Ralph Dolmans
8fc2320b5c
- Add mem.http.query_buffer and mem.http.response_buffer stats
...
- Add configurable limits for http-query-buffer-size and
http-response-buffer-size
- Make http endpoint, max_streams, and TCP_NODELAY for HTTP sockets
configurable.
2020-05-12 18:12:19 +02:00
Ralph Dolmans
e7601870cc
Merge branch 'master' into doh
2020-05-07 17:12:26 +02:00
Ralph Dolmans
8dae5d9f81
- Add DNS-over-HTTPS support
2020-05-07 16:36:26 +02:00
George Thessalonikefs
e430e95d30
- Add SNI support on more TLS connections ( fixes #193 ).
...
- Add SNI support to unbound-anchor.
2020-04-16 14:39:05 +02:00
George Thessalonikefs
557a309f9d
- Changes for PR #206 (formatting and remade lex and yacc output).
2020-04-01 17:14:58 +02:00
Talkabout
c25eb2c4c8
implemented review feedback
...
renamed option from 'redis-set-ttl' to 'redis-expire-records'
2020-03-31 23:10:45 +02:00
Talkabout
b130a8b459
added option 'redis-set-ttl' to define whether ttl should be added to redis records
...
added check for redis command 'setex' when initializing redis connection
updated documentation
minor improvements to previous changes
2020-03-31 12:47:13 +02:00
Yaroslav K
c0118410a2
add ip-dscp configuration option for setting IP DiffServ codepoint (DSCP, previously TOS) on sockets
2020-03-23 19:37:43 +00:00
W.C.A. Wijngaards
614ed2717b
Merge branch 'master' into framestreams
...
Fixed bison and flex conflicts by regenerating the files.
2020-02-28 14:31:24 +01:00
W.C.A. Wijngaards
318d4e91cc
- Fix #165 : Add prefer-ip4: yesno config option to prefer ipv4 for
...
using ipv4 filters, because the hosts ip6 netblock /64 is not owned
by one operator, and thus reputation is shared.
2020-02-25 09:55:59 +01:00
W.C.A. Wijngaards
78e6060858
dnstap io, example.conf example, config_file entries for tcp and tls.
2020-02-14 09:03:09 +01:00
gthess
f7fe95ad7b
Serve stale ( #159 )
...
- Added serve-stale functionality as described in
draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107 .
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
2020-02-05 14:20:27 +01:00
Ralph Dolmans
2b5cd8e9b4
Merge remote-tracking branch 'ralph/feature/rpz' into rpz
2019-09-09 17:11:26 +02:00
Ralph Dolmans
a8d6147ae4
- Added RPZ response IP support
2019-07-16 18:43:16 +02:00
W.C.A. Wijngaards
63b2628a18
Merge branch 'dev/all-merged/master' of git://github.com/episource/unbound into episource-dev/all-merged/master
2019-06-18 17:07:57 +02:00
Ralph Dolmans
268580f348
Added RPZ log name and stats
2019-06-03 15:46:39 +02:00
Ralph Dolmans
b0b69321f9
- Added RPZ action overrides
...
- Added RPZ policy apply logging
2019-05-16 22:30:42 +02:00
Kevin Chu
56af87e2f3
edit config parser to support ipset
2019-05-03 17:45:34 +08:00
Kevin Chu
1a48bdebb5
Add support for ipset
2019-05-02 19:43:30 +08:00
Ralph Dolmans
c66e47c372
Initial RPZ commit - now with all files
2019-04-05 17:39:10 +02:00
Philipp Serr
b248654aab
Support multiple python module instances
...
This commit adds proper support for multiple instances of the python
module: When more than one instance is added to the module list, the
first instance loads the first script specified in the `python:`
configuration section. The second instance loads the second script,
and so on.
When there are more module instances in the module list than there are
scripts in the `python:` section, an error is raised during
initialization and unbound won't start. When more scripts than module
instances are provided, the surplus scripts are ignored.
2019-03-02 14:32:48 +01:00
Wouter Wijngaards
68a57554a6
For TLS session keys, keep config options in order read from file to keep the first one as the first one.
...
git-svn-id: file:///svn/unbound/trunk@5064 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 10:41:03 +00:00
Wouter Wijngaards
011a7d8830
- Fixes for patch (includes, declarations, warnings).
...
git-svn-id: file:///svn/unbound/trunk@5060 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:43:47 +00:00
Wouter Wijngaards
510606dd1c
- Patch for TLS session resumption from Manabu Sonoda,
...
enable with tls-session-ticket-keys in unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5059 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:35:52 +00:00
Wouter Wijngaards
4c8f334c15
another spelling fix.
...
git-svn-id: file:///svn/unbound/trunk@5057 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:48:52 +00:00
Wouter Wijngaards
5d82b7c421
- Fixes for the patch, and man page entry.
...
git-svn-id: file:///svn/unbound/trunk@5055 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:45:16 +00:00
Wouter Wijngaards
8ae9f26bce
- Patch from Manabu Sonoda with tls-ciphers and tls-ciphersuites
...
options for unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5054 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:37:00 +00:00
Wouter Wijngaards
d81e2c654f
- Add stream-wait-size: 4m config option to limit the maximum
...
memory used by waiting tcp and tls stream replies. This avoids
a denial of service where these replies use up all of the memory.
git-svn-id: file:///svn/unbound/trunk@5046 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 16:20:14 +00:00
Wouter Wijngaards
2ad55ba791
- log-tag-queryreply: yes in unbound.conf tags the log-queries and
...
log-replies in the log file for easier log filter maintenance.
git-svn-id: file:///svn/unbound/trunk@5000 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-30 09:45:37 +00:00
Wouter Wijngaards
fd5e4e6019
- Fix #4126 : RTT_band too low on VSAT links with 600+ms latency,
...
adds the option unknown-server-time-limit to unbound.conf that
can be increased to avoid the problem.
git-svn-id: file:///svn/unbound/trunk@4954 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 09:21:41 +00:00
Ralph Dolmans
6021341118
- Add min-client-subnet-ipv6 and min-client-subnet-ipv4 options.
