W.C.A. Wijngaards
f232562430
Merge branch 'master' into rpz-triggers
2021-08-05 13:37:22 +02:00
George Thessalonikefs
ca4d68c64c
- Introduce 'http-user-agent:' and 'hide-http-user-agent:' options.
2021-07-16 14:32:18 +02:00
George Thessalonikefs
896357a5b3
- Fix #495 : Documentation or implementation of "verbosity" option.
2021-06-21 12:54:23 +02:00
gthess
45be341267
Merge pull request #486 from fobser/val-max-restart
...
Make VAL_MAX_RESTART_COUNT configurable.
2021-06-09 12:09:27 +02:00
George Thessalonikefs
df53badfa2
- Fix #425 : Document auth-zone supports communication with DNS primary
...
on nondefault port.
2021-06-07 16:02:41 +02:00
W.C.A. Wijngaards
cf0aad9fb6
Merge branch 'master' into rpz-triggers
2021-05-28 15:00:55 +02:00
W.C.A. Wijngaards
ea4f1ee8a6
- zonemd-check: yesno option, default no, enables the processing
...
of ZONEMD records for that zone.
2021-05-27 14:20:53 +02:00
W.C.A. Wijngaards
0f2ae816b5
- For #492 : Fix font highlighting for the man page on emacs.
2021-05-25 17:32:08 +02:00
W.C.A. Wijngaards
58eeeeb989
- Fix #492 : module-config respip missing in unbound.conf.5.in man
...
page. Merges #494 from he32.
Remove comment line (?) from man page.
2021-05-25 15:06:57 +02:00
Wouter Wijngaards
2749132bf7
Merge pull request #494 from he32/unbound-rpz-doc
...
Transplant parts of the contributed RPZ documentation.
2021-05-25 15:03:51 +02:00
Havard Eidnes
182a78f1dc
Transplant parts of the contributed RPZ documentation.
...
This comes from the doc/IP-BasedActions.pdf file with minor
adaptations.
2021-05-25 14:51:31 +02:00
W.C.A. Wijngaards
11b3ebc386
- Move the NSEC3 max iterations count in line with the 150 value
...
used by BIND, Knot and PowerDNS. This sets the default value
for it in the configuration to 150 for all key sizes.
2021-05-25 14:35:19 +02:00
W.C.A. Wijngaards
32d82fac9b
Merge branch 'master' into rpz-triggers
2021-05-14 08:47:56 +02:00
Florian Obser
d4314cad33
Make VAL_MAX_RESTART_COUNT configurable.
...
unbound tries very hard (up to 6 authoritative servers) to find a
validating answer. This is not always desirable, for example on high
latency links.
2021-05-08 16:56:32 +02:00
André Cruz
e07f973938
Allow configuration of TCP timeout while waiting for response
...
This allows us to configure how long Unbound will wait for a response
on a TCP connection.
2021-04-28 16:20:46 +01:00
André Cruz
75875d4d1c
Allow configuration of persistent TCP connections
...
Added 2 new options to configure previously hardcoded
values: max-reuse-tcp-queries and tcp-reuse-timeout. These
allow fine-grained control over how unbound uses persistent
TCP connections to authority servers.
2021-04-21 13:50:45 +01:00
W.C.A. Wijngaards
62674aaff8
- rpz triggers, fix to put braces around operator.
2021-03-12 13:13:17 +01:00
W.C.A. Wijngaards
263f974120
rpz triggers, man page fix end label
2021-03-12 10:23:20 +01:00
W.C.A. Wijngaards
da0bbcec48
- rpz triggers, man page explanation of rpz zone contents.
2021-03-12 10:21:48 +01:00
W.C.A. Wijngaards
6f507eb036
Merge branch 'master' into rpz-triggers
2021-03-12 09:04:54 +01:00
W.C.A. Wijngaards
eb82c368e0
- man page contents, list new triggers and actions.
2021-03-12 08:54:00 +01:00
Willem Toorop
6c5e67a5a2
put tls-use-sni: on a line of its own
...
Sorry about this, this must have happened when I added the entries for padding queries and responses.
