Skip to content

dns: bypass EDNS query#22861

Merged
yanavlasov merged 6 commits intoenvoyproxy:mainfrom
botengyao:dns_filer_allow_edns
Sep 1, 2022
Merged

dns: bypass EDNS query#22861
yanavlasov merged 6 commits intoenvoyproxy:mainfrom
botengyao:dns_filer_allow_edns

Conversation

@botengyao
Copy link
Copy Markdown
Member

Signed-off-by: Boteng Yao boteng@google.com

DNS filter will ignore the additional RRs as EDNS could have them, the filter will fall back to the traditional behavior.
Issue #22676.

Commit Message:
Additional Description:
Risk Level: Low
Testing:
Docs Changes:
Release Notes:
Platform Specific Features:
[Optional Runtime guard:]
[Optional Fixes #Issue]
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional API Considerations:]

Signed-off-by: Boteng Yao <boteng@google.com>
Signed-off-by: Boteng Yao <boteng@google.com>
Signed-off-by: Boteng Yao <boteng@google.com>
@botengyao
Copy link
Copy Markdown
Member Author

/assign @yanjunxiang-google

Comment thread source/extensions/filters/udp/dns_filter/dns_parser.cc
@yanjunxiang-google
Copy link
Copy Markdown
Contributor

/assign @yanavlasov

@yanavlasov
Copy link
Copy Markdown
Contributor

/wait

Signed-off-by: Boteng Yao <boteng@google.com>
Signed-off-by: Boteng Yao <boteng@google.com>
Signed-off-by: Boteng Yao <boteng@google.com>
@yanjunxiang-google
Copy link
Copy Markdown
Contributor

LGTM

@yanavlasov yanavlasov merged commit 5263eec into envoyproxy:main Sep 1, 2022
@botengyao botengyao deleted the dns_filer_allow_edns branch September 1, 2022 19:32
mattklein123 pushed a commit that referenced this pull request Dec 11, 2024
<!--
!!!ATTENTION!!!

If you are fixing *any* crash or *any* potential security issue, *do
not*
open a pull request in this repo. Please report the issue via emailing
envoy-security@googlegroups.com where the issue will be triaged
appropriately.
Thank you in advance for helping to keep Envoy secure.

!!!ATTENTION!!!

For an explanation of how to fill out the fields, please see the
relevant section
in
[PULL_REQUESTS.md](https://github.com/envoyproxy/envoy/blob/main/PULL_REQUESTS.md)
-->


Commit Message: 
Additional Description: I believe it is stable now since we conduct a
security review and improvement for dns filter like #18651 #20744 #22861
#17479 #34409 #34456 #34490 and so on
Risk Level: low
Testing:
Docs Changes:
Release Notes:

Signed-off-by: Boteng Yao <boteng@google.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants