CoreDNS Release Notes

This release fixes some bugs, and adds some new features including:

• Corrected architecture labels in multi-arch image manifest
• A new plugin timeouts that allows configuration of server listener timeout durations
• acl can drop queries as an action
• template supports creating responses with extended DNS errors
• New weighted policy in loadbalance
• Option to serve original record TTLs from cache

Brought to You By

Arthur Outhenin-Chalandre, Ben Kaplan, Chris O'Haver, Gabor Dozsa, Grant Spence, Kumiko as a Service, LAMRobinson, Miciah Dashiel Butler Masters, Ondřej Benkovský, Rich, Stephen Kitt, Yash Singh, Yong Tang, rsclarke, sanyo0714

Noteworthy Changes

• plugin/timeouts - Allow ability to configure listening server timeouts (https://github.com/coredns/coredns/pull/5784)
• plugin/acl: adding ability to drop queries (https://github.com/coredns/coredns/pull/5722)
• plugin/template : add support for extended DNS errors (https://github.com/coredns/coredns/pull/5659)
• plugin/kubernetes: error NXDOMAIN for TXT lookups (https://github.com/coredns/coredns/pull/5737)
• plugin/kubernetes: dont match external services when endpoint is specified (https://github.com/coredns/coredns/pull/5734)
• plugin/k8s_external: Fix rcode for headless services (https://github.com/coredns/coredns/pull/5657)
• plugin/edns: remove truncating of question section on bad EDNS version (https://github.com/coredns/coredns/pull/5787) …

This release adds the new view plugin, enabling advanced server-block routing configurations such as split-DNS.

Brought to You By

Ben Kochie Chris O'Haver Erik Johansson John Belamaric Marius Kimmina Ondřej Benkovský

Noteworthy Changes

• plugin/view: Advanced routing interface and new 'view' plugin (https://github.com/coredns/coredns/pull/5538)
• plugin/template: Add parseInt template function (https://github.com/coredns/coredns/pull/5609)

Full Changelog: https://github.com/coredns/coredns/compare/v1.9.4...v1.10.0

This is a release with many new features. The most notable addition is a new plugin tsig for validating TSIG requests and signing responses. In header plugin a selector of query or response (default) is added for applying the actions. This release also adds lots of enhancements and bug fixes.

Brought to You By

Abirdcfly Alex AndreasHuber-CH Andy Lindeman Chris Narkiewicz Chris O'Haver Christoph Heer Daniel Jolly Konstantin Demin Marius Kimmina Md Sahil Ondřej Benkovský Shane Xie TomasKohout Vancl Yong Tang

Noteworthy Changes

• core: add log listeners for k8s_event plugin (https://github.com/coredns/coredns/pull/5451)
• core: log DoH HTTP server error logs in CoreDNS format (https://github.com/coredns/coredns/pull/5457)
• core: warn when domain names are not in RFC1035 preferred syntax (https://github.com/coredns/coredns/pull/5414)
• plugin/acl: add support for extended DNS errors (https://github.com/coredns/coredns/pull/5532)
• plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (https://github.com/coredns/coredns/pull/5602)
• plugin/cache: add cache disable option (https://github.com/coredns/coredns/pull/5540)
• plugin/cache: add metadata for wildcard record responses (https://github.com/coredns/coredns/pull/5308)
• plugin/cache: add option to adjust SERVFAIL response cache TTL (https://github.com/coredns/coredns/pull/5320) …

This is a release with a focus on security (CVE-2022-27191 and CVE-2022-28948) fixes. Additionally, several feature enhancements and bug fixes have been added.

Brought to You By

Chris O'Haver, lobshunter, Naveen, Radim Hatlapatka, RetoHaslerMGB, Tintin, Yong Tang

Noteworthy Changes

• core: update gopkg.in/yaml.v3 to fix CVE-2022-28948 (https://github.com/coredns/coredns/pull/5408)
• core: update golang.org/x/crypto to fix CVE-2022-27191 (https://github.com/coredns/coredns/pull/5407)
• plugin/acl: adding a check to parse out zone info (https://github.com/coredns/coredns/pull/5387)
• plugin/dnstap: support FQDN TCP endpoint (https://github.com/coredns/coredns/pull/5377)
• plugin/errors: add stacktrace option to log a stacktrace during panic recovery (https://github.com/coredns/coredns/pull/5392)
• plugin/template: return SERVFAIL for zone-match regex-no-match case (https://github.com/coredns/coredns/pull/5180)

Full Changelog: https://github.com/coredns/coredns/compare/v1.9.2...v1.9.3

This is a release with many added features and security and bug fixes. The most notable one is the release of 3rd party security audit from Trail of Bits. Security issues discovered by this audit have all been fixed or covered.

