mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-09 16:47:18 +02:00
940fa19ad8
By default, DNS resolvers accept both IPv4 and IPv6 addresses. This can be
influenced by the "resolve-prefer" keywords on server lines as well as the
family argument to the "do-resolve" action, but that is only a preference,
which does not block the other family from being used when it's alone. In
some environments where dual-stack is not usable, stumbling on an unreachable
IPv6-only DNS record can cause significant trouble as it will replace a
previous IPv4 one which would possibly have continued to work till next
request. The "dns-accept-family" global option permits to enforce usage of
only one (or both) address families. The argument is a comma-delimited list
of the following words:
- "ipv4": query and accept IPv4 addresses ("A" records)
- "ipv6": query and accept IPv6 addresses ("AAAA" records)
When a single family is used, no request will be sent to resolvers for the
other family, and any response for the othe family will be ignored. The
default value is "ipv4,ipv6", which effectively enables both families.
68 lines
2.9 KiB
C
68 lines
2.9 KiB
C
/*
|
|
* include/haproxy/dns.h
|
|
* This file provides functions related to DNS protocol
|
|
*
|
|
* Copyright (C) 2014 Baptiste Assmann <bedis9@gmail.com>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation, version 2.1
|
|
* exclusively.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#ifndef _HAPROXY_RESOLVERS_H
|
|
#define _HAPROXY_RESOLVERS_H
|
|
|
|
#include <haproxy/resolvers-t.h>
|
|
|
|
struct proxy;
|
|
struct server;
|
|
struct stconn;
|
|
struct act_rule;
|
|
struct list;
|
|
|
|
extern struct list sec_resolvers;
|
|
extern unsigned int resolv_failed_resolutions;
|
|
extern uint resolv_accept_families;
|
|
|
|
struct resolvers *find_resolvers_by_id(const char *id);
|
|
struct dns_nameserver *find_nameserver_by_resolvers_and_id(struct resolvers *parent, unsigned int id);
|
|
struct resolv_srvrq *find_srvrq_by_name(const char *name, struct proxy *px);
|
|
struct resolv_srvrq *new_resolv_srvrq(struct server *srv, char *fqdn);
|
|
struct resolv_answer_item *find_srvrq_answer_record(const struct resolv_requester *requester);
|
|
|
|
int resolv_str_to_dn_label(const char *str, int str_len, char *dn, int dn_len);
|
|
int resolv_dn_label_to_str(const char *dn, int dn_len, char *str, int str_len);
|
|
|
|
int resolv_hostname_validation(const char *string, char **err);
|
|
int resolv_get_ip_from_response(struct resolv_response *r_res,
|
|
struct resolv_options *resolv_opts, void *currentip,
|
|
short currentip_sin_family,
|
|
void **newip, short *newip_sin_family,
|
|
struct server *owner);
|
|
|
|
int resolv_link_resolution(void *requester, int requester_type, int requester_locked);
|
|
void resolv_unlink_resolution(struct resolv_requester *requester);
|
|
void resolv_detach_from_resolution_answer_items(struct resolv_resolution *res, struct resolv_requester *req);
|
|
void resolv_trigger_resolution(struct resolv_requester *requester);
|
|
enum act_parse_ret resolv_parse_do_resolve(const char **args, int *orig_arg, struct proxy *px, struct act_rule *rule, char **err);
|
|
int check_action_do_resolve(struct act_rule *rule, struct proxy *px, char **err);
|
|
|
|
int stats_dump_resolvers(struct stconn *sc,
|
|
struct field *stats, size_t stats_count,
|
|
struct list *stat_modules);
|
|
void resolv_stats_clear_counters(int clrall, struct list *stat_modules);
|
|
int resolv_allocate_counters(struct list *stat_modules);
|
|
int resolvers_create_default();
|
|
|
|
#endif // _HAPROXY_RESOLVER_H
|