CoreDNS v1.14.7 发布
This release strengthens DNS caching, forwarding, and transport reliability, with
improved stale-cache behavior, safer upstream handling, and tighter connection
and overload controls. It also adds new capabilities for ACME-managed TLS,
topology-aware Kubernetes services, HTTP/2 forwarding, DNS-over-QUIC, and
secondary zone management, while delivering correctness and performance fixes
across file serving, rewrites, ACLs, hosts, transfers, and Kubernetes handling.
The release is built with Go 1.26.6 to include fixes for CVE-2026-56865,
CVE-2026-56864, and CVE-2026-33818.
## Brought to You By
Baltasar Blanco
houyuwushang
Karan V
liucongran
llucas
Manuel Rüger
maximilize
Mehrdad Biukian
Michael Wolf
Ncesam
Nikolaus Schuetz
Nitin Nizhawan
Omkhar Arasaratnam
Pujitha Paladugu
rpb-ant
Saleh
Sueun Cho
Ville Vesilehto
Yash Singh
Yong Tang
## Noteworthy Changes
core: Add connection-level concurrency limiting to DNS-over-QUIC (https://github.com/coredns/coredns/pull/8213)
core: Add max conn limit to https3 (https://github.com/coredns/coredns/pull/8187)
core: Document in-process embedding (https://github.com/coredns/coredns/pull/8436)
core: Make keylog path test portable (https://github.com/coredns/coredns/pull/8311)
core: Normalize server block zones (https://github.com/coredns/coredns/pull/8320)
core: Pin numeric uid/gid for the nonroot user (https://github.com/coredns/coredns/pull/8316)
plugin/acl: Fix autopath from bypassing acl checks (https://github.com/coredns/coredns/pull/8290)
plugin/acl: Fix blocked clients from receiving cached DNS answers (https://github.com/coredns/coredns/pull/8289)
plugin/auto: Fix inverted arguments in duplicate-origin warning (https://github.com/coredns/coredns/pull/8317)
plugin/cache: Add prefer_positive stale policy (https://github.com/coredns/coredns/pull/8378)
plugin/cache: Bind responses and entries to QCLASS (https://github.com/coredns/coredns/pull/8272)
plugin/cache: Configure stale TTL and failure recheck (https://github.com/coredns/coredns/pull/8411)
plugin/cache: Do not cache SOA-less NODATA responses (https://github.com/coredns/coredns/pull/8232)
plugin/cache: Fix cache stale verification metadata race (https://github.com/coredns/coredns/pull/8366)
plugin/cache: Preserve AD when storing cache entries (https://github.com/coredns/coredns/pull/8438)
plugin/cache: Preserve monotonic time for TTL expiry (https://github.com/coredns/coredns/pull/8346)
plugin/file: Do not expand