CoreDNS: Beyond the Basics
Talkat KubeCon + CloudNativeCon North America 2019 · on Thursday, 2019-11-21· at 15:20· Room 6C - San Diego Convention Center, Upper Level·
summary
CoreDNS claims production-ready DNSSEC with both on-the-fly signing (sign plugin) and traditional zone signing using dnssec-keygen (example uses ECDSA keys and RRSIG output), handles DNS-over-TLS by forwarding to TLS://8.8.8.8, and manages zone files via a git-backed auto plugin plus get-sync. It demonstrates query manipulation with template and rewrite plugins (example templates synthesize A records like 1.2.3.4), and a firewall+metadata flow that enforces a password via EDNS option 65000:200 — all shown working end-to-end.
AI-written summary · about
chapters (8)
- 0:00Intro
- 3:06DNSSEC
- 10:20DNS over TLS
- 13:18Managing zone data with Git
- 15:02CoreDNS plugins
- 16:15Template
- 20:44Rewrite
- 23:37Metadata
