发布日期: 2026-07-10
版本号: v1.14.5

此版本改进了DNS传输安全性和操作可靠性，包括更安全的DoH/DoH3处理、增强的转发配置以及改进的dnstap支持。同时提升了文件服务、辅助区域、传输、重写、主机处理和错误处理的健壮性，并修复了DNS响应处理中的多个边界情况。主要变更包括：核心支持作用域IPv6地址、限制DoQ流读取超时、清理DoH请求错误；插件方面新增转发插件的DoH支持、主机插件通配符功能，并修复了dnstap自死锁、文件插件通配符响应处理、重写插件空响应恢复等问题。

更新内容 （中文）

本版本增强了DNS传输安全性和运行可靠性，包括更安全的DoH/DoH3处理、增强的转发配置以及改进的dnstap支持。同时在文件服务、辅助区域、传输、重写、主机处理及错误处理等方面提升了健壮性，并修复了多个DNS响应处理的边缘案例。

贡献者名单

Aaron Mark
Amirhossein Ebrahimzade
Antoine
Baltasar Blanco
Cedric Wang
Ilya Kulakov
Immanuel Tikhonov
Jaime Hablutzel
Jonathan Tooker
Omkhar Arasaratnam
Pavel Lazureykis
SEONGHYUN HONG
Saleh
Thomas Gosteli
Ville Vesilehto
Yong Tang
houyuwushang
rpb-ant

重要变更

核心：接受传输目标中的作用域IPv6地址 (https://github.com/coredns/coredns/pull/8204)
核心：使用服务器读取超时限制DoQ流读取 (https://github.com/coredns/coredns/pull/8231)
核心：将不带SOA的NXDOMAIN归类为拒绝 (https://github.com/coredns/coredns/pull/8199)
核心：防止Join函数处理空标签切片 (https://github.com/coredns/coredns/pull/8225)
核心：将HTTPRequestValidateFunc传播到服务器块的所有配置 (https://github.com/coredns/coredns/pull/8169)
核心：清理DoH/DoH3请求解析错误 (https://github.com/coredns/coredns/pull/8254)
核心：使用Go TLS默认值 (https://github.com/coredns/coredns/pull/8227)
核心：为外部插件添加Config.UDPDecorateWriterFunc (https://github.com/coredns/coredns/pull/8257)
插件/auto：对重复的区域文件源发出警告 (https://github.com/coredns/coredns/pull/8191)
插件/cache：添加AD位不划分缓存的回归测试 (https://github.com/coredns/coredns/pull/8214)
插件/dnstap：重连前关闭先前连接 (https://github.com/coredns/coredns/pull/8224)
插件/dnstap：修复客户端刷新错误时监听器广播的自死锁 (https://github.com/coredns/coredns/pull/8260)
插件/dnstap：将IPv4映射的IPv6地址存储为SocketFamily INET的4个八位组 (https://github.com/coredns/coredns/pull/8186)
插件/erratic：对裸truncate应用默认截断量2 (https://github.com/coredns/coredns/pull/8240)
插件/file：对负向CNAME目标应答在授权区返回SOA (https://github.com/coredns/coredns/pull/8226)
插件/file：对通配符应答执行附加处理 (https://github.com/coredns/coredns/pull/8222)
插件/forward：添加doh支持 (https://github.com/coredns/coredns/pull/8004)
插件/forward：使dnstap FORWARDER_*描述从CoreDNS到上游的套接字 (https://github.com/coredns/coredns/pull/8184)
插件/forward：使每个上游读取超时可配置 (https://github.com/coredns/coredns/pull/8205)
插件/forward：恢复空配置文件时转发插件的旧行为 (https://github.com/coredns/coredns/pull/8203)
插件/hosts：添加通配符支持 (https://github.com/coredns/coredns/pull/8185)
插件/hosts：对不支持的查询类型执行穿透处理 (https://github.com/coredns/coredns/pull/8193)
插件/hosts：修复查询与重载之间的数据竞争 (https://github.com/coredns/coredns/pull/8253)
插件/kubernetes：修复nsAddrs返回多条记录时的AXFR panic (https://github.com/coredns/coredns/pull/8256)
插件/local：处理.localhost.下的名称 (https://github.com/coredns/coredns/pull/8151)
插件/log：合成延迟错误响应 (https://github.com/coredns/coredns/pull/8200)
插件/rewrite：修复无OPT记录时EDNS0响应回退的空指针panic (https://github.com/coredns/coredns/pull/8190)
插件/rewrite：在空应答时恢复原始问题 (https://github.com/coredns/coredns/pull/8212)
插件/secondary：传输后解析目录区域 (https://github.com/coredns/coredns/pull/8209)
插件/secondary：重载关闭时停止更新循环 (https://github.com/coredns/coredns/pull/8198)
插件/trace：修正Zipkin v2端点文档 (https://github.com/coredns/coredns/pull/8202)
插件/transfer：配置通知源地址 (https://github.com/coredns/coredns/pull/8192)
插件/transfer：修复空DNS记录导致的CoreDNS传输插件panic (https://github.com/coredns/coredns/pull/8207)
插件/tsig：验证成功时不回显客户端的TSIG.Error (https://github.com/coredns/coredns/pull/8215)

更新内容 （原始）

This release improves DNS transport security and operational reliability, with safer DoH/DoH3 handling, enhanced forwarding configuration, and improved dnstap support. It also adds robustness improvements across file serving, secondary zones, transfers, rewrites, hosts handling, and error processing, while fixing several edge cases in DNS response handling.

