All Products
Search

This Product

    Container Service for Kubernetes:ACK NodeLocal DNSCache

    Document Center

    Container Service for Kubernetes:ACK NodeLocal DNSCache

    Last Updated:Jun 17, 2026

    ACK NodeLocal DNSCache accelerates pod DNS lookups by running a local DNS cache on each node.

    Overview

    ACK NodeLocal DNSCache is a local DNS cache based on the open-source NodeLocal DNSCache project. Its Helm chart is ack-node-local-dns. After you install the add-on, ACK creates the following resources:

    On the cluster details page, choose Applications > Helm to view resources created by ack-node-local-dns.

    • ack-node-local-dns-admission-controller (Deployment): A dynamic DNSConfig injection controller. Deployed with two replicas and anti-affinity by default for high availability.

    • node-local-dns (DaemonSet): The DNS caching agent. Runs on each node to provide local DNS caching.

    The admission controller listens for pod creation requests and dynamically modifies each pod's DNSConfig to route DNS queries through the local cache, improving DNS resolution performance.

    Usage

    After installation, configure your pods to use the local DNS cache.

    Release notes

    May 2026

    Version

    Image address

    Release date

    Description

    Impact

    1.6.3

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.5

    2026-05-29

    • Optimizations:

      • Added support for custom scheduling configurations.

      • Added support for custom topology spread constraints.

    This upgrade does not affect your workloads.

    September 2025

    Version

    Image address

    Release date

    Description

    Impact

    1.6.1

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.5

    2025-09-22

    • Optimizations:

      • The aliyun suffix is removed from image tags.

      • Default node-local-dns DaemonSet configuration changes:

        • Adds node affinity to prevent scheduling on Windows nodes.

        • Adds annotations for Prometheus scraping.

    This upgrade does not affect your workloads.

    June 2025

    Version

    Image address

    Release date

    Description

    Impact

    1.6.0

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1-5f96b759-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.5-aliyun

    2025-06-09

    • Configure the default DNS cache injection policy in the console. When enabled, DNS cache injection applies to all new pods automatically, eliminating the need for the node-local-dns-injection=enabled label.

    • Pods on virtual nodes can use the DNS cache. Requires ACK Virtual Node v2.4.0 or later.

    This upgrade does not affect your workloads.

    April 2024

    Version

    Image address

    Release date

    Description

    Impact

    1.5.9

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1-5f96b759-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.4-aliyun

    2024-04-02

    Fixed a potential admission webhook certificate mismatch.

    This upgrade does not affect your workloads.

    March 2024

    Version

    Image address

    Release date

    Description

    Impact

    1.5.8

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.22.28.1-5f96b759-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.3-aliyun

    2024-03-21

    Updated the DNS caching agent to community version v1.22.28 to fix a "bufsize size too small" error.

    This upgrade does not affect your workloads.

    December 2023

    Version

    Image address

    Release date

    Description

    Impact

    1.5.7

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.3-aliyun

    2023-12-06

    Fixed admission webhook failure to inject the kube-dns Service address.

    This upgrade does not affect your workloads.

    April 2023

    Version

    Image address

    Release date

    Description

    Impact

    1.5.6

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

    2023-04-21

    Optimized the scheduling affinity for the admission webhook Deployment to enhance availability.

    This upgrade does not affect your workloads.

    1.5.5

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

    2023-04-07

    Optimized the scheduling affinity for the admission webhook Deployment to enhance availability.

    If all schedulable nodes are in a single availability zone, admission webhook replicas may fail to schedule, causing upgrade failures. Add nodes in multiple availability zones for high availability.

    January 2023

    Version

    Image address

    Release date

    Description

    Impact

    1.5.4

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.8-4864567-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

    2023-01-30

    Fixed security vulnerability CVE-2021-46848.

    This upgrade does not affect your workloads.

    October 2022

    Version

    Image address

    Release date

    Description

    Impact

    1.5.3

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.7-eef3c59-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

    2022-10-27

    Fixed security vulnerabilities, including CVE-2021-33574 and CVE-2022-23219.

    This upgrade does not affect your workloads.

    September 2022

    Version

    Image address

    Release date

    Description

    Impact

    1.5.2

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.6-76dcd52-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

    2022-09-13

    Fixed security vulnerabilities, including CVE-2022-1664, CVE-2022-1292, and CVE-2022-2068.

    This upgrade does not affect your workloads.

    July 2022

    Version

    Image address

    Release date

    Description

    Impact

    1.5.1

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.3-a38fc90-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.2-aliyun

    2022-07-26

    • Changed the serialization method for communication between the ACK NodeLocal DNSCache and the API server.

    • Fixed TLS-related CVEs.

    This upgrade does not affect your workloads.

    February 2022

    Version

    Image address

    Release date

    Description

    Impact

    1.5.0

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.21.4.3-a38fc90-aliyun

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.1-aliyun

    2022-02-22

    • Added support for the ARM64 architecture.

    • Added support for the serve_stale disaster recovery mode.

    • Added adaptive iptables calls to ensure compatibility with CentOS 8, Alibaba Cloud Linux 3, and later versions.

    This upgrade does not affect your workloads.

    November 2021

    Version

    Image address

    Release date

    Description

    Impact

    1.4.0

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.1.0-b1bd0e8-aliyun

    2021-11-24

    Updated the MutatingWebhookConfiguration API version for Kubernetes 1.22 support.

    This upgrade does not affect your workloads.

    September 2021

    Version

    Image address

    Release date

    Description

    Impact

    1.3.5

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.3-8fe673f-aliyun

    2021-09-23

    Added a default 1-core CPU limit to the admission controller for security.

    This upgrade does not affect your workloads.

    1.3.4

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.2-8b46b2f-aliyun

    2021-09-16

    Added a default memory resource limit. The component now pulls images over the internal network by default.

    This upgrade does not affect your workloads.

    April 2021

    Version

    Image address

    Release date

    Description

    Impact

    1.3.3

    • dns caching agent: registry.cn-hangzhou.aliyuncs.com/acs/k8s-dns-node-cache:v1.15.13-6-7e6778ac

    • admission controller: registry.cn-hangzhou.aliyuncs.com/acs/node-local-dns-admission-controller:v1.0.2-8b46b2f-aliyun

    2021-04-21

    Initial release.

    This upgrade does not affect your workloads.