...
git-svn-id: file:///svn/unbound/trunk@4951 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 08:53:50 +00:00
Wouter Wijngaards
23505d30a5
- Fix #4190 : Please create a "ANY" deny option, adds the option
...
deny-any: yes in unbound.conf. This responds with an empty message
to queries of type ANY.
git-svn-id: file:///svn/unbound/trunk@4949 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 08:07:37 +00:00
Wouter Wijngaards
5fec1c8b1f
- Fix #4154 : make ECS_MAX_TREESIZE configurable, with
...
the max-ecs-tree-size-ipv4 and max-ecs-tree-size-ipv6 options.
git-svn-id: file:///svn/unbound/trunk@4945 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-22 14:54:28 +00:00
Ralph Dolmans
9268f0db50
Please lint by using proper types
...
git-svn-id: file:///svn/unbound/trunk@4939 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 16:33:04 +00:00
Ralph Dolmans
02bd3e2ff1
- Add fast-server-permil and fast-server-num options.
...
- Deprecate low-rtt and low-rtt-permil options.
git-svn-id: file:///svn/unbound/trunk@4938 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-08 16:03:46 +00:00
Wouter Wijngaards
75b8b8c875
- Free memory leak in config strlist append.
...
- make sure nsec3 comparison salt is initialized.
git-svn-id: file:///svn/unbound/trunk@4900 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 10:23:30 +00:00
Wouter Wijngaards
9a82526b91
- exit log routine is annotated as noreturn function.
...
- free memory leaks in config strlist and str2list insert functions.
- do not move unused argv variable after getopt.
- Remove unused if clause in testcode.
git-svn-id: file:///svn/unbound/trunk@4896 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-09-13 08:58:21 +00:00
Ralph Dolmans
2e5e31e8ac
- Added serve-expired-ttl and serve-expired-ttl-reset options.
...
git-svn-id: file:///svn/unbound/trunk@4876 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-28 14:21:56 +00:00
Wouter Wijngaards
01d8dc2240
- log-local-actions: yes option for unbound.conf that logs all the
...
local zone actions, a patch from Saksham Manchanda (Secure64).
git-svn-id: file:///svn/unbound/trunk@4864 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-21 07:10:09 +00:00
Wouter Wijngaards
4fe427ded2
- log-servfail: yes prints log lines that say why queries are
...
returning SERVFAIL to clients.
git-svn-id: file:///svn/unbound/trunk@4863 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 15:22:05 +00:00
Wouter Wijngaards
b0daf867c2
and the error looks good.
...
git-svn-id: file:///svn/unbound/trunk@4860 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-17 14:17:48 +00:00
Wouter Wijngaards
256ab3d935
- Patch for stub-no-cache and forward-no-cache options that disable
...
caching for the contents of that stub or forward, for when you
want immediate changes visible, from Bjoern A. Zeeb.
git-svn-id: file:///svn/unbound/trunk@4846 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-09 12:44:40 +00:00
Wouter Wijngaards
586b811b87
- Patch to implement tcp-connection-limit from Jim Hague (Sinodun).
...
This limits the number of simultaneous TCP client connections
from a nominated netblock.
And a simple test for TCP connection limit.
git-svn-id: file:///svn/unbound/trunk@4835 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-07 11:57:42 +00:00
Wouter Wijngaards
cc538f4f9f
- Please doxygen so it passes.
...
git-svn-id: file:///svn/unbound/trunk@4813 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 08:10:20 +00:00
Wouter Wijngaards
3dbdde7fed
- Add edns-tcp-keepalive and edns-tcp-keepalive timeout options
...
and implement option in client responses.
git-svn-id: file:///svn/unbound/trunk@4804 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:18:34 +00:00
Wouter Wijngaards
007123ee2c
- Sort out test runs when the build directory isn't the project
...
root directory.
- Add config tcp-idle-timeout (default 30s). This applies to
client connections only; the timeout on TCP connections upstream
is unaffected.
git-svn-id: file:///svn/unbound/trunk@4802 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-07-31 07:15:12 +00:00
Wouter Wijngaards
2beae211ee
- dns64-ignore-aaaa: config option to list domain names for which the
...
existing AAAA is ignored and dns64 processing is used on the A
record.
git-svn-id: file:///svn/unbound/trunk@4762 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-29 12:58:52 +00:00
Wouter Wijngaards
c15eae814f
- Fix that control-use-cert: no works for 127.0.0.1 to disable certs.
...
git-svn-id: file:///svn/unbound/trunk@4738 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-18 09:04:35 +00:00
Wouter Wijngaards
9cb404ba5f
- Fix that first control-interface determines if TLS is used. Warn
...
when IP address interfaces are used without TLS.
git-svn-id: file:///svn/unbound/trunk@4730 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-14 08:14:43 +00:00
Wouter Wijngaards
0b0ece9db0
better documentation in header file
...
git-svn-id: file:///svn/unbound/trunk@4722 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-06-12 10:15:08 +00:00