Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
COREDNS-QUIC(7)			CoreDNS	Plugins		       COREDNS-QUIC(7)

NAME
       quic - configures DNS-over-QUIC (DoQ) server options.

DESCRIPTION
       The  quic  plugin  allows you to	configure parameters for the DNS-over-
       QUIC (DoQ) server to fine-tune the security posture and performance  of
       the server.

       This plugin can only be used once per quic Server Block.

SYNTAX
	      quic {
		  max_streams POSITIVE_INTEGER
		  worker_pool_size POSITIVE_INTEGER
	      }

          max_streams	limits	the number of concurrent QUIC streams per con-
	   nection. This helps prevent DoS attacks  where  an  attacker	 could
	   open	 many  streams	on  a single connection, exhausting server re-
	   sources. The	default	value is 256 if	not specified.

          worker_pool_size defines the	size of	the worker pool	for processing
	   QUIC	streams	across all connections.	The default value  is  512  if
	   not	specified.  This limits	the total number of concurrent streams
	   that	can be processed across	all connections.

EXAMPLES
       Enable DNS-over-QUIC with default settings (256 concurrent streams  per
       connection, 512 worker pool size):

	      quic://.:8853 {
		  tls cert.pem key.pem
		  quic
		  whoami
	      }

       Set  custom  limits  for	maximum	QUIC streams per connection and	worker
       pool size:

	      quic://.:8853 {
		  tls cert.pem key.pem
		  quic {
		      max_streams 16
		      worker_pool_size 65536
		  }
		  whoami
	      }

CoreDNS				   May 2025		       COREDNS-QUIC(7)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=coredns-quic&sektion=7&manpath=FreeBSD+Ports+15.0>

home | help