CalvinBackup/ctrld
1
0
Fork 0
mirror of https://github.com/Control-D-Inc/ctrld.git synced 2026-07-16 13:17:19 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
7f3d332b64dc46c1e103f13afdcd4e48d687082b
ctrld/cmd/cli
T
History
Cuong Manh Le 7f3d332b64 cmd/cli: discard upstream answers whose question mismatches the request 
Defense in depth against cache poisoning: a compromised or misbehaving
upstream can return an answer for a different name than was asked (e.g.
records for attacker.example in response to a query for victim.example).
Such an answer would be cached under the legitimate request key and
served to subsequent queries.

Validate that the upstream answer echoes the request's question
(case-insensitive name plus Qtype/Qclass, per RFC 1035 section 4.1.2)
before serving or caching it. A mismatch is logged at debug level and
the upstream is skipped, failing safe to the next upstream or SERVFAIL.

Refs github.com/Control-D-Inc/ctrld/issues/322
2026-07-14 23:20:51 +07:00
..
winres
all: include file information in Windows builds
2024-02-07 14:40:18 +07:00
ad_others.go
Removing Windows Server support
2026-04-30 19:19:18 +07:00
ad_windows_test.go
Including system metadata when posting to utility API
2026-04-30 19:19:19 +07:00
ad_windows.go
Including system metadata when posting to utility API
2026-04-30 19:19:19 +07:00
cgo.go
cmd/cli: support nocgo version for upgrade command
2025-02-18 20:25:13 +07:00
cli_intercept_listener_test.go
cmd/cli: preserve fallback listener port across reload in DNS intercept
2026-07-13 21:50:02 +07:00
cli_test.go
cmd/cli: write new config file on reload
2024-08-07 15:51:11 +07:00
cli.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
commands_clients.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
commands_interfaces.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
commands_log.go
Add log tail command for live log streaming
2026-04-30 19:19:19 +07:00
commands_run.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
commands_service_manager.go
refactor: rename service_manager.go and remove unused CommandRunner interface
2026-04-30 19:19:18 +07:00
commands_service_reload.go
feat: enhance logging in service commands with consistent logger usage
2026-04-30 19:19:18 +07:00
commands_service_restart.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
commands_service_start.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
commands_service_status.go
feat: enhance logging in service commands with consistent logger usage
2026-04-30 19:19:18 +07:00
commands_service_stop.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
commands_service_uninstall.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
commands_service.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
commands_test.go
refactor: convert rootCmd from global to local variable
2026-04-30 19:19:18 +07:00
commands_upgrade.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
control_client.go
Add log tail command for live log streaming
2026-04-30 19:19:19 +07:00
control_server_test.go
cmd: allow import/running ctrld as library
2023-08-15 18:22:38 +07:00
control_server.go
cmd/cli: rate-limit PIN brute-force on control socket
2026-05-12 12:42:07 +07:00
dns_intercept_darwin_test.go
cmd/cli: preserve fallback listener port across reload in DNS intercept
2026-07-13 21:50:02 +07:00
dns_intercept_darwin.go
fix: back off unroutable IPv6 DoH upstream health-check spam
2026-07-09 16:41:55 +07:00
dns_intercept_others.go
cmd/cli: skip upstream.os healthcheck when WFP loopback protect enabled
2026-05-07 19:37:42 +07:00
dns_intercept_windows.go
Port NRPT recovery limits to master
2026-07-13 20:18:26 +07:00
dns_proxy_test.go
cmd/cli: discard upstream answers whose question mismatches the request
2026-07-14 23:20:51 +07:00
dns_proxy.go
cmd/cli: discard upstream answers whose question mismatches the request
2026-07-14 23:20:51 +07:00
firewall_darwin.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
firewall_others.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
firewall_test.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
firewall_windows.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
firewall.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
hostname_test.go
all: add custom hostname support for provisoning
2024-10-24 13:05:48 +07:00
hostname.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
http_log_test.go
cmd/cli: workaround TB.TemdDir path too long for Unix socket path
2026-04-30 19:19:19 +07:00
http_log.go
refactor: replace Unix socket log communication with HTTP-based system
2026-04-30 19:19:18 +07:00
library.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
log_tail_test.go
Add log tail command for live log streaming
2026-04-30 19:19:19 +07:00
log_writer_test.go
log: persist internal runtime logs to disk
2026-04-30 19:19:19 +07:00
log_writer.go
dns_intercept: add WFP loopback protect for VPN block-outside-dns
2026-04-30 19:30:43 +07:00
loop_test.go
cmd/cli: improving loop guard test
