]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
doc: config.schema.json: added tunnel-filter
authorAleš Mrázek <ales.mrazek@nic.cz>
Fri, 10 Oct 2025 10:44:06 +0000 (12:44 +0200)
committerAleš Mrázek <ales.mrazek@nic.cz>
Fri, 10 Oct 2025 10:44:06 +0000 (12:44 +0200)
doc/_static/config.schema.json

index db2fe0b9bf32c2de509fb4101ea00e5c83249f7a..ed17f54ec80c960f0403baa6da2f83dc2269d2b8 100644 (file)
             "description": "List of Forward Zones and its configuration.",
             "default": null
         },
+        "tunnel-filter": {
+            "description": "Block suspected attempts of data exfiltration via DNS tunneling.",
+            "type": "object",
+            "properties": {
+                "enable": {
+                    "type": "boolean",
+                    "description": "enable/disable this filtering",
+                    "default": false
+                },
+                "file": {
+                    "type": [
+                        "string",
+                        "null"
+                    ],
+                    "description": "path to the neural network to be used",
+                    "default": null
+                },
+                "tags": {
+                    "type": [
+                        "array",
+                        "null"
+                    ],
+                    "items": {
+                        "type": "string",
+                        "pattern": "^(?!-)[a-z0-9-]*[a-z0-9]+$"
+                    },
+                    "description": "set of tags when to apply the filtering (same as in other local-data)",
+                    "default": null
+                }
+            },
+            "default": {
+                "enable": false,
+                "file": null,
+                "tags": null
+            }
+        },
         "cache": {
             "description": "DNS resolver cache configuration.",
             "type": "object",
                             "exterr",
                             "rules",
                             "prlayr",
-                            "defer"
+                            "defer",
+                            "tunnel"
                         ]
                     },
                     "description": "List of groups for which 'debug' logging level is set.",