TCY16
320aa64d18
add QDCOUNT=0 to CHAOS query in ACL
2021-09-29 12:54:41 +02:00
TCY16
3ba8ea321a
fix CH class response
2021-09-28 16:35:50 +02:00
TCY16
42ba5ae4a2
process @wcawijngaards' comments v2
2021-09-28 13:48:36 +02:00
TCY16
732ad94729
process @wcawijngaards' comments
2021-09-28 13:28:25 +02:00
Tom Carpay
0b376cc42f
add routine to add EDE to ACL:refused at correct location
2021-09-27 14:17:21 +00:00
TCY16
4df2965459
add forgotten compile error fixes from previous commit
2021-09-20 11:42:39 +02:00
TCY16
4d15603a8c
add routine to do EDE on ACL blocked messages
2021-09-20 11:35:00 +02:00
TCY16
9df75a842b
add DNSSEC indeterminate EDE and DNAME expansion test
2021-09-08 16:38:33 +02:00
tcarpay
d9a947f267
Merge branch 'master' into features/rfc8914-ede
2021-08-20 16:28:27 +02:00
Tom Carpay
5fff0f7e30
Fix dont echo edns0 option list ...
...
when refusing to answer authoritatively.
Also remove TODO comments that were already done
2021-08-19 14:28:26 +00:00
Tom Carpay
935634dcae
Revert "add local anwser blocked"
...
This reverts commit b3f60db184 .
2021-08-19 14:21:10 +00:00
tcarpay
b3f60db184
add local anwser blocked
2021-08-19 14:01:14 +02:00
Tom Carpay
eac4eb3a9e
Return EDE_DNSSEC_BOGUS when returning bogus answers
2021-08-16 12:46:24 +00:00
Tom Carpay
0703a38243
Fix: use EDE codes with EDNS_OPT_APPEND_EDE
...
+ complete EDE codes
2021-08-16 09:59:13 +00:00
tcarpay
4049885da2
add locations for EDE errors
2021-08-13 12:01:28 +02:00
Tomasz Ziolkowski
ae45f46b9e
Add (stub|forward)-tcp-upstream options which enable using tcp transport only for specified stub/forward zones
2021-08-05 08:44:18 +02:00
W.C.A. Wijngaards
f693cbc90b
Revert "- With hide-version unbound also omits the version from http headers."
...
This reverts commit 9d4644b125 .
2021-07-16 14:02:55 +02:00
W.C.A. Wijngaards
9d4644b125
- With hide-version unbound also omits the version from http headers.
2021-07-16 13:45:41 +02:00
Willem Toorop
a8d78b2083
Simple EDE example
2021-06-24 12:55:46 +02:00
George Thessalonikefs
e9a5f5ab3f
- Add more logging for out-of-memory cases.
2021-05-04 15:39:06 +02:00
André Cruz
e07f973938
Allow configuration of TCP timeout while waiting for response
...
This allows us to configure how long Unbound will wait for a response
on a TCP connection.
2021-04-28 16:20:46 +01:00
André Cruz
75875d4d1c
Allow configuration of persistent TCP connections
...
Added 2 new options to configure previously hardcoded
values: max-reuse-tcp-queries and tcp-reuse-timeout. These
allow fine-grained control over how unbound uses persistent
TCP connections to authority servers.
2021-04-21 13:50:45 +01:00
George Thessalonikefs
13e445d50b
- Remove unused functions worker_handle_reply and
...
libworker_handle_reply.
2021-04-13 14:54:26 +02:00
Wouter Wijngaards and GitHub
209dc32624
Merge pull request #367 from NLnetLabs/dnstap-log-local-addr
...
DNSTAP log local address
2021-02-25 11:58:36 +01:00
W.C.A. Wijngaards
f5339ec7e5
Merge branch 'master' into dnstap-log-local-addr
2021-02-18 13:12:09 +01:00
W.C.A. Wijngaards
2d27203718
Merge branch 'master' into zonemd
2021-02-18 11:11:50 +01:00
W.C.A. Wijngaards
74e06cc4b3
- Fix #422 : IPv6 fallback issues when IPv6 is not properly
...
enabled/configured.