2021-03-10 15:14:45 +01:00
W.C.A. Wijngaards
b7a633fdc0
Merge branch 'master' into zonemd
2021-02-04 16:08:11 +01:00
George Thessalonikefs
f5b7169729
Merge branch 'orig_ttl' of https://github.com/rijswijk/unbound into rijswijk-orig_ttl
2021-01-25 17:39:24 +01:00
Roland van Rijswijk-Deij
c4c849d878
Rebase on master
2021-01-22 16:44:56 +00:00
Willem Toorop
48ecf95108
Merge branch 'master' into features/padding
2021-01-22 10:29:50 +01:00
Willem Toorop
a152c7f907
Merge branch 'master' into features/nsid
2021-01-19 14:21:18 +01:00
W.C.A. Wijngaards
c125fe67bc
- Fix #404 : DNS query with small edns bufsize fail.
2021-01-18 08:29:52 +01:00
W.C.A. Wijngaards
4d1d8b4cdd
And man page documentation for them.
2021-01-12 13:40:45 +01:00
W.C.A. Wijngaards
3322f631e5
- Fix #397 : [Feature request] add new type always_null to local-zone
...
similar to always_nxdomain.
2021-01-12 13:35:05 +01:00
W.C.A. Wijngaards
2e4d64684e
- Fix #387 : client-subnet-always-forward seems to effectively bypass
...
any caching?
2021-01-06 13:42:00 +01:00
Willem Toorop
cbb4575a18
Document existence of option
2020-12-02 10:58:05 +01:00
George Thessalonikefs
b0247b6e93
Merge branch 'master' into edns-string
2020-11-23 16:58:30 +01:00
George Thessalonikefs
2d184f7505
- Update manpage.
2020-11-23 16:32:00 +01:00
W.C.A. Wijngaards
9cc8aa1ddf
- Option to toggle udp-connect, default is enabled.
2020-11-23 11:06:53 +01:00
Ralph Dolmans
946ed23f73
Merge branch 'master' into edns-string
2020-11-11 11:37:32 +01:00
W.C.A. Wijngaards
72d7587138
Merge branch 'master' into zonemd
2020-11-10 08:10:27 +01:00
W.C.A. Wijngaards
d104727c91
- In man page note that tls-cert-bundle is read before permission
...
drop and chroot.
2020-10-27 09:00:26 +01:00
W.C.A. Wijngaards
94ac072f9b
zonemd, zonemd-reject-absence config for an auth-zone rejects the zone if
...
no ZONEMD is present.
2020-10-26 15:37:43 +01:00
W.C.A. Wijngaards
165b048e07
zonemd, zonemd-permissive-mode: yes logs the failure but does not block
...
the zone after a ZONEMD verification failure.
2020-10-23 14:33:04 +02:00
W.C.A. Wijngaards
37354c8927
Merge branch 'master' into infra-keep-probing
2020-10-21 10:13:10 +02:00
W.C.A. Wijngaards
a3e2bfbb0c
- Fix #330 : [Feature request] Add unencrypted DNS over HTTPS support.
...
This adds the option http-notls-downstream: yesno to change that,
and the dohclient test code has the -n option.
2020-10-19 10:24:03 +02:00
Ralph Dolmans
eb799026ff
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
Ralph Dolmans
b6d04f500b
- DNS Flag Day 2020: change edns-buffer-size default to 1232.
2020-09-29 14:07:38 +02:00
Ralph Dolmans
eb8ec9c18b
- Use inclusive language in configuration
2020-09-23 14:35:51 +02:00
Ralph Dolmans
7da369e85a
- Add edns-client-tag-opcode option
2020-09-23 12:09:48 +02:00
Ralph Dolmans
4ae823fbc2
Merge branch 'master' into doh
2020-09-16 18:38:51 +02:00
W.C.A. Wijngaards
f6a527c25a
- Similar to NSD PR#113, implement that interface names can be used,
...
eg. something like interface: eth0 is resolved at server start and
uses the IP addresses for that named interface.
2020-08-27 14:53:33 +02:00
W.C.A. Wijngaards
a3f95d3358
- Fix #287 : doc typo: "Additionaly".
2020-08-10 08:15:06 +02:00
W.C.A. Wijngaards
2fade6f970
Merge branch 'master' into dlv-removal
2020-08-06 14:20:42 +02:00