-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cherry-pick #19321 to 7.9: DNS over TLS support for DNS processor #20091
Conversation
Pinging @elastic/siem (Team:SIEM) |
Pinging @elastic/integrations (Team:Integrations) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this a blocker for 7.9.0?
💔 Tests FailedExpand to view the summary
Build stats
Test stats 🧪
Test errorsExpand to view the tests failures
Steps errorsExpand to view the steps failures
Log outputExpand to view the last 100 lines of log output
|
Lets try to give some room for backports until BC3. Please don't merge afterwards (especially new features), as we're already testing the releae + CI is constantly red and needs to be investigated.
b61c0d0
to
f32b264
Compare
e382ef3
to
c949774
Compare
* DNS over TLS DoT support elastic#16663 * added changelog elastic#19321 * Update dns.asciidoc * added testsuite for elastic#19321 * Fix CHANGELOG entries and lint fixes * Apply suggestions from code review Co-authored-by: Marc Guasch <[email protected]> Co-authored-by: Andrew Kroh <[email protected]> (cherry picked from commit 89bfb6c)
c949774
to
1ffa935
Compare
This will land in 7.10 since this is a new feature and 7.9 is frozen. |
Cherry-pick of PR #19321 to 7.9 branch. Original message:
Label: Enhancement
What does this PR do?
Implement DNS over TLS (DoT) handler for the DNS Processor. #16663
Why is it important?
Now you can securely query for reverseDNS lookups across the internet. E.g. cloudflare 1.1.1.1 supports DNS over TLS
Checklist
I would need a bit of help here. Do I have to touch every beat config, or is the DNS processor page in the docs rendered from the libbeat ascii doc file?
CHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.How to test this PR locally
Minimum filebeat config
Full filebeat config
Example doc
tls
,udp
. If left empty it will revert to defaultudp
Related issues
Use cases
Logs
TLS
UDP / no config