proxy

Jan 16, 2026 GO-2026-4630 +1 more

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Changes in this version

type Proxy

+ func (p *Proxy) SetMaxIdleConns(n int)

type Transport

+ func (t *Transport) SetMaxIdleConns(n int)

Jan 7, 2026 GO-2026-4630 +1 more

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Dec 9, 2025 GO-2026-4289 +2 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Changes in this version

type Proxy

+ func (p *Proxy) GetTransport() *Transport

type Transport

+ func (t *Transport) GetTLSConfig() *tls.Config

Oct 8, 2025 GO-2026-4289 +2 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Sep 30, 2025 GO-2026-4289 +2 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Sep 8, 2025 GO-2026-4289 +2 more

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Aug 5, 2025 GO-2025-3942 +3 more

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Jun 5, 2025 GO-2025-3942 +3 more

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Changes in this version

+ const ErrTransportStopped

+ const ErrTransportStoppedDuringDial

+ const ErrTransportStoppedDuringRetWait

+ const ErrTransportStoppedRetClosed

Mar 31, 2025 GO-2025-3743 +4 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Nov 21, 2024 GO-2025-3743 +4 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Nov 13, 2024 GO-2025-3743 +4 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Apr 26, 2024 GO-2025-3743 +4 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Feb 5, 2024 GO-2025-3743 +4 more

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Aug 15, 2023 GO-2024-2785 +5 more

  GO-2024-2785: CoreDNS may return invalid cache entries in github.com/coredns/coredns

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Aug 7, 2023 GO-2024-2785 +5 more

  GO-2024-2785: CoreDNS may return invalid cache entries in github.com/coredns/coredns

  GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

  GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

  GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

  GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

  GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

Changes in this version

+ var ErrCachedClosed = errors.New("cached connection was closed by peer")

+ var ErrNoForward = errors.New("no forwarder defined")

+ var ErrNoHealthy = errors.New("no healthy proxies")

+ type HealthChecker interface

+ Check func(*Proxy) error

+ GetDomain func() string

+ GetReadTimeout func() time.Duration

+ GetRecursionDesired func() bool

+ GetTLSConfig func() *tls.Config

+ GetWriteTimeout func() time.Duration

+ SetDomain func(domain string)

+ SetReadTimeout func(time.Duration)

+ SetRecursionDesired func(bool)

+ SetTCPTransport func()

+ SetTLSConfig func(*tls.Config)

+ SetWriteTimeout func(time.Duration)

+ func NewHealthChecker(proxyName, trans string, recursionDesired bool, domain string) HealthChecker

+ type Options struct

+ ForceTCP bool

+ HCDomain string

+ HCRecursionDesired bool

+ PreferUDP bool

+ type Proxy struct

+ func NewProxy(proxyName, addr, trans string) *Proxy

+ func (p *Proxy) Addr() string

+ func (p *Proxy) Connect(ctx context.Context, state request.Request, opts Options) (*dns.Msg, error)

+ func (p *Proxy) Down(maxfails uint32) bool

+ func (p *Proxy) Fails() uint32

+ func (p *Proxy) GetHealthchecker() HealthChecker

+ func (p *Proxy) Healthcheck()

+ func (p *Proxy) SetExpire(expire time.Duration)

+ func (p *Proxy) SetReadTimeout(duration time.Duration)

+ func (p *Proxy) SetTLSConfig(cfg *tls.Config)

+ func (p *Proxy) Start(duration time.Duration)

+ func (p *Proxy) Stop()

+ type Transport struct

+ func (t *Transport) Dial(proto string) (*persistConn, bool, error)

+ func (t *Transport) SetExpire(expire time.Duration)

+ func (t *Transport) SetTLSConfig(cfg *tls.Config)

+ func (t *Transport) Start()

+ func (t *Transport) Stop()

+ func (t *Transport) Yield(pc *persistConn)