Affected by GO-2025-3743 and 9 other vulnerabilities

GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

upstream

package

v1.11.2 Latest Latest Go to latest Published: Feb 5, 2024 License: Apache-2.0 Imports: 6 Imported by: 503

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coredns/coredns

Links

Documentation ¶

Overview ¶

Package upstream abstracts a upstream lookups so that plugins can handle them in an unified way.

Index ¶

type Upstream
- func New() *Upstream
- func (u *Upstream) Lookup(ctx context.Context, state request.Request, name string, typ uint16) (*dns.Msg, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Upstream ¶

type Upstream struct{}

Upstream is used to resolve CNAME or other external targets via CoreDNS itself.

func New ¶ added in v1.1.4

func New() *Upstream

New creates a new Upstream to resolve names using the coredns process.

func (*Upstream) Lookup ¶

func (u *Upstream) Lookup(ctx context.Context, state request.Request, name string, typ uint16) (*dns.Msg, error)

Lookup routes lookups to our selves to make it follow the plugin chain *again*, but with a (possibly) new query. As we are doing the query against ourselves again, there is no actual new hop, as such RFC 6891 does not apply and we need the EDNS0 option present in the *original* query to be present here too.

Source Files ¶

View all Source files

upstream.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL