TUN-9858: Remove proxy-dns feature from cloudflared

Remove the DNS over HTTPS (DoH) proxy feature built on CoreDNS due to
security vulnerabilities (GO-2025-3942, GO-2026-4289).

This removes:
- Standalone proxy-dns command (cloudflared proxy-dns)
- Tunnel subcommand (cloudflared tunnel proxy-dns)
- Proxy-dns flags for tunnel run (--proxy-dns, --proxy-dns-port, etc.)
- Config file resolver section support
- tunneldns/ package (CoreDNS-based implementation)
- Related component tests

BREAKING CHANGE: The proxy-dns feature is no longer available.
Users should migrate to alternative DNS over HTTPS solutions.
This commit is contained in:
João "Pisco" Fernandes
2026-02-02 18:01:55 +00:00
parent d6cb78aeb4
commit 9388e7f48c
254 changed files with 80 additions and 49676 deletions
+2 -60
View File
@@ -2,9 +2,6 @@
## explicit; go 1.16
github.com/BurntSushi/toml
github.com/BurntSushi/toml/internal
# github.com/apparentlymart/go-cidr v1.1.0
## explicit
github.com/apparentlymart/go-cidr/cidr
# github.com/beorn7/perks v1.0.1
## explicit; go 1.11
github.com/beorn7/perks/quantile
@@ -13,39 +10,6 @@ github.com/beorn7/perks/quantile
# github.com/cespare/xxhash/v2 v2.3.0
## explicit; go 1.11
github.com/cespare/xxhash/v2
# github.com/coredns/caddy v1.1.2-0.20241029205200-8de985351a98
## explicit; go 1.13
github.com/coredns/caddy
github.com/coredns/caddy/caddyfile
# github.com/coredns/coredns v1.12.2
## explicit; go 1.23.0
github.com/coredns/coredns/core/dnsserver
github.com/coredns/coredns/coremain
github.com/coredns/coredns/pb
github.com/coredns/coredns/plugin
github.com/coredns/coredns/plugin/cache
github.com/coredns/coredns/plugin/cache/freq
github.com/coredns/coredns/plugin/etcd/msg
github.com/coredns/coredns/plugin/metadata
github.com/coredns/coredns/plugin/metrics
github.com/coredns/coredns/plugin/metrics/vars
github.com/coredns/coredns/plugin/pkg/cache
github.com/coredns/coredns/plugin/pkg/cidr
github.com/coredns/coredns/plugin/pkg/dnstest
github.com/coredns/coredns/plugin/pkg/dnsutil
github.com/coredns/coredns/plugin/pkg/doh
github.com/coredns/coredns/plugin/pkg/edns
github.com/coredns/coredns/plugin/pkg/fuzz
github.com/coredns/coredns/plugin/pkg/log
github.com/coredns/coredns/plugin/pkg/parse
github.com/coredns/coredns/plugin/pkg/rcode
github.com/coredns/coredns/plugin/pkg/response
github.com/coredns/coredns/plugin/pkg/reuseport
github.com/coredns/coredns/plugin/pkg/trace
github.com/coredns/coredns/plugin/pkg/transport
github.com/coredns/coredns/plugin/pkg/uniq
github.com/coredns/coredns/plugin/test
github.com/coredns/coredns/request
# github.com/coreos/go-oidc/v3 v3.10.0
## explicit; go 1.21
github.com/coreos/go-oidc/v3/oidc
@@ -69,9 +33,6 @@ github.com/facebookgo/grace/gracenet
## explicit
# github.com/facebookgo/subset v0.0.0-20150612182917-8dac2c3c4870
## explicit
# github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568
## explicit
github.com/flynn/go-shlex
# github.com/fortytw2/leaktest v1.3.0
## explicit
github.com/fortytw2/leaktest
@@ -124,9 +85,6 @@ github.com/gobwas/pool/pbytes
## explicit; go 1.15
github.com/gobwas/ws
github.com/gobwas/ws/wsutil
# github.com/golang/protobuf v1.5.4
## explicit; go 1.17
github.com/golang/protobuf/proto
# github.com/google/gopacket v1.1.19
## explicit; go 1.12
github.com/google/gopacket
@@ -145,9 +103,6 @@ github.com/gorilla/websocket
github.com/grpc-ecosystem/grpc-gateway/v2/internal/httprule
github.com/grpc-ecosystem/grpc-gateway/v2/runtime
github.com/grpc-ecosystem/grpc-gateway/v2/utilities
# github.com/grpc-ecosystem/grpc-opentracing v0.0.0-20180507213350-8e809c8a8645
## explicit
github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc
# github.com/json-iterator/go v1.1.12
## explicit; go 1.12
github.com/json-iterator/go
@@ -163,12 +118,6 @@ github.com/mattn/go-colorable
# github.com/mattn/go-isatty v0.0.20
## explicit; go 1.15
github.com/mattn/go-isatty
# github.com/matttproud/golang_protobuf_extensions v1.0.4
## explicit; go 1.9
github.com/matttproud/golang_protobuf_extensions/pbutil
# github.com/miekg/dns v1.1.66
## explicit; go 1.23.0
github.com/miekg/dns
# github.com/mitchellh/go-homedir v1.1.0
## explicit
github.com/mitchellh/go-homedir
@@ -199,11 +148,6 @@ github.com/onsi/ginkgo/v2/internal/interrupt_handler
github.com/onsi/ginkgo/v2/internal/parallel_support
github.com/onsi/ginkgo/v2/reporters
github.com/onsi/ginkgo/v2/types
# github.com/opentracing/opentracing-go v1.2.0
## explicit; go 1.14
github.com/opentracing/opentracing-go
github.com/opentracing/opentracing-go/ext
github.com/opentracing/opentracing-go/log
# github.com/pelletier/go-toml/v2 v2.0.9
## explicit; go 1.16
# github.com/pkg/errors v0.9.1
@@ -262,6 +206,8 @@ github.com/russross/blackfriday/v2
github.com/stretchr/testify/assert
github.com/stretchr/testify/assert/yaml
github.com/stretchr/testify/require
# github.com/tinylib/msgp v1.6.3
## explicit; go 1.24
# github.com/urfave/cli/v2 v2.3.0 => github.com/ipostelnik/cli/v2 v2.3.1-0.20210324024421-b6ea8234fe3d
## explicit; go 1.11
github.com/urfave/cli/v2
@@ -510,7 +456,6 @@ google.golang.org/protobuf/internal/descfmt
google.golang.org/protobuf/internal/descopts
google.golang.org/protobuf/internal/detrand
google.golang.org/protobuf/internal/editiondefaults
google.golang.org/protobuf/internal/editionssupport
google.golang.org/protobuf/internal/encoding/defval
google.golang.org/protobuf/internal/encoding/json
google.golang.org/protobuf/internal/encoding/messageset
@@ -530,13 +475,10 @@ google.golang.org/protobuf/internal/strs
google.golang.org/protobuf/internal/version
google.golang.org/protobuf/proto
google.golang.org/protobuf/protoadapt
google.golang.org/protobuf/reflect/protodesc
google.golang.org/protobuf/reflect/protoreflect
google.golang.org/protobuf/reflect/protoregistry
google.golang.org/protobuf/runtime/protoiface
google.golang.org/protobuf/runtime/protoimpl
google.golang.org/protobuf/types/descriptorpb
google.golang.org/protobuf/types/gofeaturespb
google.golang.org/protobuf/types/known/anypb
google.golang.org/protobuf/types/known/durationpb
google.golang.org/protobuf/types/known/fieldmaskpb