Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automatic generation of HTTPS/SVCB (type 64/65) records #4878

Open
PseudoResonance opened this issue Nov 16, 2024 · 1 comment
Open

Automatic generation of HTTPS/SVCB (type 64/65) records #4878

PseudoResonance opened this issue Nov 16, 2024 · 1 comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@PseudoResonance
Copy link
Contributor

PseudoResonance commented Nov 16, 2024

What would you like to be added:

Automatic generation of HTTPS/SVCB (type 64/65) DNS records based on service IPs.

Why is this needed:

Around August, Cloudflare began rolling out ECH support with HTTPS records, and Firefox has also forcefully enabled support. While support for connecting is still missing in Golang as of November, it would be good to begin supporting it, as it has the potential to improve security for users.

Additionally, I use ExternalDNS to override global DNS for internal lookups, however now that Cloudflare has rolled out HTTPS records and ECH, my sites will get the external IPs from Cloudflare's HTTPS, and the internal IPs from ExternalDNS' A/AAA records. Depending on the implementation, sites that can be found through HTTPS/SVCB may completely ignore corresponding A/AAAA records and use only the ipv4/ipv6 hints, or may take a very long time to load, and I had to manually override the HTTPS records to prevent interruption.

If ExternalDNS could automatically add these records as well, it would simplify the process.

@PseudoResonance PseudoResonance added the kind/feature Categorizes issue or PR as related to a new feature. label Nov 16, 2024
@nitrocode
Copy link
Contributor

This would be nice to have in AWS as well since they recently added support for SVCB/HTTPS records.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

2 participants