pdns/validate-recursor.hh

   1 #pragma once
   2 #include "dnsparser.hh"
   3 #include "namespaces.hh"
   4 #include "validate.hh"
   5
   6 vState validateRecords(const vector<DNSRecord>& recs);
   7
   8 /* Off: 3.x behaviour, we do no DNSSEC, no EDNS
   9    ProcessNoValidate: we gather DNSSEC records on all queries, but we will never validate
  10    Process: we gather DNSSEC records on all queries, if you do ad=1, we'll validate for you (unless you set cd=1)
  11    ValidateForLog: Process + validate all answers, but only log failures
  12    ValidateAll: DNSSEC issue -> servfail
  13 */
  14
  15 enum class DNSSECMode { Off, Process, ProcessNoValidate, ValidateForLog, ValidateAll };
  16 extern DNSSECMode g_dnssecmode;
  17 extern bool g_dnssecLogBogus;