A C library for asynchronous DNS requests (grpc依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
Brad House 1dcc170a81 Issue #819: preliminary test case 5 months ago
.github CI: ability to run tests through debugger and print backtrace if there is a crash 5 months ago
.reuse reuse compliance 6 months ago
LICENSES Apple: reimplement DNS configuration reading (#750) 7 months ago
ci CI: ability to run tests through debugger and print backtrace if there is a crash 5 months ago
cmake remove unneeded warning disablement 6 months ago
docs Fix typo reported by Lintian (#816) 5 months ago
include release-1.32.2 (#812) 5 months ago
m4 Autotools: rework to simplify and fix recent issues (#674) 11 months ago
src Event Select: need to monitor for socket exceptions too 5 months ago
test Issue #819: preliminary test case 5 months ago
.cirrus.yml CI: ability to run tests through debugger and print backtrace if there is a crash 5 months ago
.clang-format clang-format: fix structure alignment 1 year ago
.gitattributes recursive git attributes 1 year ago
.gitignore Watcom Portability Improvements (#509) 2 years ago
AUTHORS Avoid buffer overflow in RC4 loop comparison (#336) 4 years ago
CMakeLists.txt use _XOPEN_SOURCE=600 for Solaris 5 months ago
CONTRIBUTING.md update base README 6 months ago
DEVELOPER-NOTES.md update base README 6 months ago
GIT-INFO Avoid buffer overflow in RC4 loop comparison (#336) 4 years ago
INSTALL.md update some build instructions 6 months ago
LICENSE.md don't put a heading on the license 5 months ago
Makefile.Watcom Fix Watt-32 compilation support (#781) 6 months ago
Makefile.am modernize basic files and docs in repo 6 months ago
Makefile.dj updates 6 months ago
Makefile.m32 don't try to install removed header ares_rules.h 6 months ago
Makefile.msvc don't try to install removed header ares_rules.h 6 months ago
Makefile.netware remove unused SEND_QUAL_ARG2 6 months ago
README.md whitespace 5 months ago
README.msvc remove acountry from built tools as nerd.dk is gone (#554) 1 year ago
RELEASE-NOTES.md release-1.32.2 (#812) 5 months ago
RELEASE-PROCEDURE.md update release procedure 5 months ago
SECURITY.md Use gender-neutral language in SECURITY.md (#746) 8 months ago
appveyor.yml Rework WinAFD event code (#811) 5 months ago
buildconf provide SPDX identifiers and a REUSE CI job to verify 2 years ago
buildconf.bat provide SPDX identifiers and a REUSE CI job to verify 2 years ago
c-ares-config.cmake.in provide SPDX identifiers and a REUSE CI job to verify 2 years ago
configure.ac release-1.32.2 (#812) 5 months ago
libcares.pc.cmake Autotools: rework to simplify and fix recent issues (#674) 11 months ago
libcares.pc.in attempt to fix pkgconfig on windows for static builds 10 months ago
msvc_ver.inc provide SPDX identifiers and a REUSE CI job to verify 2 years ago
sonar-project.properties SonarCloud: Fix additional code smells 1 year ago

README.md

c-ares logo

Build Status Windows Build Status Coverage Status CII Best Practices Fuzzing Status Bugs Coverity Scan Status

Overview

c-ares is a modern DNS (stub) resolver library, written in C. It provides interfaces for asynchronous queries while trying to abstract the intricacies of the underlying DNS protocol. It was originally intended for applications which need to perform DNS queries without blocking, or need to perform multiple DNS queries in parallel.

One of the goals of c-ares is to be a better DNS resolver than is provided by your system, regardless of which system you use. We recommend using the c-ares library in all network applications even if the initial goal of asynchronous resolution is not necessary to your application.

c-ares will build with any C89 compiler and is MIT licensed, which makes it suitable for both free and commercial software. c-ares runs on Linux, FreeBSD, OpenBSD, MacOS, Solaris, AIX, Windows, Android, iOS and many more operating systems.

c-ares has a strong focus on security, implementing safe parsers and data builders used throughout the code, thus avoiding many of the common pitfalls of other C libraries. Through automated testing with our extensive testing framework, c-ares is constantly validated with a range of static and dynamic analyzers, as well as being constantly fuzzed by OSS Fuzz.

While c-ares has been around for over 20 years, it has been actively maintained both in regards to the latest DNS RFCs as well as updated to follow the latest best practices in regards to C coding standards.

Code

The full source code and revision history is available in our GitHub repository. Our signed releases are available in the release archives.

See the INSTALL.md file for build information.

Communication

Issues and Feature Requests should be reported to our GitHub Issues page.

Discussions around c-ares and its use, are held on GitHub Discussions or the Mailing List. Mailing List archive here. Please, do not mail volunteers privately about c-ares.

Security vulnerabilities are treated according to our Security Procedure, please email c-ares-security at haxx.se if you suspect one.

Release keys

Primary GPG keys for c-ares Releasers (some Releasers sign with subkeys):

To import the full set of trusted release keys (including subkeys possibly used to sign releases):

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 # Daniel Stenberg
gpg --keyserver hkps://keys.openpgp.org --recv-keys DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA     # Brad House

Verifying signatures

For each release c-ares-X.Y.Z.tar.gz there is a corresponding c-ares-X.Y.Z.tar.gz.asc file which contains the detached signature for the release.

After fetching all of the possible valid signing keys and loading into your keychain as per the prior section, you can simply run the command below on the downloaded package and detached signature:

% gpg -v --verify c-ares-1.29.0.tar.gz.asc c-ares-1.29.0.tar.gz
gpg: enabled compatibility flags:
gpg: Signature made Fri May 24 02:50:38 2024 EDT
gpg:                using RSA key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
gpg: using pgp trust model
gpg: Good signature from "Daniel Stenberg <daniel@haxx.se>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 27ED EAF2 2F3A BCEB 50DB  9A12 5CC9 08FD B71E 12C2
gpg: binary signature, digest algorithm SHA512, key algorithm rsa2048

Features

Supported RFCs and Proposals

  • RFC1035. Initial/Base DNS RFC
  • RFC2671, RFC6891. EDNS0 option (meta-RR)
  • RFC3596. IPv6 Address. AAAA Record.
  • RFC2782. Server Selection. SRV Record.
  • RFC3403. Naming Authority Pointer. NAPTR Record.
  • RFC6698. DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol. TLSA Record.
  • RFC9460. General Purpose Service Binding, Service Binding type for use with HTTPS. SVCB and HTTPS Records.
  • RFC7553. Uniform Resource Identifier. URI Record.
  • RFC6844. Certification Authority Authorization. CAA Record.
  • RFC2535, RFC2931. SIG0 Record. Only basic parser, not full implementation.
  • RFC7873, RFC9018. DNS Cookie off-path dns poisoning and amplification mitigation. In progress.
  • draft-vixie-dnsext-dns0x20-00. DNS 0x20 query name case randomization to prevent cache poisioning attacks.
  • RFC7686. Reject queries for .onion domain names with NXDOMAIN.
  • RFC2606, RFC6761. Special case treatment for localhost/.localhost.
  • RFC2308, RFC9520. Negative Caching of DNS Resolution Failures.
  • RFC6724. IPv6 address sorting as used by ares_getaddrinfo().