15 17:54:46 -07:00

server_https3_test.go

Add max conn limit to https3 (#8187)

2026-07-21 15:52:31 -07:00

server_https3.go

Add max conn limit to https3 (#8187)

2026-07-21 15:52:31 -07:00

server_https_test.go

Merge commit from fork

2026-07-18 20:36:05 -07:00

server_https.go

core/dnsserver: sanitize DoH/DoH3 request parse errors (#8254)

2026-07-08 18:07:01 -07:00

server_quic_test.go

core: Add connection-level concurrency limiting to DNS-over-QUIC (#8213)

2026-07-19 03:52:42 -07:00

server_quic.go

core: Add connection-level concurrency limiting to DNS-over-QUIC (#8213)

2026-07-19 03:52:42 -07:00

server_test.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

server_tls_test.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

server_tls.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

server.go

core/dnsserver: add opt-in opcode admission (#8469)

2026-08-26 01:41:28 -07:00

tsig_test.go

fix(test): deduplicate TSIG test helpers (#8009)

2026-04-04 10:37:59 -07:00

view.go

plugin/view: Advanced routing interface and new 'view' plugin (#5538)

2022-09-08 14:56:27 -04:00

zdirectives.go

feat(siit): Initial version (#8188)

2026-08-23 17:55:27 -07:00