Advanced Topics

These chapters contain information on the advanced features of dnsdist

• Access Control
  • Listening on different addresses
  • Modifying the ACL
• Passing the source address to the backend
  • Proxy Protocol
  • Using EDNS Client Subnet
  • X-Proxied-For
  • Influence on caching
• TeeAction: copy the DNS traffic stream
• Lua actions in rules
• Runtime-modifiable IP address sets
• Rules for traffic exceeding QPS limits
• eBPF Socket Filtering
  • Requirements
  • External program, maps and XDP filtering
• Performance Tuning
  • UDP and incoming DNS over HTTPS
  • AF_XDP / XSK
  • UDP buffer sizes
  • Outgoing DoH
  • TCP and DNS over TLS
  • TLS performance
  • DNS over QUIC
  • Rules and Lua
  • Lock contention and sharding
  • Memory usage
  • Firewall connection tracking
  • Network interface receive queues
• SNMP support
• AXFR, IXFR and NOTIFY
  • In front of primaries
  • In front of secondaries
• Running multiple instances
  • Using systemd
• Out-of-order
• OCSP Stapling
  • Local PKI
  • Certificate signed by an external authority
  • Testing
• TLS Certificates Management
  • Password-protected PKCS12 files
  • Reloading certificates
  • TLS sessions
  • OCSP stapling
• TLS Sessions Management
  • TLS sessions
  • Keys management for incoming connections in dnsdist
  • Content of the STEK file
  • Sessions management for outgoing connections
• Internal Design
  • UDP design
  • TCP / DoT design
  • DNS over HTTP/2 design
  • DNS over HTTP/3 design
  • DoQ design
• Asynchronous processing
• Structured logging dictionary
  • The default backend
  • The systemd-journal backend
  • The json backend
• AF_XDP / XSK
  • Performance
  • Running under systemd
• EDNS Client Subnet Zero Scope