Core DNS

This is very complex solution due to under the some another network and DNS return that specific network's IP address. Use Turna's solution for that.

Setup a core DNS server locally to reach all of our gateways without any problem.

In here we transfer all DNS solution of *.kube.com to our cilium gateway which is 10.0.10.0. Others will use our WSL's DNS address which is I get from cat /etc/resolv.conf command.

Create locahost certificate

mkcert -key-file key.pem -cert-file cert.pem localhost
# copy CA public key as well
cp $(mkcert -CAROOT)/rootCA.pem .

cat <<EOF > Corefile
kube.com {
    file /etc/coredns/cluster.kube
    reload
    errors
    log
    cache 30
}

. {
    forward . 10.255.255.254 {
        tls_servername dns.google
    }
    cache 30
}

https://.:5553 {
    tls cert.pem key.pem {
        client_auth nocert
    }
    forward . /etc/resolv.conf
    errors
    log
}
EOF

cat <<EOF > kube.com
@ 3600 IN SOA kube.com. admin.kube.com. (
    1          ; serial
    7200       ; refresh (2 hours)
    3600       ; retry (1 hour)
    1209600    ; expire (2 weeks)
    3600       ; minimum (1 hour)
    )

*     IN A     10.0.10.1
EOF

Now run it

docker run -d --restart=always --name=coredns \
  -v $(pwd)/Corefile:/Corefile -v $(pwd)/kube.com/etc/coredns/kube.com \
  -v $(pwd)/rootCA.pem:/ca.pem -v $(pwd)/cert.pem:/cert.pem -v $(pwd)/key.pem:/key.pem \
  --dns=127.0.0.1 \
  -p 0.0.0.0:5553:5553 \
  coredns/coredns:1.12.0

Test with kdig

sudo apt install knot-dnsutils

kdig -d @localhost -p 5553 +tls-ca=/rootCA.pem +tls-hostname=localhost wikipedia.org