proxy

Oct 21, 2026

Changes in this version

+ var ErrUnsupportedRequest = errors.New("proxy: unsupported request")

type Options

+ TLSConnectDeadline time.Time

type Transport

+ func (t *Transport) DialContext(ctx context.Context, proto string) (*persistConn, bool, error)

Aug 19, 2026

Changes in this version

+ var ErrInvalidRequest = errors.New("proxy: invalid request")

type Proxy

+ func (p *Proxy) DoHHost() string

+ func (p *Proxy) SetDOHHost(host string)

Jul 10, 2026 GO-2026-6506 +1 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

Changes in this version

type HealthChecker

+ GetLocalAddress func() net.IP

+ SetLocalAddress func(net.IP)

type Proxy

+ func (p *Proxy) SetLocalAddress(addr net.IP)

type Transport

+ func (t *Transport) SetLocalAddress(addr net.IP)

Jul 9, 2026 GO-2026-6506 +1 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

Changes in this version

type Proxy

+ func (p *Proxy) SetDOHRequestOptions(method string)

+ func (p *Proxy) SetHTTPClient(client *http.Client)

Jun 9, 2026 GO-2026-6506 +2 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Apr 22, 2026 GO-2026-6506 +2 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

type Proxy

+ func (p *Proxy) SetMaxAge(maxAge time.Duration)

type Transport

+ func (t *Transport) SetMaxAge(maxAge time.Duration)

Mar 6, 2026 GO-2026-4969 +7 more

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Jan 16, 2026 GO-2026-4630 +9 more

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

type Proxy

+ func (p *Proxy) SetMaxIdleConns(n int)

type Transport

+ func (t *Transport) SetMaxIdleConns(n int)

Jan 7, 2026 GO-2026-4630 +9 more

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Dec 9, 2025 GO-2026-4289 +10 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

type Proxy

+ func (p *Proxy) GetTransport() *Transport

type Transport

+ func (t *Transport) GetTLSConfig() *tls.Config

Oct 8, 2025 GO-2026-4289 +10 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Sep 30, 2025 GO-2026-4289 +10 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Sep 8, 2025 GO-2026-4289 +10 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Aug 5, 2025 GO-2025-3942 +11 more

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Jun 5, 2025 GO-2025-3942 +11 more

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

+ const ErrTransportStopped

+ const ErrTransportStoppedDuringDial

+ const ErrTransportStoppedDuringRetWait

+ const ErrTransportStoppedRetClosed

Mar 31, 2025 GO-2025-3743 +12 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Nov 21, 2024 GO-2025-3743 +12 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Nov 13, 2024 GO-2025-3743 +12 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Apr 26, 2024 GO-2025-3743 +12 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Feb 5, 2024 GO-2025-3743 +12 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Aug 15, 2023 GO-2024-2785 +13 more

  GO-2024-2785: CoreDNS may return invalid cache entries in github.com/coredns/coredns

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Aug 7, 2023 GO-2024-2785 +13 more

  GO-2024-2785: CoreDNS may return invalid cache entries in github.com/coredns/coredns

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

+ var ErrCachedClosed = errors.New("cached connection was closed by peer")

+ var ErrNoForward = errors.New("no forwarder defined")

+ var ErrNoHealthy = errors.New("no healthy proxies")

+ type HealthChecker interface

+ Check func(*Proxy) error

+ GetDomain func() string

+ GetReadTimeout func() time.Duration

+ GetRecursionDesired func() bool

+ GetTLSConfig func() *tls.Config

+ GetWriteTimeout func() time.Duration

+ SetDomain func(domain string)

+ SetReadTimeout func(time.Duration)

+ SetRecursionDesired func(bool)

+ SetTCPTransport func()

+ SetTLSConfig func(*tls.Config)

+ SetWriteTimeout func(time.Duration)

+ func NewHealthChecker(proxyName, trans string, recursionDesired bool, domain string) HealthChecker

+ type Options struct

+ ForceTCP bool

+ HCDomain string

+ HCRecursionDesired bool

+ PreferUDP bool

+ type Proxy struct

+ func NewProxy(proxyName, addr, trans string) *Proxy

+ func (p *Proxy) Addr() string

+ func (p *Proxy) Connect(ctx context.Context, state request.Request, opts Options) (*dns.Msg, error)

+ func (p *Proxy) Down(maxfails uint32) bool

+ func (p *Proxy) Fails() uint32

+ func (p *Proxy) GetHealthchecker() HealthChecker

+ func (p *Proxy) Healthcheck()

+ func (p *Proxy) SetExpire(expire time.Duration)

+ func (p *Proxy) SetReadTimeout(duration time.Duration)

+ func (p *Proxy) SetTLSConfig(cfg *tls.Config)

+ func (p *Proxy) Start(duration time.Duration)

+ func (p *Proxy) Stop()

+ type Transport struct

+ func (t *Transport) Dial(proto string) (*persistConn, bool, error)

+ func (t *Transport) SetExpire(expire time.Duration)

+ func (t *Transport) SetTLSConfig(cfg *tls.Config)

+ func (t *Transport) Start()

+ func (t *Transport) Stop()

+ func (t *Transport) Yield(pc *persistConn)