2021-02-15 14:40:48 +01:00
W.C.A. Wijngaards
b7a633fdc0
Merge branch 'master' into zonemd
2021-02-04 16:08:11 +01:00
Willem Toorop
48ecf95108
Merge branch 'master' into features/padding
2021-01-22 10:29:50 +01:00
W.C.A. Wijngaards
ee2545d939
- For #391 : fix indentation.
2021-01-08 09:53:52 +01:00
W.C.A. Wijngaards
3e03e2c26d
- For #391 : use struct timeval* start_time for callback information.
2021-01-08 09:47:46 +01:00
Frank Riley
e3abd772f7
Add start_time to reply callbacks so modules can compute the response time.
2021-01-01 15:44:21 -07:00
W.C.A. Wijngaards
6bf1293bcd
No need for mk_local_addr, can pass the sockaddr structure.
2020-12-09 11:56:35 +01:00
W.C.A. Wijngaards
bdfa65c6ab
Import the patches from the files in the tarball in
...
issue #365 https://github.com/NLnetLabs/unbound/files/5659923/patches.tar.gz
from iruzanov. The merge conflicts are fixed, but no changes are made
to the patched code.
2020-12-09 11:00:51 +01:00
W.C.A. Wijngaards
b2894e23a9
- Fix compile warnings in rpz initialization.
2020-11-27 10:11:14 +01:00
W.C.A. Wijngaards
9cc8aa1ddf
- Option to toggle udp-connect, default is enabled.
2020-11-23 11:06:53 +01:00
W.C.A. Wijngaards
e09873e0c8
zonemd, zonemds are checked at start
2020-10-22 12:10:46 +02:00
W.C.A. Wijngaards
a3e2bfbb0c
- Fix #330 : [Feature request] Add unencrypted DNS over HTTPS support.
...
This adds the option http-notls-downstream: yesno to change that,
and the dohclient test code has the -n option.
2020-10-19 10:24:03 +02:00
W.C.A. Wijngaards
48a56751e9
- Fix #305 : dnstap logging significantly affects unbound performance
...
(regression in 1.11).
2020-09-23 11:13:52 +02:00
Ralph Dolmans
4ae823fbc2
Merge branch 'master' into doh
2020-09-16 18:38:51 +02:00
Ralph Dolmans
e6ebabc0cc
- Fix stats double count issue ( #289 ).
2020-08-20 17:54:28 +02:00
Ralph Dolmans
8fc2320b5c
- Add mem.http.query_buffer and mem.http.response_buffer stats
...
- Add configurable limits for http-query-buffer-size and
http-response-buffer-size
- Make http endpoint, max_streams, and TCP_NODELAY for HTTP sockets
configurable.
2020-05-12 18:12:19 +02:00
Ralph Dolmans
e7601870cc
Merge branch 'master' into doh
2020-05-07 17:12:26 +02:00
Ralph Dolmans
8dae5d9f81
- Add DNS-over-HTTPS support
2020-05-07 16:36:26 +02:00
George Thessalonikefs
e430e95d30
- Add SNI support on more TLS connections ( fixes #193 ).
...
- Add SNI support to unbound-anchor.
2020-04-16 14:39:05 +02:00
Willem Toorop
4f78b37c61
Down- and upstream padding a la RFC7830 & RFC8467
2020-04-02 18:34:03 +02:00
Yaroslav K and Yaroslav Kolomiiets
cfddbcb5be
add setting IP DiffServ Codepoint (DSCP, previously TOS) on sockets
2020-03-23 19:37:43 +00:00
W.C.A. Wijngaards
b63032b4dd
dnstap io, fixup fptr_wlist for unbound_dnstap_socket tool.
2020-02-28 08:55:10 +01:00
W.C.A. Wijngaards
58fdcf06e8
Merge branch 'master' into framestreams
2020-02-05 14:25:47 +01:00
gthess and GitHub
f7fe95ad7b
Serve stale ( #159 )
...
- Added serve-stale functionality as described in
draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107 .
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
2020-02-05 14:20:27 +01:00