COREDNS-HTTPS3(7)
π NAME π
okay so this is the COREDNS-HTTPS3(7) page from the CoreDNS Plugins manual, and it's all about the https3 plugin β the one that configures DNS-over-HTTPS/3 (DoH3) server options. iykyk π
π DESCRIPTION π
the https3 plugin lets you configure parameters for the DNS-over-HTTPS/3 (DoH3) server so you can fine-tune the security posture and performance of the server. HTTPS/3 uses QUIC as the underlying transport β yes, QUIC is literally the main character here. π¦
π«Ά heads up, bestie: this plugin can only be used once per HTTPS3 listener block. one per block, no double-stacking. periodt.
β¨ SYNTAX β¨
https3 {
max_streams POSITIVE_INTEGER
max_connections POSITIVE_INTEGER
}
max_streamsβ caps the number of concurrent QUIC streams per connection. this helps prevent unbounded streams on a single connection from exhausting server resources. if you don't specify it, the default value is256. set it to0to use the underlying QUIC transport default. πmax_connectionsβ caps the number of concurrent HTTPS/3 connections accepted by the server. if you don't specify it, the default value is200. connections above the configured limit are rejected. set it to0to disable the CoreDNS connection limit. π«Ά
π₯ EXAMPLES π₯
set custom limits for maximum streams:
https3://.:443 {
tls cert.pem key.pem
https3 {
max_streams 50
}
whoami
}
set values to 0 for QUIC transport default, matching CoreDNS behaviour before v1.14.0:
https3://.:443 {
tls cert.pem key.pem
https3 {
max_streams 0
}
whoami
}
mwah π this has been COREDNS-HTTPS3(7) β source/version: CoreDNS, date: October 2026. go tune those DoH3 limits, bestie, and remember: one https3 block per HTTPS3 listener block. slay β¨π
π¦ where this page comes from
- opensuse-leap 16.0: coredns-extras 1.15.0-bp160.1.1 Β· Apache-2.0 AND MPL-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms