1aa1a92198
This adds an online dnssec middleware. The middleware will sign responses on the fly. Negative responses are signed with NSEC black lies.
73 lines
1.9 KiB
Go
73 lines
1.9 KiB
Go
package cache
|
|
|
|
import (
|
|
"github.com/miekg/coredns/middleware"
|
|
|
|
"github.com/miekg/dns"
|
|
"github.com/prometheus/client_golang/prometheus"
|
|
"golang.org/x/net/context"
|
|
)
|
|
|
|
// ServeDNS implements the middleware.Handler interface.
|
|
func (c Cache) ServeDNS(ctx context.Context, w dns.ResponseWriter, r *dns.Msg) (int, error) {
|
|
state := middleware.State{W: w, Req: r}
|
|
|
|
qname := state.Name()
|
|
qtype := state.QType()
|
|
zone := middleware.Zones(c.Zones).Matches(qname)
|
|
if zone == "" {
|
|
return c.Next.ServeDNS(ctx, w, r)
|
|
}
|
|
|
|
do := state.Do() // might need more from OPT record?
|
|
|
|
if i, ok := c.get(qname, qtype, do); ok {
|
|
resp := i.toMsg(r)
|
|
state.SizeAndDo(resp)
|
|
w.WriteMsg(resp)
|
|
|
|
cacheHitCount.WithLabelValues(zone).Inc()
|
|
return dns.RcodeSuccess, nil
|
|
}
|
|
cacheMissCount.WithLabelValues(zone).Inc()
|
|
|
|
crr := NewCachingResponseWriter(w, c.cache, c.cap)
|
|
return c.Next.ServeDNS(ctx, crr, r)
|
|
}
|
|
|
|
func (c Cache) get(qname string, qtype uint16, do bool) (*item, bool) {
|
|
nxdomain := nameErrorKey(qname, do)
|
|
if i, ok := c.cache.Get(nxdomain); ok {
|
|
return i.(*item), true
|
|
}
|
|
|
|
// TODO(miek): delegation was added double check
|
|
successOrNoData := successKey(qname, qtype, do)
|
|
if i, ok := c.cache.Get(successOrNoData); ok {
|
|
return i.(*item), true
|
|
}
|
|
return nil, false
|
|
}
|
|
|
|
var (
|
|
cacheHitCount = prometheus.NewCounterVec(prometheus.CounterOpts{
|
|
Namespace: middleware.Namespace,
|
|
Subsystem: subsystem,
|
|
Name: "hit_count_total",
|
|
Help: "Counter of DNS requests that were found in the cache.",
|
|
}, []string{"zone"})
|
|
|
|
cacheMissCount = prometheus.NewCounterVec(prometheus.CounterOpts{
|
|
Namespace: middleware.Namespace,
|
|
Subsystem: subsystem,
|
|
Name: "miss_count_total",
|
|
Help: "Counter of DNS requests that were not found in the cache.",
|
|
}, []string{"zone"})
|
|
)
|
|
|
|
const subsystem = "cache"
|
|
|
|
func init() {
|
|
prometheus.MustRegister(cacheHitCount)
|
|
prometheus.MustRegister(cacheMissCount)
|
|
}
|