* - Introduce leniency for target discovery when under load.
* - Allow for easier testing (to be reverted).
* - Happy compiler.
* - Precheck access to target_fetch_policy.
* - Do not mark a nameserver as resolved when one of A/AAAA is negative.
* - Update fetch_glue.rpl test for (possible) outstanding queries.
* - Update fetch_glue_cname.rpl test for possible outstanding queries.
* - Better fix for fetch_glue_cname.rpl.
* - Fix iter_emptydp_for_glue.rpl to match the referral.
* - Disabled the nxns tests for now (to be reverted).
* - Update iter_recurse.rpl for possible outstanding queries.
* Revert "- Disabled the nxns tests for now (to be reverted)."
This reverts commit 34a9c13a90.
* Revert "- Allow for easier testing (to be reverted)."
This reverts commit b6dfe35e1d.
resilience of the server. The so-reuseport, harden-below-nxdomain,
and minimal-responses options are enabled by default. They used
to be disabled by default, waiting to make sure they worked. They
are enabled by default now, and can be disabled explicitly by
setting them to "no" in the unbound.conf config file. The reuseport
and minimal options increases speed of the server, and should be
otherwise harmless. The harden-below-nxdomain option works well
together with the recently default enabled qname minimisation, this
causes more fetches to use information from the cache.
git-svn-id: file:///svn/unbound/trunk@4871 be551aaa-1e26-0410-a405-d3ace91eadb9
This makes validated to be insecure data just as worthless as
nonvalidated data, and 2181 rules prevent cache overwrites to them.
- Fix assertion fail on bogus key handling.
- dnssec lameness detection works on first query at trust apex.
- NS queries get proper cache and dnssec lameness treatment.
- fixup compilation without pthreads on linux.
- NS queries are done after every referral.
validator is used on those NS records (if anchors enabled).
git-svn-id: file:///svn/unbound/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
