ACK NodeLocal DNSCache is a DNS local cache solution for ACK clusters, based on the open source project NodeLocal DNSCache. After installation, pods can use the acceleration capabilities of the local DNS cache, which improves DNS parsing performance.
Resources created
Installing the add-on deploys two resources. To view them, go to the cluster details page, choose Applications > Helm in the left navigation pane, and select ack-node-local-dns.
| Resource | Type | Description |
|---|---|---|
ack-node-local-dns-admission-controller |
Deployment | A webhook controller that intercepts pod creation requests and injects the DNSConfig needed to route DNS traffic through the local cache. Deployed as two replicas with anti-affinity rules for high availability. |
node-local-dns |
DaemonSet | The local DNS cache process. Runs on every node and serves cached DNS responses to pods on that node. |
What's next
To connect application pods to the local DNS cache after installation, see Use the NodeLocal DNSCache component.
Changelog
September 2025
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.6.1</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.5</p></li> </ul></td> <td><p>September 22, 2025</p></td> <td> <ul> <li><p>Optimization:</p> <ul> <li><p>Removed the <code>aliyun</code> suffix from image tags.</p></li> </ul> <ul> <li><p>Modified the default configurations of the <code>node-local-dns</code> DaemonSet:</p> <ul> <li><p>Added a node affinity rule to prevent scheduling to nodes that run the Windows operating system.</p></li> <li><p>Added annotations for Prometheus metrics collection.</p></li> </ul></li> </ul></li> </ul></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
June 2025
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.6.0</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1-5f96b759-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.5-aliyun</p></li> </ul></td> <td><p>June 09, 2025</p></td> <td> <ul> <li><p>You can now configure the default DNS cache injection policy in the console. If default injection is enabled, you do not need to configure the custom tag <code>node-local-dns-injection=enabled</code>. The DNS cache policy is automatically injected into newly created pods.</p></li> <li><p>Pods scheduled to virtual nodes can use the DNS cache. This requires <a href="https://www.alibabacloud.com/help/en/document_detail/157363.html">ACK Virtual Node</a> component v2.4.0 or later.</p></li> </ul></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
April 2024
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.9</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1-5f96b759-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.4-aliyun</p></li> </ul></td> <td><p>April 02, 2024</p></td> <td><p>Fixed an issue where the admission webhook certificate might not match.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
March 2024
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.8</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1-5f96b759-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.3-aliyun</p></li> </ul></td> <td><p>March 21, 2024</p></td> <td><p>Upgraded the cache component to the community version v1.22.28 to fix the "bufsize size too small" issue.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
December 2023
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.7</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.3-aliyun</p></li> </ul></td> <td><p>December 06, 2023</p></td> <td><p>Fixed an issue where the address of the kube-dns service was missing from the webhook injection.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
April 2023
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.6</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun</p></li> </ul></td> <td><p>April 21, 2023</p></td> <td><p>Optimized the scheduling affinity configuration of the admission webhook deployment to improve availability.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> <tr> <td><p>1.5.5</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun</p></li> </ul></td> <td><p>April 07, 2023</p></td> <td><p>Optimized the scheduling affinity configuration of the admission webhook deployment to improve availability.</p></td> <td><p>The scheduling policy was adjusted. If all schedulable nodes in a cluster are in a single zone, the admission webhook deployment replicas may fail to be scheduled. This can cause the component upgrade to fail. To ensure availability, scale out your cluster and distribute schedulable nodes across multiple zones so that the admission webhook deployment replicas can be scheduled.</p></td> </tr> </tbody> </table>
January 2023
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.4</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun</p></li> </ul></td> <td><p>January 30, 2023</p></td> <td><p>Fixed the CVE-2021-46848 security issue.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
October 2022
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.3</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.7-eef3c59-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun</p></li> </ul></td> <td><p>October 27, 2022</p></td> <td><p>Fixed security issues such as CVE-2021-33574 and CVE-2022-23219.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
September 2022
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.2</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.6-76dcd52-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun</p></li> </ul></td> <td><p>September 13, 2022</p></td> <td><p>Fixed security issues such as CVE-2022-1664, CVE-2022-1292, and CVE-2022-2068.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
July 2022
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.1</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.3-a38fc90-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun</p></li> </ul></td> <td><p>July 26, 2022</p></td> <td> <ul> <li><p>Changed the serialization method for communication between NodeLocal DNSCache and the API server.</p></li> <li><p>Fixed a TLS CVE.</p></li> </ul></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
February 2022
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.5.0</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.3-a38fc90-aliyun</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.1-aliyun</p></li> </ul></td> <td><p>February 22, 2022</p></td> <td> <ul> <li><p>Supports the ARM64 architecture.</p></li> <li><p>Supports the <span><code>serve_stale</code></span> disaster recovery mode.</p></li> <li><p>Supports adaptive iptables calls, compatible with CentOS 8, Alibaba Cloud Linux 3, and later versions.</p></li> </ul></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
November 2021
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.4.0</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.0-b1bd0e8-aliyun</p></li> </ul></td> <td><p>November 24, 2021</p></td> <td><p>Updated the APIVersion of MutatingWebhookConfiguration to support Kubernetes v1.22.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
September 2021
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.3.5</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.3-8fe673f-aliyun</p></li> </ul></td> <td><p>September 23, 2021</p></td> <td><p>Added a default CPU limit of 1 core for the controller to enhance security.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> <tr> <td><p>1.3.4</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.2-8b46b2f-aliyun</p></li> </ul></td> <td><p>September 16, 2021</p></td> <td><p>Added a default memory resource limit. Images are now pulled from the internal network by default.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>
April 2021
<table> <thead> <tr> <td><p><b>Version number</b></p></td> <td><p><b>Image URL</b></p></td> <td><p><b>Change time</b></p></td> <td><p><b>Changes</b></p></td> <td><p><b>Impact</b></p></td> </tr> </thead> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <colgroup></colgroup> <tbody> <tr> <td><p>1.3.3</p></td> <td> <ul> <li><p>Cache component: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac</p></li> <li><p>Controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.2-8b46b2f-aliyun</p></li> </ul></td> <td><p>April 21, 2021</p></td> <td><p>The component was first published.</p></td> <td><p>This upgrade does not affect your services.</p></td> </tr> </tbody> </table>