Skip to content

Added basic DNS cookie support with rate limiting #1737

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
zbalkan wants to merge 35 commits into
base: master
Choose a base branch
from
Open

Added basic DNS cookie support with rate limiting #1737

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
573a424
Added basic DNS cookie support
zbalkan Feb 18, 2026
a8e5076
Added cookie initialization to path when no config file exists
zbalkan Feb 19, 2026
5c2b3ae
Merged null check in MergeCookieOption
zbalkan Feb 19, 2026
06fcdfd
Fixed endianness of timestamp
zbalkan Feb 19, 2026
fc3e83b
Hardened ComputeServerCookie
zbalkan Feb 19, 2026
07c78da
Hardened ValidateServerCookieWithSecret, and removed nested streams
zbalkan Feb 19, 2026
740837e
Hardened CreateResponseCookie
zbalkan Feb 19, 2026
8332944
Rewrite of DnsCookieValidator
zbalkan Feb 19, 2026
5b15704
Cloned current secret in rotation
zbalkan Feb 19, 2026
22b3408
Used System.Threading.Lock instead of object
zbalkan Feb 19, 2026
655389a
TC is necessary now; removed _dnsCookiesSetTcOnBadCookie setting from…
zbalkan Feb 19, 2026
f756ba8
Used ReadOnlySpan<byte>instead of mutable byte arrays
zbalkan Feb 19, 2026
3f84da7
Made cookies enabled by default and hardcoded
zbalkan Feb 19, 2026
224475f
Added guard clauses for secret file loading
zbalkan Feb 19, 2026
3af1fd3
Rewrite locking in DnsCookieSecretManager
zbalkan Feb 19, 2026
f07627d
Moved cookie code under separate region
zbalkan Feb 19, 2026
8a0384f
Added UDP check for cookies
zbalkan Feb 19, 2026
9348e90
Made a difference between a parsing error and a bad cookie
zbalkan Feb 19, 2026
f5a0926
Removed unnecessary allocations
zbalkan Feb 19, 2026
9a8c3e2
Used an internal snapshot to solve concurrency issues on rotation
zbalkan Feb 20, 2026
4f0130f
Used siphash again
zbalkan Feb 20, 2026
68e44ad
USed tmp file during writes
zbalkan Feb 20, 2026
8809691
Improved cookie handling
zbalkan Feb 20, 2026
ea6755a
Improved cookie validation
zbalkan Feb 20, 2026
1b3210a
Fixed RFC non-compliant logic
zbalkan Feb 20, 2026
f9fae36
Standardized FORMERR
zbalkan Feb 20, 2026
9e4738c
Used lock for DNS cookie initialization
zbalkan Feb 20, 2026
c8fd59f
Refactored UpsertOptRecord
zbalkan Feb 20, 2026
1042ad9
Reused cookie variable for clarity
zbalkan Feb 20, 2026
ba61e3f
Optimized IPv6 handling in cookie calculation hot path
zbalkan Feb 20, 2026
779089a
Added null checks
zbalkan Feb 20, 2026
95f7f3c
Used ArgumentNullException.ThrowIfNull where applicable
zbalkan Feb 20, 2026
932c72c
Formatting
zbalkan Feb 20, 2026
4647c04
Hardened RFC7873/9018 COOKIE handling (robust parse/rebuild, reliable…
zbalkan Apr 24, 2026
d7f2b07
Implemented DNS Cookie based rate limiter with performance tricks, i.…
zbalkan Apr 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading