惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

F
Fortinet All Blogs
宝玉的分享
宝玉的分享
酷 壳 – CoolShell
酷 壳 – CoolShell
T
The Exploit Database - CXSecurity.com
Help Net Security
Help Net Security
腾讯CDC
Project Zero
Project Zero
C
CXSECURITY Database RSS Feed - CXSecurity.com
IT之家
IT之家
C
Cyber Attacks, Cyber Crime and Cyber Security
T
Tailwind CSS Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
D
Darknet – Hacking Tools, Hacker News & Cyber Security
L
LINUX DO - 最新话题
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
T
Threatpost
N
News | PayPal Newsroom
C
Cybersecurity and Infrastructure Security Agency CISA
Hacker News - Newest:
Hacker News - Newest: "LLM"
S
SegmentFault 最新的问题
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
P
Proofpoint News Feed
A
Arctic Wolf
B
Blog RSS Feed
Forbes - Security
Forbes - Security
P
Privacy & Cybersecurity Law Blog
Attack and Defense Labs
Attack and Defense Labs
V2EX - 技术
V2EX - 技术
P
Proofpoint News Feed
I
Intezer
Application and Cybersecurity Blog
Application and Cybersecurity Blog
阮一峰的网络日志
阮一峰的网络日志
aimingoo的专栏
aimingoo的专栏
T
Tenable Blog
MyScale Blog
MyScale Blog
U
Unit 42
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
WordPress大学
WordPress大学
W
WeLiveSecurity
D
DataBreaches.Net
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
G
GRAHAM CLULEY
有赞技术团队
有赞技术团队
Martin Fowler
Martin Fowler
罗磊的独立博客
The Last Watchdog
The Last Watchdog
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
V
Vulnerabilities – Threatpost
美团技术团队
Microsoft Security Blog
Microsoft Security Blog

Plugin on CoreDNS: DNS and Service Discovery

kubernetes log proxyproto rewrite forward clouddns errors grpc_server https https3 docker auto geoip multisocket nomad dnstap import ready etcd header loadbalance bind grpc file prometheus quic kubeforward JSON gslb autopath dnssec root fanout k8s_cache bufsize k8s_external reload gathersrv meship meshname multicluster acl cache recursor health trace k8s_event redis route53 dns64 finalize kubenodes ebpf rrl secondary mysql warnlist loop minimal sign azure git local any cancel debug erratic metadata nsid pprof alternate k8s_dns_chaos k8s_gateway hosts netbox mdns wgsd alias chaos whoami lighthouse ens idetcd gravwell amazondns kubernetai redisc unbound on dump pdsql ipin Logging with dnstap demo example When Should Plugins be External? Add External Plugins How Queries Are Processed in CoreDNS How to Add Plugins to CoreDNS Writing Plugins for CoreDNS
records
2020-09-22 · via Plugin on CoreDNS: DNS and Service Discovery

Description

The records plugin is useful for serving zone data that is specified inline in the configuration file. As opposed to the hosts plugin, this plugin supports all record types. Records need to be specified in text representation as specified in RFC 1035. If no TTL is specified in the records, a default TTL of 3600s is assumed.

For negative responses a SOA record should be included in the response, this will only be done when a SOA record is included in the data.

The records plugin uses a simple algorithm for find the correct record(s) to return. This means some more advanced features are currently not available, such as:

  • DNSSEC, if RRSIG records are added they will not be returned in the reply even if the client is capable of handling them. If you need signed replies use the dnssec plugin in conjunction with this one.
  • Wildcards, i.e. *.example.org, will not be detected as a wildcard record.

If you need a more robust implementation you probably want to use the file plugin.

Note the host plugin is configured before records in plugin.cfg, which means that when both are being specified in a server block, the host plugin will get preference.

This plugin can only be used once per Server Block.

Syntax

records [ZONES...] {
    [INLINE]
}
  • ZONES zones it should be authoritative for. If empty, the zones from the configuration block are used.
  • INLINE the resource record that are to be served. These must be specified as the text representation (as specified in RFC 1035) of the record. See the examples below. Each record must be on a single line.

If domain name in INLINE are not fully qualifed each of the ZONES are used as the origin and added to the names.

Examples

Serve a MX records for example.org and give the MX server the name mx1 and address 127.0.0.1.

example.org {
    records {
        @   60  IN SOA ns.icann.org. noc.dns.icann.org. 2020091001 7200 3600 1209600 3600
        @   60  IN MX 10 mx1
        mx1 60  IN A  127.0.0.1
    }
}

Create 2 zones, each will have a MX record. Note that no SOA record has been given. Also note you need to quote the ; in the TXT record’s data to make the parser happy. (A ; is a comment in a RFC 1035 zone file and everything after it will be ignored, hence the need for quoting it here.)

. {
    records example.org example.net {
        mx1 IN MX 10 mx1
        dkim._domainkey.relay 3600 IN TXT "v=DKIM1\; h=sha256\; k=rsa\; s=email\; p=MIIBIj ..."
    }
}

Bugs

DNSSEC, nor wildcards are implemented. The lookup algorithm is pretty basic. Future enhancements could leverage the code from the file plugin to make more compliant with the DNS specification.

See Also

See the hosts’ plugin documentation if you just need to return address records. Use the reload plugin to reload the contents of these inline records automatically when they are changed. The dnssec plugin can be used to sign replies. See RFC 1035 and subsequent RFCs defining new record types for the text representation that must be used in this plugin. Note RFC 3597 (Handling of Unknown DNS Resource Record) syntax is also supported.

Use the file plugin for a more fully featured DNS implementation (including DNSSEC).