- Set defaults to yes for a number of options to increase speed and

resilience of the server.  The so-reuseport, harden-below-nxdomain,
  and minimal-responses options are enabled by default.  They used
  to be disabled by default, waiting to make sure they worked.  They
  are enabled by default now, and can be disabled explicitly by
  setting them to "no" in the unbound.conf config file.  The reuseport
  and minimal options increases speed of the server, and should be
  otherwise harmless.  The harden-below-nxdomain option works well
  together with the recently default enabled qname minimisation, this
  causes more fetches to use information from the cache.


git-svn-id: file:///svn/unbound/trunk@4871 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards
2018-08-27 13:18:19 +00:00
parent 0171d06aa2
commit e0745813f4
109 changed files with 136 additions and 12 deletions
+1
View File
@@ -4,6 +4,7 @@ server:
log-time-ascii: yes
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -4,6 +4,7 @@ server:
log-time-ascii: yes
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -4,6 +4,7 @@ server:
log-time-ascii: yes
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -4,6 +4,7 @@ server:
log-time-ascii: yes
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -8,6 +8,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -8,6 +8,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -8,6 +8,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -5,6 +5,7 @@ server:
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
fake-sha1: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -6,6 +6,7 @@ server:
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
fake-sha1: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -8,6 +8,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
module-config: "dns64 validator iterator"
dns64-prefix: 64:ff9b::0/96
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -5,6 +5,7 @@ server:
domain-insecure: "example.net"
val-override-date: "20070916134226"
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+2
View File
@@ -1,5 +1,7 @@
; This is a comment.
; config options go here.
server:
minimal-responses: no
forward-zone: name: "." forward-addr: 216.0.0.1
CONFIG_END
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
harden-glue: "no"
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
do-ip6: no
target-fetch-policy: "0 0 0 0 0 "
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
module-config: "iterator"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "3 2 1 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
harden-referral-path: yes
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
do-ip6: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
prefetch: "yes"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
prefetch: "yes"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
prefetch: "yes"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
prefetch: "yes"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
prefetch: "yes"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
prefetch: "yes"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
harden-referral-path: no
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -2,6 +2,7 @@
server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+2
View File
@@ -1,5 +1,7 @@
; This is a comment.
; config options go here.
server:
minimal-responses: no
forward-zone: name: "." forward-addr: 216.0.0.1
CONFIG_END
+2
View File
@@ -1,5 +1,7 @@
; This is a comment.
; config options go here.
server:
minimal-responses: no
forward-zone: name: "." forward-addr: 216.0.0.1
CONFIG_END
+2
View File
@@ -1,5 +1,7 @@
; This is a comment.
; config options go here.
server:
minimal-responses: no
forward-zone: name: "." forward-addr: 216.0.0.1
CONFIG_END
+1
View File
@@ -1,6 +1,7 @@
; config options
server:
target-fetch-policy: "0 0 0 0 0"
minimal-responses: no
stub-zone:
name: "."
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
+1
View File
@@ -3,6 +3,7 @@ server:
access-control: 127.0.0.1 allow_snoop
cache-max-ttl: 10
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -3,6 +3,7 @@ server:
access-control: 127.0.0.1 allow_snoop
cache-min-ttl: 10
qname-minimisation: "no"
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -6,6 +6,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -9,6 +9,7 @@ server:
prefetch: yes
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -6,6 +6,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -6,6 +6,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -6,6 +6,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -8,6 +8,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -9,6 +9,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -9,6 +9,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -6,6 +6,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: "no"
fake-sha1: yes
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -7,6 +7,7 @@ server:
dlv-anchor: "dlv.isc.org. IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -8,6 +8,7 @@ server:
qname-minimisation: "no"
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -9,6 +9,7 @@ server:
harden-algo-downgrade: no
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."
+1
View File
@@ -10,6 +10,7 @@ server:
harden-algo-downgrade: no
fake-sha1: yes
trust-anchor-signaling: no
minimal-responses: no
stub-zone:
name: "."

Some files were not shown because too many files have changed in this diff Show More