Remove the DNS over HTTPS (DoH) proxy feature built on CoreDNS due to security vulnerabilities (GO-2025-3942, GO-2026-4289). This removes: - Standalone proxy-dns command (cloudflared proxy-dns) - Tunnel subcommand (cloudflared tunnel proxy-dns) - Proxy-dns flags for tunnel run (--proxy-dns, --proxy-dns-port, etc.) - Config file resolver section support - tunneldns/ package (CoreDNS-based implementation) - Related component tests BREAKING CHANGE: The proxy-dns feature is no longer available. Users should migrate to alternative DNS over HTTPS solutions. |
||
|---|---|---|
| .. | ||
| access | ||
| cliutil | ||
| flags | ||
| proxydns | ||
| tail | ||
| tunnel | ||
| updater | ||
| app_forward_service.go | ||
| app_service.go | ||
| common_service.go | ||
| generic_service.go | ||
| linux_service.go | ||
| macos_service.go | ||
| main.go | ||
| service_template.go | ||
| windows_service.go | ||