cloudflare / cloudflare/cloudflared

Don't filter EDE data

Open
#1,178 0 comments 0 reactions 0 assignees View on GitHub
Priority: Normal Type: Bug
Dominant language
Go
Stars
15.6k
Forks
1.4k
PR merge metrics
No merged PRs in 30d

Description

**Cloudflare:**
```
$ dig @1.1.1.1 sigfail.ippacket.stream
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 6 (DNSSEC Bogus): (failed to verify sigfail.rsa2048-sha256.ippacket.stream. A: using DNSKEY ids = [46436])
;; QUESTION SECTION:
;sigfail.ippacket.stream. IN A
```

**cloudflared:**
```
$ cloudflared proxy-dns --port 5053 --upstream https://1.1.1.1/dns-query 2> /dev/null &
$ dig @127.0.0.1 -p 5053 sigfail.ippacket.stream
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: ce9a7dbd8a9d5eed (echoed)
;; QUESTION SECTION:
;sigfail.ippacket.stream. IN A
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.