proxyproto

Oct 21, 2026

Changes in this version

+ func NewTLVListener(l net.Listener, connPolicy proxyproto.ConnPolicyFunc) net.Listener

type Addr

+ func AddrFromConn(conn net.Conn) *Addr

+ func NewAddr(underlying, real net.Addr, rawTLVs []byte) *Addr

+ func (a *Addr) RawTLVs() []byte

+ func (a *Addr) Unwrap() net.Addr

type PacketConn

+ CaptureTLVs bool

+ type TLVListener struct

+ func (l *TLVListener) Accept() (net.Conn, error)

+ func (l *TLVListener) Addr() net.Addr

+ func (l *TLVListener) Close() error

Jul 10, 2026 GO-2026-6506 +1 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

Jul 9, 2026 GO-2026-6506 +1 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

Jun 9, 2026 GO-2026-6506 +2 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Apr 22, 2026 GO-2026-6506 +2 more

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

type PacketConn

+ UDPSessionTrackingMaxSessions int

+ UDPSessionTrackingTTL time.Duration

Mar 6, 2026 GO-2026-4969 +7 more

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

  GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

  GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

  GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

Changes in this version

+ type Addr struct

+ func (a *Addr) Network() string

+ func (a *Addr) String() string

+ type PacketConn struct

+ ConnPolicy proxyproto.ConnPolicyFunc

+ ReadHeaderTimeout time.Duration

+ ValidateHeader proxyproto.Validator

+ func (c *PacketConn) ReadFrom(p []byte) (n int, addr net.Addr, err error)

+ func (c *PacketConn) WriteTo(p []byte, addr net.Addr) (n int, err error)