proxyproto

Apr 22, 2026

Changes in this version

type PacketConn

+ UDPSessionTrackingMaxSessions int

+ UDPSessionTrackingTTL time.Duration

Mar 6, 2026 GO-2026-4969 +4 more

  GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

  GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

  GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

  GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

  GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

Changes in this version

+ type Addr struct

+ func (a *Addr) Network() string

+ func (a *Addr) String() string

+ type PacketConn struct

+ ConnPolicy proxyproto.ConnPolicyFunc

+ ReadHeaderTimeout time.Duration

+ ValidateHeader proxyproto.Validator

+ func (c *PacketConn) ReadFrom(p []byte) (n int, addr net.Addr, err error)

+ func (c *PacketConn) WriteTo(p []byte, addr net.Addr) (n int, err error)