Brought to You By

Antoine Tollenaere, Balazs Nagy, Chris O'Haver, dilyevsky, hansedong, Lorenz Brun, Marius Kimmina, nathannaveen, Ondřej Benkovský, Patrick W. Healy, Qasim Sarfraz, xuweiwei, Yong Tang

Noteworthy Changes

• core: add Trail of Bits to list of 3rd party security auditors (https://github.com/coredns/coredns/pull/5356)
• core: avoid usage of pseudo-random number (https://github.com/coredns/coredns/pull/5228)
• plugin/bufsize: don't add OPT RR to non-EDNS0 queries (https://github.com/coredns/coredns/pull/5368)
• plugin/cache: add refresh mode setting to serve_stale (https://github.com/coredns/coredns/pull/5131)
• plugin/cache: fix cache poisoning exploit (https://github.com/coredns/coredns/pull/5174)
• plugin/etcd: fix multi record TXT lookups (https://github.com/coredns/coredns/pull/5293)
• plugin/forward: configurable domain support for healthcheck (https://github.com/coredns/coredns/pull/5281)
• plugin/geoip: read source IP from EDNS0 subnet if provided (https://github.com/coredns/coredns/pull/5183)
• plugin/health: rework overloaded goroutine to support graceful shutdown (https://github.com/coredns/coredns/pull/5244) …

This is a release with security and bug fixes and some new features added. 1.9.1 is also built with golang 1.17.8 that addressed several golang 1.17.6 vulnerabilities (CVE-2022-23772, CVE-2022-23773, CVE-2022-23806). Note golang 1.17.6 was used to built coredns 1.9.0.

Brought to You By

Chris O'Haver, Elijah Andrews, Rudolf Schönecker, Yong Tang, nathannaveen, xuweiwei

Noteworthy Changes

• plugin/autopath: Don't panic on empty token (https://github.com/coredns/coredns/pull/5169)
• plugin/cache: Add zones label to cache metrics (https://github.com/coredns/coredns/pull/5124)
• plugin/file: Add TXT test case (https://github.com/coredns/coredns/pull/5079)
• plugin/forward: Don't panic when from-zone cannot be normalized (https://github.com/coredns/coredns/pull/5170)
• plugin/grpc: Fix healthy proxy error case (https://github.com/coredns/coredns/pull/5168)
• plugin/grpc: Don't panic when from-zone cannot be normalized (https://github.com/coredns/coredns/pull/5171)
• plugin/k8s_external: Implement zone transfers (https://github.com/coredns/coredns/pull/4977)
• plugin/k8s_external: Fix external nsAddrs when CoreDNS Service has no External IPs (https://github.com/coredns/coredns/pull/4891)
• plugin/kubernetes: Log api connection failures and server start delay (https://github.com/coredns/coredns/pull/5044)
• plugin/log: Expand {combined} and {common} in log format (https://github.com/coredns/coredns/pull/5230) …

This is a release with bug fixes and some new features added. Starting with 1.9.0 the minimal required go version will be 1.17. Wildcard queries are no longer supported by the kubernetes plugin.

Brought to You By

Chris O'Haver, Ondřej Benkovský, Tomas Hulata, Yong Tang, xuweiwei

Noteworthy Changes

• plugin/kubernetes: remove wildcard query functionality (https://github.com/coredns/coredns/pull/5019)
• Health-checks should respect force_tcp (https://github.com/coredns/coredns/pull/5109)
• plugin/prometheus: Write rcode properly to the metrics (https://github.com/coredns/coredns/pull/5126)
• plugin/template: Persist truncated state to client if CNAME lookup response is truncated (https://github.com/coredns/coredns/pull/4713)

Full Changelog: https://github.com/coredns/coredns/compare/v1.8.7...v1.9.0