2023-12-13 14:53:29 +07:00
loop.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
main_test.go
feat: add firewall mode DNS-resolved IP allowlist
2026-07-08 15:31:54 +07:00
main.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
metrics.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
net_darwin.go
refactor: consolidate network interface detection logic
2026-04-30 19:19:18 +07:00
net_linux.go
refactor: consolidate network interface detection logic
2026-04-30 19:19:18 +07:00
net_others.go
refactor: consolidate network interface detection logic
2026-04-30 19:19:18 +07:00
net_windows_test.go
refactor: improve network interface validation
2026-04-30 19:19:18 +07:00
net_windows.go
refactor: consolidate network interface detection logic
2026-04-30 19:19:18 +07:00
network_manager_linux.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
network_manager_others.go
cmd/cli: avoid accessing mainLog when possible
2026-04-30 19:19:18 +07:00
nextdns.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
nocgo.go
cmd/cli: support nocgo version for upgrade command
2025-02-18 20:25:13 +07:00
nrpt_recovery_limiter_windows_test.go
Port NRPT recovery limits to master
2026-07-13 20:18:26 +07:00
nrpt_recovery_limiter_windows.go
Port NRPT recovery limits to master
2026-07-13 20:18:26 +07:00
os_darwin.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
os_freebsd.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
os_linux_test.go
cmd: allow import/running ctrld as library
2023-08-15 18:22:38 +07:00
os_linux.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
os_others.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
os_windows_test.go
Removing Windows Server support
2026-04-30 19:19:18 +07:00
os_windows.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
prog_darwin.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
prog_freebsd.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
prog_linux_test.go
cmd/cli: fix systemd-networkd-wait-online blocks ctrld starts
2024-05-09 18:39:30 +07:00
prog_linux.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
prog_log.go
refactor: migrate from zerolog to zap logging library
2026-04-30 19:19:18 +07:00
prog_others.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
prog_test.go
fix: back off unroutable IPv6 DoH upstream health-check spam
2026-07-09 16:41:55 +07:00
prog_windows.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
prog.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
prometheus.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
reload_others.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
reload_windows.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
resolvconf_darwin.go
cmd/cli: avoid accessing mainLog when possible
2026-04-30 19:19:18 +07:00
resolvconf_not_darwin_unix.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
resolvconf_test.go
docs: improve test resolv.conf handling documentation
2026-04-30 19:19:18 +07:00
resolvconf_windows.go
cmd/cli: avoid accessing mainLog when possible
2026-04-30 19:19:18 +07:00
resolvconf.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
search_domains_unix.go
all: preserve search domains settings
2025-05-15 17:00:59 +07:00
search_domains_windows.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
self_delete_others.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
self_delete_windows.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
self_kill_others.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
self_kill_unix.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
self_upgrade_others.go
cmd/cli: handle stop signal from service manager
2025-03-26 23:18:36 +07:00
self_upgrade_windows.go
cmd/cli: handle stop signal from service manager
2025-03-26 23:18:36 +07:00
sema.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
service_args_darwin.go
feat: introduce DNS intercept mode infrastructure
2026-04-30 19:19:19 +07:00
service_args_others.go
feat: introduce DNS intercept mode infrastructure
2026-04-30 19:19:19 +07:00
service_args_windows.go
feat: introduce DNS intercept mode infrastructure
2026-04-30 19:19:19 +07:00
service_others.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
service_test.go
all: implement self-upgrade flag from API
2025-03-26 23:18:04 +07:00
service_windows.go
Add comprehensive documentation to CLI components and core functionality
2026-04-30 19:19:18 +07:00
service.go
feat: capitalize all log messages for better readability
2026-04-30 19:19:18 +07:00
uninstall_invalid_test.go
fix: restore DNS during invalid-device uninstall
2026-07-14 23:20:27 +07:00
upstream_monitor.go
fix: back off unroutable IPv6 DoH upstream health-check spam
2026-07-09 16:41:55 +07:00
vpn_dns_test.go
fix: back off unroutable IPv6 DoH upstream health-check spam
2026-07-09 16:41:55 +07:00
vpn_dns.go
fix: back off macOS pf watchdog exec storms
2026-07-09 16:25:47 +07:00
winres_windows.go
all: include file information in Windows builds
2024-02-07 14:40:18 +07:00