Skip to content

dnstap: Add optional export of UUID, policy.action and policy.rule from dnstap input

Pavel Doležal requested to merge dnstap_uid_policy into devel

Knot Resolver's dnstap logs can now contain a user ID (UUID) for identifying clients. Use new 'user_id' field from C-DNS library to export this UUID to C-DNS output.

Knot Resolver's dnstap logs can now contain policy.action and policy.rule fields. These fields represent if resolver applied some policy to given query (allow, block, audit) and what rule triggered applied policy.

User can turn on/off export of these C-DNS fields in YAML configuration by (un)setting 'user_id', 'policy_action' and 'policy_rule' in export/cdns-fields option.

Merge request reports