I want to restrict or disable IPv6 DNS entries in EKS CoreDNS. I’ve tried modifying the Corefile, but when I run a dig AAAA google.com command inside my pod, I still receive an IPv6 response.

I’ve tried modifying the Corefile, but whenever I attempt to add a filter and restart the CoreDNS deployment, the pod gets stuck in a CrashLoopBackOff state. Below is the Corefile that allows my CoreDNS pod to run, but it still isn’t restricting IPv6 for some reason.

Here’s my Corefile:

.:53 {
  errors
  health {
      lameduck 5s
    }
  ready
  template ANY AAAA {
    rcode NOERROR
  }
  kubernetes cluster.local in-addr.arpa {
    pods insecure
    fallthrough in-addr.arpa
  }
  prometheus :9153
  forward . /etc/resolv.conf
  cache 30
  loop
  reload
  loadbalance
}