Closed lts-rad closed 5 months ago
another pain point is the https://coredns.io/plugins/cache/ plugin versus block.
right now it will cache with NXDOMAIN.
looking at the docs, https://coredns.io/plugins/cache/
there is an option to not cache SERVFAIL. but we return NXDOMAIN instead so cant leverage it. doesnt seem like any straight fordard way to evict from cache. one option is to fork the cache plugin and use our own fork for this purpose, and then try to merge the changes upstream.
this is now in the dev branch
right now an override does not allow an ip under rebinding protection to be permitted. this is not intuitive behavior.
to fix this, the rebinding plugin will be merged into the block plugin.
old behavior:
new behavior: