George Thessalonikefs
b0247b6e93
Merge branch 'master' into edns-string
2020-11-23 16:58:30 +01:00
W.C.A. Wijngaards
9cc8aa1ddf
- Option to toggle udp-connect, default is enabled.
2020-11-23 11:06:53 +01:00
Ralph Dolmans
946ed23f73
Merge branch 'master' into edns-string
2020-11-11 11:37:32 +01:00
W.C.A. Wijngaards
37354c8927
Merge branch 'master' into infra-keep-probing
2020-10-21 10:13:10 +02:00
W.C.A. Wijngaards
a3e2bfbb0c
- Fix #330 : [Feature request] Add unencrypted DNS over HTTPS support.
...
This adds the option http-notls-downstream: yesno to change that,
and the dohclient test code has the -n option.
2020-10-19 10:24:03 +02:00
Ralph Dolmans
eb799026ff
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
Ralph Dolmans
7da369e85a
- Add edns-client-tag-opcode option
2020-09-23 12:09:48 +02:00
Ralph Dolmans
4ae823fbc2
Merge branch 'master' into doh
2020-09-16 18:38:51 +02:00
W.C.A. Wijngaards
f6a527c25a
- Similar to NSD PR#113, implement that interface names can be used,
...
eg. something like interface: eth0 is resolved at server start and
uses the IP addresses for that named interface.
2020-08-27 14:53:33 +02:00
W.C.A. Wijngaards
2fade6f970
Merge branch 'master' into dlv-removal
2020-08-06 14:20:42 +02:00
W.C.A. Wijngaards
c0c722cd97
DLV removal
2020-08-04 09:05:09 +02:00
Ralph Dolmans
64806a0d14
Add edns-client-tag configuration option
2020-07-24 14:52:04 +02:00
W.C.A. Wijngaards
3d1383bed3
Merge branch 'master' into infra-keep-probing
2020-07-16 16:00:06 +02:00
Ralph Dolmans
9cebc13150
- Add option to send DNSTAP messages over bidirectional frame streams
2020-07-13 17:28:50 +02:00
Ralph Dolmans
740da89578
Merge branch 'master' into doh
2020-06-24 14:18:47 +02:00
W.C.A. Wijngaards
4fe2122890
Merge branch 'master' into infra-keep-probing
...
Remade yacc and lex files.
2020-06-24 13:21:14 +02:00
W.C.A. Wijngaards
edcef18274
Merge branch 'master' of git://github.com/PMunch/unbound into PMunch-master
...
Fixed conflicts in Makefile.in and configparser.y
2020-05-15 14:52:53 +02:00
Ralph Dolmans
8fc2320b5c
- Add mem.http.query_buffer and mem.http.response_buffer stats
...
- Add configurable limits for http-query-buffer-size and
http-response-buffer-size
- Make http endpoint, max_streams, and TCP_NODELAY for HTTP sockets
configurable.
2020-05-12 18:12:19 +02:00
Ralph Dolmans
e7601870cc
Merge branch 'master' into doh
2020-05-07 17:12:26 +02:00
Ralph Dolmans
8dae5d9f81
- Add DNS-over-HTTPS support
2020-05-07 16:36:26 +02:00
W.C.A. Wijngaards
055f5e68a3
Add infra-keep-probing: yes option. Hosts that are down are probed more
...
frequently.
2020-04-22 16:29:06 +02:00
George Thessalonikefs
e430e95d30
- Add SNI support on more TLS connections ( fixes #193 ).
...
- Add SNI support to unbound-anchor.
2020-04-16 14:39:05 +02:00
George Thessalonikefs
557a309f9d
- Changes for PR #206 (formatting and remade lex and yacc output).
2020-04-01 17:14:58 +02:00
Talkabout
c25eb2c4c8
implemented review feedback
...
renamed option from 'redis-set-ttl' to 'redis-expire-records'
2020-03-31 23:10:45 +02:00
Talkabout
b130a8b459
added option 'redis-set-ttl' to define whether ttl should be added to redis records
...
added check for redis command 'setex' when initializing redis connection
updated documentation
minor improvements to previous changes
2020-03-31 12:47:13 +02:00
Yaroslav K
c0118410a2
add ip-dscp configuration option for setting IP DiffServ codepoint (DSCP, previously TOS) on sockets
2020-03-23 19:37:43 +00:00
W.C.A. Wijngaards
614ed2717b
Merge branch 'master' into framestreams
...
Fixed bison and flex conflicts by regenerating the files.
2020-02-28 14:31:24 +01:00
W.C.A. Wijngaards
318d4e91cc
- Fix #165 : Add prefer-ip4: yesno config option to prefer ipv4 for
...
using ipv4 filters, because the hosts ip6 netblock /64 is not owned
by one operator, and thus reputation is shared.
