[dnsdist] dnsdist: tls support webserver api ?

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon Sep 6 07:19:43 UTC 2021


On Fri, Sep 03, 2021 at 09:17:19AM +0000,
 dmachard via dnsdist <dnsdist at mailman.powerdns.com> wrote 
 a message of 149 lines which said:

> I would like to know if  it's planned to support tls on the
> webserver api and web interface ?

In the mean time, I use stunnel in front of dnsdist.

Configuration of dnsdist:

webserver("[::1]:8082")
setWebserverConfig(... whatever)

Configuration of stunnel:

; TLS front-end to a web server
[dnsdist]
; Accepts both IPv4 and IPv6
accept  = :::8083
connect = localhost-ipv6:8082
cert = /etc/stunnel/stunnel.pem
key = /etc/stunnel/stunnel.key

Certificates are obtained from CAcert but any CA you recognize will
work.


More information about the dnsdist mailing list