Brought to You By

Aaron Mark Amirhossein Ebrahimzade Antoine Baltasar Blanco Cedric Wang Ilya Kulakov Immanuel Tikhonov Jaime Hablutzel Jonathan Tooker Omkhar Arasaratnam Pavel Lazureykis SEONGHYUN HONG Saleh Thomas Gosteli Ville Vesilehto Yong Tang houyuwushang rpb-ant

Noteworthy Changes

core: Accept scoped IPv6 addresses in transfer targets (https://github.com/coredns/coredns/pull/8204) core: Bound DoQ stream read with the server read timeout (https://github.com/coredns/coredns/pull/8231) core: Classify nxdomain without soa as denial (https://github.com/coredns/coredns/pull/8199) core: Guard Join against an empty label slice (https://github.com/coredns/coredns/pull/8225) core: Propagate HTTPRequestValidateFunc to all configs in a server block (https://github.com/coredns/coredns/pull/8169) core: Sanitize DoH/DoH3 request parse errors (https://github.com/coredns/coredns/pull/8254) core: Use Go TLS defaults (https://github.com/coredns/coredns/pull/8227) core: Add Config.UDPDecorateWriterFunc for external plugins (https://github.com/coredns/coredns/pull/8257) plugin/auto: Warn on duplicate zone file origins (https://github.com/coredns/coredns/pull/8191) plugin/cache: Add regression test for AD bit not partitioning the cache (https://github.com/coredns/coredns/pull/8214) plugin/dnstap: Close the previous connection before reconnecting (https://github.com/coredns/coredns/pull/8224) plugin/dnstap: Fix self-deadlock in listener broadcast on client flush error (https://github.com/coredns/coredns/pull/8260) plugin/dnstap: Store IPv4-mapped IPv6 addresses as 4 octets with SocketFamily INET (https://github.com/coredns/coredns/pull/8186) plugin/erratic: Apply default truncate amount of 2 for bare truncate (https://github.com/coredns/coredns/pull/8240) plugin/file: Return SOA in authority for negative CNAME target answers (https://github.com/coredns/coredns/pull/8226) plugin/file: Run additional processing for wildcard answers (https://github.com/coredns/coredns/pull/8222) plugin/forward: Add doh support (https://github.com/coredns/coredns/pull/8004) plugin/forward: Make dnstap FORWARDER_* describe the socket from CoreDNS to upstream (https://github.com/coredns/coredns/pull/8184) plugin/forward: Make per-upstream read timeout configurable (https://github.com/coredns/coredns/pull/8205) plugin/forward: Restore old behavior forward plugin continue on empty conf file (https://github.com/coredns/coredns/pull/8203) plugin/hosts: Add wildcard support (https://github.com/coredns/coredns/pull/8185) plugin/hosts: Fall through unsupported query types (https://github.com/coredns/coredns/pull/8193) plugin/hosts: Fix data race between lookups and reload (https://github.com/coredns/coredns/pull/8253) plugin/kubernetes: Fix AXFR panic when nsAddrs returns multiple records (https://github.com/coredns/coredns/pull/8256) plugin/local: Handle names under .localhost. (https://github.com/coredns/coredns/pull/8151) plugin/log: Synthesize deferred error responses (https://github.com/coredns/coredns/pull/8200) plugin/rewrite: Fix nil-pointer panic in EDNS0 response reversion with no OPT record (https://github.com/coredns/coredns/pull/8190) plugin/rewrite: Restore the original question on empty replies (https://github.com/coredns/coredns/pull/8212) plugin/secondary: Parse catalog zones after transfer (https://github.com/coredns/coredns/pull/8209) plugin/secondary: Stop update loop on reload shutdown (https://github.com/coredns/coredns/pull/8198) plugin/trace: Correct Zipkin v2 endpoint docs (https://github.com/coredns/coredns/pull/8202) plugin/transfer: Configure notify source address (https://github.com/coredns/coredns/pull/8192) plugin/transfer: Fix panic in CoreDNS transfer plugin caused by empty DNS record (https://github.com/coredns/coredns/pull/8207) plugin/tsig: Don’t echo client’s TSIG.Error if verification is successful (https://github.com/coredns/coredns/pull/8215)

下载链接