2020-02-25 09:55:59 +01:00
W.C.A. Wijngaards
78e6060858
dnstap io, example.conf example, config_file entries for tcp and tls.
2020-02-14 09:03:09 +01:00
gthess
f7fe95ad7b
Serve stale ( #159 )
...
- Added serve-stale functionality as described in
draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107 .
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
2020-02-05 14:20:27 +01:00
PMunch
f177dc974c
Add support for multiple dynamic modules
...
Allows the use of multiple dynamic modules. Simply add more "dynlib"
entries to the "modules-config" and the same amount of "dynlib-file"
entries in the dynlib configuration block.
2019-10-21 15:59:53 +02:00
PMunch
1762437121
Add dynamic library support
2019-10-21 09:34:51 +02:00
Ralph Dolmans
2b5cd8e9b4
Merge remote-tracking branch 'ralph/feature/rpz' into rpz
2019-09-09 17:11:26 +02:00
Ralph Dolmans
a8d6147ae4
- Added RPZ response IP support
2019-07-16 18:43:16 +02:00
W.C.A. Wijngaards
63b2628a18
Merge branch 'dev/all-merged/master' of git://github.com/episource/unbound into episource-dev/all-merged/master
2019-06-18 17:07:57 +02:00
Ralph Dolmans
268580f348
Added RPZ log name and stats
2019-06-03 15:46:39 +02:00
Ralph Dolmans
b0b69321f9
- Added RPZ action overrides
...
- Added RPZ policy apply logging
2019-05-16 22:30:42 +02:00
Kevin Chu
56af87e2f3
edit config parser to support ipset
2019-05-03 17:45:34 +08:00
Kevin Chu
1a48bdebb5
Add support for ipset
2019-05-02 19:43:30 +08:00
Ralph Dolmans
c66e47c372
Initial RPZ commit - now with all files
2019-04-05 17:39:10 +02:00
Philipp Serr
b248654aab
Support multiple python module instances
...
This commit adds proper support for multiple instances of the python
module: When more than one instance is added to the module list, the
first instance loads the first script specified in the `python:`
configuration section. The second instance loads the second script,
and so on.
When there are more module instances in the module list than there are
scripts in the `python:` section, an error is raised during
initialization and unbound won't start. When more scripts than module
instances are provided, the surplus scripts are ignored.
2019-03-02 14:32:48 +01:00
Wouter Wijngaards
68a57554a6
For TLS session keys, keep config options in order read from file to keep the first one as the first one.
...
git-svn-id: file:///svn/unbound/trunk@5064 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 10:41:03 +00:00
Wouter Wijngaards
011a7d8830
- Fixes for patch (includes, declarations, warnings).
...
git-svn-id: file:///svn/unbound/trunk@5060 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:43:47 +00:00
Wouter Wijngaards
510606dd1c
- Patch for TLS session resumption from Manabu Sonoda,
...
enable with tls-session-ticket-keys in unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5059 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 09:35:52 +00:00
Wouter Wijngaards
4c8f334c15
another spelling fix.
...
git-svn-id: file:///svn/unbound/trunk@5057 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:48:52 +00:00
Wouter Wijngaards
5d82b7c421
- Fixes for the patch, and man page entry.
...
git-svn-id: file:///svn/unbound/trunk@5055 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:45:16 +00:00
Wouter Wijngaards
8ae9f26bce
- Patch from Manabu Sonoda with tls-ciphers and tls-ciphersuites
...
options for unbound.conf.
git-svn-id: file:///svn/unbound/trunk@5054 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-23 08:37:00 +00:00
Wouter Wijngaards
d81e2c654f
- Add stream-wait-size: 4m config option to limit the maximum
...
memory used by waiting tcp and tls stream replies. This avoids
a denial of service where these replies use up all of the memory.
git-svn-id: file:///svn/unbound/trunk@5046 be551aaa-1e26-0410-a405-d3ace91eadb9
2019-01-21 16:20:14 +00:00
Wouter Wijngaards
2ad55ba791
- log-tag-queryreply: yes in unbound.conf tags the log-queries and
...
log-replies in the log file for easier log filter maintenance.
git-svn-id: file:///svn/unbound/trunk@5000 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-11-30 09:45:37 +00:00
Wouter Wijngaards
fd5e4e6019
- Fix #4126 : RTT_band too low on VSAT links with 600+ms latency,
...
adds the option unknown-server-time-limit to unbound.conf that
can be increased to avoid the problem.
git-svn-id: file:///svn/unbound/trunk@4954 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-10-25 09:21:41 +00:00