kumahq / kuma-website

🐻 The official website for Kuma, the control plane for modern service connectivity.
https://kuma.io
Apache License 2.0
104 stars 87 forks source link

feat(dns): add instructions for customizing DNS configuration template #1576

Closed jijiechen closed 7 months ago

jijiechen commented 8 months ago

Kuma users can now override DNS configuration template from both control plane and data planes. So this PR is to add instructions to implement it.

Please also see issue for the underlying feature: https://github.com/kumahq/kuma/issues/8119

Did you sign your commit? Instructions Yes.

Have you read Contributing guidelines? Yes.

netlify[bot] commented 8 months ago

Deploy Preview for kuma ready!

Name Link
Latest commit dd291b2f6e821080046008c25e48faf6945a1060
Latest deploy log https://app.netlify.com/sites/kuma/deploys/65a88b424c1ab90008840d24
Deploy Preview https://deploy-preview-1576--kuma.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

lahabana commented 8 months ago

Should we add in the example this one to disable AAAA answers:

.:{{ .CoreDNSPort }} {
    template IN AAAA . {
       rcode NOERROR
       fallthrough
    }
    forward . 127.0.0.1:{{ .EnvoyDNSPort }}
    # We want all requests to be sent to the Envoy DNS Filter, unsuccessful responses should be forwarded to the original DNS server.
    # For example: requests other than A, AAAA and SRV will return NOTIMP when hitting the envoy filter and should be sent to the original DNS server.
    # Codes from: https://github.com/miekg/dns/blob/master/msg.go#L138
    alternate NOTIMP,FORMERR,NXDOMAIN,SERVFAIL,REFUSED . /etc/resolv.conf
    prometheus localhost:{{ .PrometheusPort }}
    errors
}

.:{{ .CoreDNSEmptyPort }} {
    template ANY ANY . {
      rcode NXDOMAIN
    }
}

This is one of the main reason to add this feature