tls on CoreDNS: DNS and Service Discoveryhttps://coredns.website.cncfstack.com/tags/tls/Recent content in tls on CoreDNS: DNS and Service DiscoveryHugo -- gohugo.ioen-usCoreDNS - All Rights ReservedMon, 13 Jul 2026 15:51:55 +0000tlshttps://coredns.website.cncfstack.com/plugins/tls/Mon, 13 Jul 2026 15:51:55 +0000https://coredns.website.cncfstack.com/plugins/tls/Description CoreDNS supports queries that are encrypted using TLS (DNS over Transport Layer Security, RFC 7858) or are using gRPC (https://grpc.io/ , not an IETF standard). Normally DNS traffic isn’t encrypted at all (DNSSEC only signs resource records). The tls “plugin” allows you to configure the cryptographic keys that are needed for both DNS-over-TLS and DNS-over-gRPC. If the tls plugin is omitted, then no encryption takes place. The gRPC protobuffer is defined in pb/dns.