Skip to content

Added basic DNS cookie support with rate limiting #1737

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
zbalkan wants to merge 37 commits into
base: master
Choose a base branch
from
Open

Added basic DNS cookie support with rate limiting #1737

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
37 commits
Select commit Hold shift + click to select a range
8246534
Added basic DNS cookie support
zbalkan Feb 18, 2026
dd5813d
Added cookie initialization to path when no config file exists
zbalkan Feb 19, 2026
69241ab
Merged null check in MergeCookieOption
zbalkan Feb 19, 2026
7da12a1
Fixed endianness of timestamp
zbalkan Feb 19, 2026
dd41d22
Hardened ComputeServerCookie
zbalkan Feb 19, 2026
4428281
Hardened ValidateServerCookieWithSecret, and removed nested streams
zbalkan Feb 19, 2026
eecb422
Hardened CreateResponseCookie
zbalkan Feb 19, 2026
76dc2cd
Rewrite of DnsCookieValidator
zbalkan Feb 19, 2026
9cf4346
Cloned current secret in rotation
zbalkan Feb 19, 2026
2ecb87d
Used System.Threading.Lock instead of object
zbalkan Feb 19, 2026
c14c3a6
TC is necessary now; removed _dnsCookiesSetTcOnBadCookie setting from…
zbalkan Feb 19, 2026
a0676b7
Used ReadOnlySpan<byte>instead of mutable byte arrays
zbalkan Feb 19, 2026
fb6192c
Made cookies enabled by default and hardcoded
zbalkan Feb 19, 2026
a4aec0f
Added guard clauses for secret file loading
zbalkan Feb 19, 2026
761554c
Rewrite locking in DnsCookieSecretManager
zbalkan Feb 19, 2026
4055dc6
Moved cookie code under separate region
zbalkan Feb 19, 2026
1e76c1d
Added UDP check for cookies
zbalkan Feb 19, 2026
45f1ee3
Made a difference between a parsing error and a bad cookie
zbalkan Feb 19, 2026
22355e9
Removed unnecessary allocations
zbalkan Feb 19, 2026
08e68e6
Used an internal snapshot to solve concurrency issues on rotation
zbalkan Feb 20, 2026
b620003
Used siphash again
zbalkan Feb 20, 2026
1919362
USed tmp file during writes
zbalkan Feb 20, 2026
1cc4651
Improved cookie handling
zbalkan Feb 20, 2026
8c49aa1
Improved cookie validation
zbalkan Feb 20, 2026
f5e076c
Fixed RFC non-compliant logic
zbalkan Feb 20, 2026
4e3c798
Standardized FORMERR
zbalkan Feb 20, 2026
f4993c6
Used lock for DNS cookie initialization
zbalkan Feb 20, 2026
b40326d
Refactored UpsertOptRecord
zbalkan Feb 20, 2026
fa34152
Reused cookie variable for clarity
zbalkan Feb 20, 2026
d4870c5
Optimized IPv6 handling in cookie calculation hot path
zbalkan Feb 20, 2026
1eec192
Added null checks
zbalkan Feb 20, 2026
5bccec5
Used ArgumentNullException.ThrowIfNull where applicable
zbalkan Feb 20, 2026
448bd5d
Formatting
zbalkan Feb 20, 2026
4a5750e
Hardened RFC7873/9018 COOKIE handling (robust parse/rebuild, reliable…
zbalkan Apr 24, 2026
f052d00
Implemented DNS Cookie based rate limiter with performance tricks, i.…
zbalkan Apr 24, 2026
d71e2f8
Fixed conflicts
zbalkan May 11, 2026
d681328
Hardened file write permission on Unix systems
zbalkan May 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading