Advanced Topics

These chapters contain information on the advanced features of dnsdist

• Access Control
  • Listening on different addresses
  • Modifying the ACL
• Passing the source address to the backend
  • Using EDNS Client Subnet
  • X-Proxied-For
  • Proxy Protocol
  • Influence on caching
• TeeAction: copy the DNS traffic stream
• Lua actions in rules
• Runtime-modifiable IP address sets
• Rules for traffic exceeding QPS limits
• eBPF Socket Filtering
  • Requirements
  • External program, maps and XDP filtering
• Performance Tuning
  • UDP and incoming DNS over HTTPS
  • Outgoing DoH
  • TCP and DNS over TLS
  • Rules and Lua
  • Lock contention and sharding
  • Memory usage
• SNMP support
• AXFR, IXFR and NOTIFY
  • In front of primaries
  • In front of secondaries
• Running multiple instances
  • Using systemd
• Out-of-order
• OCSP Stapling
  • Local PKI
  • Certificate signed by an external authority
  • Testing
• TLS Sessions Management
  • TLS sessions
  • Keys management for incoming connections in dnsdist
  • Content of the STEK file
  • Sessions management for outgoing connections
• Internal Design
  • UDP design
  • TCP / DoT design
  • DoH design
• Asynchronous processing