Is there a possibility to configure all the unbound configurations listed here similarly in Kubernetes coredns 'Corefile' configuration like this. Only few options are listed here. I am looking for the below server options in unbound conf to be done on Kubernetes Corefile coredns configmap.
Example unbound conf which I am looking to do as same in kubernetes Corefile configuration:
server:
do-ip6: yes
root-hints: /etc/unbound/named.cache
verbosity: 1
outgoing-port-avoid: 0-32767
outgoing-port-permit: 32768-65535
domain-insecure: "pub"
access-control: 0.0.0.0/0 refuse
local-zone: 10.in-addr.arpa nodefault
local-zone: 16.172.in-addr.arpa nodefault
I need to do above unbound conf similarly in kubernetes Corefile configuration. I am not sure whether these configurations are possible in Coredns. Can someone direct me how to do that? Also I am looking for steps on how to configure this in Corefile configmap using helm.
CoreDNS
supports some requested features via plugins
:
do-ip6
- CoreDNS works with ipv6 by default (if cluster is dual-stack)verbosity
- log
plugin will show more details about queries, it can have different format and what it shows (success, denial, errors, everything)outgoing-port-avoid, outgoing-port-permit
- did not find any support of thisdomain-insecure
- please check if dnssec
can help (It looks similar to what unbound
has, but I'm not really familiar with it).access-control
- acl
plugin does it.local-zone
- local
plugin can be tried for this purpose, it doesn't have lots of options though.Bonus point:
reload
allows automatic reload of a changed Corefile.All mentioned above plugins have syntax and examples on their pages.