COREDNS-HTTPS(7)

πŸ“¦
version 1.15.0 Β· 2 versions
, in opensuse-leap 16.0

πŸŽ€ COREDNS-HTTPS πŸŽ€

okay so this is the https plugin from the CoreDNS Plugins manual, section 7 β€” yes bestie, we're reading the docs together, it's a whole vibe πŸ’…

✨ NAME ✨

https β€” literally configures your DNS-over-HTTPS (DoH) server options. that's it, that's the whole job 🫢

🌸 DESCRIPTION 🌸

the https plugin lets you set the parameters for the DNS-over-HTTPS (DoH) server so you can fine-tune the security posture and the performance of the server. both. at once. iconic behavior honestly ✨

🚨 important heads-up bestie: this plugin can only be used once per HTTPS listener block. one and done, no double-dipping πŸ’€

πŸ’– SYNTAX πŸ’–

https {
    max_connections NON_NEGATIVE_INTEGER
    max_streams NON_NEGATIVE_INTEGER
}
  • max_connections NON_NEGATIVE_INTEGER β€” caps the number of concurrent TCP connections to the HTTPS server. if you don't specify it, the default is 200. set it to 0 and it's unbounded β€” no cap, no limits, main character energy πŸ”₯
  • max_streams NON_NEGATIVE_INTEGER β€” caps the number of concurrent HTTP/2 streams per HTTPS connection. this is the little guardrail that stops one single connection from spawning unbounded streams and absolutely devouring your server resources 😭 default is 250 if you don't specify it. set it to 0 and you get the underlying HTTP/2 transport default instead πŸ¦‹

🌈 EXAMPLES 🌈

setting custom limits for max connections and streams

like, if you want both numbers under your control:

https://.:443 {
    tls cert.pem key.pem
    https {
        max_connections 100
        max_streams 100
    }
    whoami
}

setting both values to 0 to disable the CoreDNS limits

this one is the "turn off the limits" move β€” unbounded connections plus the underlying HTTP/2 transport stream default. and ngl, this matches how CoreDNS behaved before v1.14.0, so it's your time machine back to the old days πŸ•°οΈβœ¨

https://.:443 {
    tls cert.pem key.pem
    https {
        max_connections 0
        max_streams 0
    }
    whoami
}

that's the whole page bestie, you ate it πŸ’… shipped to you courtesy of CoreDNS, dated October 2026, and it's COREDNS-HTTPS(7) if anyone asks πŸŽ€πŸ’–

πŸ“¦ where this page comes from