CoreDNS v1.14.4

v1.14.4
Added 5
  • Add loong64 architecture support
  • Add optional verify timeout to serve_stale in cache plugin
  • Add hostname resolution support for TO endpoints in forward plugin
  • Add incoming connection support in dnstap plugin
  • Add fallthrough support in secondary plugin
Changed 9
  • Allow cache TTLs above default 3600s
  • Bound HTTP/3 request header size for DoH3
  • Expose TLS ConnectionState (SNI) for DoQ
  • Use http.LocalAddrContextKey for DoH local address
  • Apply access mode to every zone in the same block in azure plugin
  • Prefer positive cache over SERVFAIL in ncache
Fixed 4
  • Remove duplicate cipher suites
  • Remove debug fmt.Println from multicluster zone validation in kubernetes plugin
  • Canonicalize escape form in owner names in file plugin
  • Prevent nil pointer dereference when dropping malformed PROXY packets in proxyproto plugin
Removed 2
  • Reject invalid any and local config in any plugin
  • Reject unknown chaos block options in chaos plugin

This release improves transport security and operational flexibility, with enhancements for DoH3 and DoQ, improved DNSSEC signing behavior, and support for the loong64 architecture. It also adds configurable cache verification, hostname resolution for forward targets, incoming connection support for dnstap, fallthrough support in the secondary plugin, automatic zone reloads, and improved forwarding behavior for NODATA responses.

Brought to You By

Cedric Wang Charlie Tonneslan Dmytro Alieksieiev Endre Szabo Immanuel Tikhonov Isolus James R T JUN YANG Jöran Malek Nicholas Amorim Syed Azeez Umut Polat Ville Vesilehto weiguozhang Yong Tang 徐晓伟

Noteworthy Changes
View original

Upgraded? How did it go?

Discussion