1 /* SPDX-License-Identifier: LGPL-2.1+ */
5 Copyright 2014 Lennart Poettering
8 #include "in-addr-util.h"
11 #include <gnutls/gnutls.h>
14 typedef struct DnsServer DnsServer
;
16 typedef enum DnsServerType
{
21 #define _DNS_SERVER_TYPE_MAX (DNS_SERVER_LINK + 1)
23 const char* dns_server_type_to_string(DnsServerType i
) _const_
;
24 DnsServerType
dns_server_type_from_string(const char *s
) _pure_
;
26 typedef enum DnsServerFeatureLevel
{
27 DNS_SERVER_FEATURE_LEVEL_TCP
,
28 DNS_SERVER_FEATURE_LEVEL_UDP
,
29 DNS_SERVER_FEATURE_LEVEL_EDNS0
,
30 DNS_SERVER_FEATURE_LEVEL_TLS_PLAIN
,
31 DNS_SERVER_FEATURE_LEVEL_DO
,
32 DNS_SERVER_FEATURE_LEVEL_LARGE
,
33 DNS_SERVER_FEATURE_LEVEL_TLS_DO
,
34 _DNS_SERVER_FEATURE_LEVEL_MAX
,
35 _DNS_SERVER_FEATURE_LEVEL_INVALID
= -1
36 } DnsServerFeatureLevel
;
38 #define DNS_SERVER_FEATURE_LEVEL_WORST 0
39 #define DNS_SERVER_FEATURE_LEVEL_BEST (_DNS_SERVER_FEATURE_LEVEL_MAX - 1)
40 #define DNS_SERVER_FEATURE_LEVEL_IS_TLS(x) IN_SET(x, DNS_SERVER_FEATURE_LEVEL_TLS_PLAIN, DNS_SERVER_FEATURE_LEVEL_TLS_DO)
42 const char* dns_server_feature_level_to_string(int i
) _const_
;
43 int dns_server_feature_level_from_string(const char *s
) _pure_
;
45 #include "resolved-link.h"
46 #include "resolved-manager.h"
57 union in_addr_union address
;
58 int ifindex
; /* for IPv6 link-local DNS servers */
64 gnutls_certificate_credentials_t tls_cert_cred
;
65 gnutls_datum_t tls_session_data
;
68 DnsServerFeatureLevel verified_feature_level
;
69 DnsServerFeatureLevel possible_feature_level
;
71 size_t received_udp_packet_max
;
73 unsigned n_failed_udp
;
74 unsigned n_failed_tcp
;
75 unsigned n_failed_tls
;
77 bool packet_truncated
:1;
78 bool packet_bad_opt
:1;
79 bool packet_rrsig_missing
:1;
82 usec_t features_grace_period_usec
;
84 /* Whether we already warned about downgrading to non-DNSSEC mode for this server */
85 bool warned_downgrade
:1;
87 /* Used when GC'ing old DNS servers when configuration changes. */
90 /* If linked is set, then this server appears in the servers linked list */
92 LIST_FIELDS(DnsServer
, servers
);
101 const union in_addr_union
*address
,
104 DnsServer
* dns_server_ref(DnsServer
*s
);
105 DnsServer
* dns_server_unref(DnsServer
*s
);
107 void dns_server_unlink(DnsServer
*s
);
108 void dns_server_move_back_and_unmark(DnsServer
*s
);
110 void dns_server_packet_received(DnsServer
*s
, int protocol
, DnsServerFeatureLevel level
, size_t size
);
111 void dns_server_packet_lost(DnsServer
*s
, int protocol
, DnsServerFeatureLevel level
);
112 void dns_server_packet_truncated(DnsServer
*s
, DnsServerFeatureLevel level
);
113 void dns_server_packet_rrsig_missing(DnsServer
*s
, DnsServerFeatureLevel level
);
114 void dns_server_packet_bad_opt(DnsServer
*s
, DnsServerFeatureLevel level
);
115 void dns_server_packet_rcode_downgrade(DnsServer
*s
, DnsServerFeatureLevel level
);
117 DnsServerFeatureLevel
dns_server_possible_feature_level(DnsServer
*s
);
119 int dns_server_adjust_opt(DnsServer
*server
, DnsPacket
*packet
, DnsServerFeatureLevel level
);
121 const char *dns_server_string(DnsServer
*server
);
122 int dns_server_ifindex(const DnsServer
*s
);
124 bool dns_server_dnssec_supported(DnsServer
*server
);
126 void dns_server_warn_downgrade(DnsServer
*server
);
128 bool dns_server_limited_domains(DnsServer
*server
);
130 DnsServer
*dns_server_find(DnsServer
*first
, int family
, const union in_addr_union
*in_addr
, int ifindex
);
132 void dns_server_unlink_all(DnsServer
*first
);
133 void dns_server_unlink_marked(DnsServer
*first
);
134 void dns_server_mark_all(DnsServer
*first
);
136 DnsServer
*manager_get_first_dns_server(Manager
*m
, DnsServerType t
);
138 DnsServer
*manager_set_dns_server(Manager
*m
, DnsServer
*s
);
139 DnsServer
*manager_get_dns_server(Manager
*m
);
140 void manager_next_dns_server(Manager
*m
);
142 bool dns_server_address_valid(int family
, const union in_addr_union
*sa
);
144 DnssecMode
dns_server_get_dnssec_mode(DnsServer
*s
);
145 DnsOverTlsMode
dns_server_get_dns_over_tls_mode(DnsServer
*s
);
147 DEFINE_TRIVIAL_CLEANUP_FUNC(DnsServer
*, dns_server_unref
);
149 extern const struct hash_ops dns_server_hash_ops
;
151 void dns_server_flush_cache(DnsServer
*s
);
153 void dns_server_reset_features(DnsServer
*s
);
154 void dns_server_reset_features_all(DnsServer
*s
);
156 void dns_server_dump(DnsServer
*s
, FILE *f
);