All Products
Search
Document Center

Container Service for Kubernetes:ACK NodeLocal DNSCache

Last Updated:Jan 02, 2024

This topic introduces the Container Service for Kubernetes (ACK) NodeLocal DNSCache component and describes the usage notes and release notes for the component.

Introduction

ACK NodeLocal DNSCache is a local DNS caching solution that is developed based on the open source NodeLocal DNSCache project. You can deploy ACK NodeLocal DNSCache by installing the ack-node-local-dns Helm chart. This solution consists of a DNS caching agent that runs as a DaemonSet and an admission controller that runs as a Deployment to dynamically inject DNSConfig. The admission controller listens for pod creation requests and dynamically modifies DNSConfig. This enables pods to use local DNS cache to accelerate DNS lookups.

Usage notes

You can use ACK NodeLocal DNSCache to enable pods to access the local DNS cache on nodes. For more information, see Configure NodeLocal DNSCache.

For more information about how to update and uninstall NodeLocal DNSCache, see Update NodeLocal DNSCache and Uninstall NodeLocal DNSCache.

Release notes

December 2023

Version number

Image address

Release date

Description

Impact

1.5.7

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.3-aliyun

2023-12-06

The issue that the address of the kube-dns Service is missing in admission webhooks is fixed.

No impact on workloads

April 2023

Version number

Image address

Release date

Description

Impact

1.5.6

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

2023-04-21

The affinity rules for scheduling admission webhooks are optimized to improve availability.

No impact on workloads

1.5.5

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

2023-04-07

The affinity rules for scheduling admission webhooks are optimized to improve availability.

If all schedulable nodes in the cluster reside in a single zone, the pods of admission webhooks may fail to be scheduled or updated due to the changes in the scheduling policy. To resolve this issue, we recommend that you add new nodes in different zones to the cluster. This way, the pods of admission webhooks can be scheduled to the nodes that are distributed across multiple zones.

January 2023

Version number

Image address

Release date

Description

Impact

1.5.4

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

2023-01-30

CVE-2021-46848 is fixed.

No impact on workloads

October 2022

Version number

Image address

Release date

Description

Impact

1.5.3

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.7-eef3c59-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

2022-10-27

CVE-2021-33574 and CVE-2022-23219 are fixed.

No impact on workloads

September 2022

Version number

Image address

Release date

Description

Impact

1.5.2

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.6-76dcd52-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

2022-09-13

CVE-2022-1664, CVE-2022-1292, CVE-2022-2068 are fixed.

No impact on workloads

July 2022

Version number

Image address

Release date

Description

Impact

1.5.1

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.3-a38fc90-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

2022-07-26

  • The data serialization method used for communication between ACK NodeLocal DNSCache and the Kubernetes API server is changed.

  • Common Vulnerabilities and Exposures (CVE) vulnerabilities related to Transport Layer Security (TLS) are fixed.

No impact on workloads

February 2022

Version number

Image address

Release date

Description

Impact

1.5.0

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.3-a38fc90-aliyun

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.1-aliyun

2022-02-22

  • The ARM64 architecture is supported.

  • The serve_stale disaster recovery mode is supported.

  • Iptables is supported to enable compatibility with CentOS 8, and Alibaba Cloud Linux 3 and later versions.

No impact on workloads

November 2021

Version number

Image address

Release date

Description

Impact

1.4.0

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.0-b1bd0e8-aliyun

2021-11-24

The API version of the MutatingWebhookConfiguration resource is updated to support Kubernetes 1.22.

No impact on workloads

September 2021

Version number

Image address

Release date

Description

Impact

1.3.5

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.3-8fe673f-aliyun

2021-09-23

The CPU usage of the admission controller is limited to 1 vCPU by default. This enhances security.

No impact on workloads

1.3.4

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.2-8b46b2f-aliyun

2021-09-16

The memory usage is limited by default. The image is pulled over the internal network by default.

No impact on workloads

April 2021

Version number

Image address

Release date

Description

Impact

1.3.3

  • DNS caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

  • Admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.2-8b46b2f-aliyun

2021-04-21

The first version is released.

No impact on workloads