diff --git a/lib/cookies/control.c b/lib/cookies/control.c
index 97e73860c5df3ec158c9d896b4aa06d513a5a9cf..d3e1a31373a9c398553ef974f30e311f76c34b9b 100644
--- a/lib/cookies/control.c
+++ b/lib/cookies/control.c
@@ -128,8 +128,8 @@ int kr_address_bytes(const void *sockaddr, const uint8_t **addr, size_t *len)
 }
 
 int kr_client_cokie_fnv64(uint8_t cc_buf[KNOT_OPT_COOKIE_CLNT],
-                          void *clnt_sockaddr, void *srvr_sockaddr,
-                          struct secret_quantity *secret)
+                          const void *clnt_sockaddr, const void *srvr_sockaddr,
+                          const struct secret_quantity *secret)
 {
 	if (!cc_buf) {
 		return kr_error(EINVAL);
@@ -178,7 +178,8 @@ int kr_client_cokie_fnv64(uint8_t cc_buf[KNOT_OPT_COOKIE_CLNT],
  * Check whether there is a cached cookie that matches the current client
  * cookie.
  */
-static const uint8_t *peek_and_check_cc(struct kr_cache_txn *txn, void *sockaddr,
+static const uint8_t *peek_and_check_cc(struct kr_cache_txn *txn,
+                                        const void *sockaddr,
                                         const uint8_t cc[KNOT_OPT_COOKIE_CLNT])
 {
 	assert(txn && sockaddr && cc);
@@ -202,8 +203,9 @@ static const uint8_t *peek_and_check_cc(struct kr_cache_txn *txn, void *sockaddr
 	return NULL;
 }
 
-int kr_request_put_cookie(struct cookies_control *cntrl, void *clnt_sockaddr,
-                          void *srvr_sockaddr, knot_pkt_t *pkt)
+int kr_request_put_cookie(const struct cookies_control *cntrl,
+                          const void *clnt_sockaddr, const void *srvr_sockaddr,
+                          knot_pkt_t *pkt)
 {
 	assert(cntrl);
 	assert(pkt);
diff --git a/lib/cookies/control.h b/lib/cookies/control.h
index 7a2bbaabaf791a00d306a00814b9bdd43a412ef3..d59df28d10b14d53ce641b87ea97b676cdd2f64a 100644
--- a/lib/cookies/control.h
+++ b/lib/cookies/control.h
@@ -67,8 +67,8 @@ int kr_address_bytes(const void *sockaddr, const uint8_t **addr, size_t *len);
  */
 KR_EXPORT
 int kr_client_cokie_fnv64(uint8_t cc_buf[KNOT_OPT_COOKIE_CLNT],
-                          void *clnt_sockaddr, void *srvr_sockaddr,
-                          struct secret_quantity *secret);
+                          const void *clnt_sockaddr, const void *srvr_sockaddr,
+                          const struct secret_quantity *secret);
 
 /**
  * Insert a DNS cookie into query packet.
@@ -79,5 +79,6 @@ int kr_client_cokie_fnv64(uint8_t cc_buf[KNOT_OPT_COOKIE_CLNT],
  * @param pkt           DNS request packet.
  */
 KR_EXPORT
-int kr_request_put_cookie(struct cookies_control *cntrl, void *clnt_sockaddr,
-                          void *srvr_sockaddr, knot_pkt_t *pkt);
+int kr_request_put_cookie(const struct cookies_control *cntrl,
+                          const void *clnt_sockaddr, const void *srvr_sockaddr,
+                          knot_pkt_t *pkt);