COREDNS-HTTPS(7)
π COREDNS-HTTPS π
okay so this is the https plugin from the CoreDNS Plugins manual, section 7 β yes bestie, we're reading the docs together, it's a whole vibe π
β¨ NAME β¨
https β literally configures your DNS-over-HTTPS (DoH) server options. that's it, that's the whole job π«Ά
πΈ DESCRIPTION πΈ
the https plugin lets you set the parameters for the DNS-over-HTTPS (DoH) server so you can fine-tune the security posture and the performance of the server. both. at once. iconic behavior honestly β¨
π¨ important heads-up bestie: this plugin can only be used once per HTTPS listener block. one and done, no double-dipping π
π SYNTAX π
https {
max_connections NON_NEGATIVE_INTEGER
max_streams NON_NEGATIVE_INTEGER
}
max_connections NON_NEGATIVE_INTEGERβ caps the number of concurrent TCP connections to the HTTPS server. if you don't specify it, the default is200. set it to0and it's unbounded β no cap, no limits, main character energy π₯max_streams NON_NEGATIVE_INTEGERβ caps the number of concurrent HTTP/2 streams per HTTPS connection. this is the little guardrail that stops one single connection from spawning unbounded streams and absolutely devouring your server resources π default is250if you don't specify it. set it to0and you get the underlying HTTP/2 transport default instead π¦
π EXAMPLES π
setting custom limits for max connections and streams
like, if you want both numbers under your control:
https://.:443 {
tls cert.pem key.pem
https {
max_connections 100
max_streams 100
}
whoami
}
setting both values to 0 to disable the CoreDNS limits
this one is the "turn off the limits" move β unbounded connections plus the underlying HTTP/2 transport stream default. and ngl, this matches how CoreDNS behaved before v1.14.0, so it's your time machine back to the old days π°οΈβ¨
https://.:443 {
tls cert.pem key.pem
https {
max_connections 0
max_streams 0
}
whoami
}
that's the whole page bestie, you ate it π
shipped to you courtesy of CoreDNS, dated October 2026, and it's COREDNS-HTTPS(7) if anyone asks ππ
π¦ where this page comes from
- opensuse-leap 16.0: coredns-extras 1.15.0-bp160.1.1 Β· Apache-2.0 AND MPL-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms