]>
git.ipfire.org Git - thirdparty/pdns.git/log
Peter van Dijk [Tue, 3 Dec 2019 11:28:59 +0000 (12:28 +0100)]
fix typo
Peter van Dijk [Tue, 3 Dec 2019 09:37:31 +0000 (10:37 +0100)]
Merge pull request #8430 from Habbie/builder-no-all
builder: demand user chooses a module except when building docs
Peter van Dijk [Thu, 17 Oct 2019 21:19:15 +0000 (23:19 +0200)]
builder: demand user chooses a module except when building docs
Peter van Dijk [Tue, 3 Dec 2019 09:27:25 +0000 (10:27 +0100)]
Merge pull request #8334 from Habbie/dnsscope-nits
dnsscope: two nits
Peter van Dijk [Tue, 3 Dec 2019 08:31:44 +0000 (09:31 +0100)]
Merge pull request #8486 from pieterlexis/auth-rm-local-ipv6
Auth: Remove local-ipv6 setting
Peter van Dijk [Mon, 2 Dec 2019 16:04:55 +0000 (17:04 +0100)]
Merge pull request #8591 from rgacogne/ddist-wait-longer-for-tls-tickets
dnsdist: Wait longer for the TLS ticket to arrive in our tests
aerique [Mon, 2 Dec 2019 14:12:34 +0000 (15:12 +0100)]
Merge pull request #8574 from Habbie/auth-4.2.1-docs
Secpoll and changelog for auth-4.2.1.
Peter van Dijk [Mon, 2 Dec 2019 09:55:28 +0000 (10:55 +0100)]
Merge pull request #8504 from rubenk/docs-fix-redhat
docs: s/RedHat/Red Hat/
Peter van Dijk [Mon, 25 Nov 2019 11:13:22 +0000 (12:13 +0100)]
secpoll and changelog for auth 4.2.1
Peter van Dijk [Mon, 25 Nov 2019 11:06:08 +0000 (12:06 +0100)]
expand do-not-credit username list
Peter van Dijk [Sun, 1 Dec 2019 21:39:12 +0000 (22:39 +0100)]
Merge pull request #8598 from renchap/patch-1
Add increase-serial to pdnsutil doc
Renaud Chaput [Sun, 1 Dec 2019 21:36:31 +0000 (22:36 +0100)]
Add increase-serial to pdnsutil doc
Description is from `pdnsutil --help`
Otto Moerbeek [Fri, 29 Nov 2019 09:34:53 +0000 (10:34 +0100)]
Merge pull request #8583 from omoerbeek/format-code-silent-if-not-tty
format-code script: Do not show verbose messages if !tty or CIRCLECI
Otto Moerbeek [Fri, 29 Nov 2019 08:16:40 +0000 (09:16 +0100)]
Use [ -t 1 ] as suggested
Remi Gacogne [Thu, 28 Nov 2019 10:39:51 +0000 (11:39 +0100)]
dnsdist: Wait longer for the TLS ticket to arrive in our tests
In TLS 1.3 the server sends the TLS ticket after the handshake has
been completed, but not necessarily right after that.
Ideally we would like to wait for up to several seconds, but stop
waiting as soon as we receive a ticket. Unfortunately we can't ask
that from `openssl s_client`, and we are currently not always waiting
long enough to get a ticket, leading to spurious failures.
Let's try waiting a bit longer to see if that helps.
Peter van Dijk [Thu, 28 Nov 2019 09:46:16 +0000 (10:46 +0100)]
Merge pull request #8575 from Habbie/lua-view-empty
LUA view: do not crash on empty IP list, fixes #8572
Peter van Dijk [Thu, 28 Nov 2019 09:30:51 +0000 (10:30 +0100)]
Merge pull request #8441 from cmouse/ipv6
global: Normalize isIpv4/6 to isIPv4/6
Otto Moerbeek [Wed, 27 Nov 2019 15:12:14 +0000 (16:12 +0100)]
Merge pull request #8580 from omoerbeek/thread_rwlock_destroy
pthread_rwlock_init() should be matched by pthread_rwlock_destroy()
Otto Moerbeek [Wed, 27 Nov 2019 15:10:36 +0000 (16:10 +0100)]
Merge pull request #8579 from omoerbeek/cachecleaner-no-nth
Avoid having to use numbered indexes by given all indexes a tag
Otto Moerbeek [Mon, 25 Nov 2019 11:49:41 +0000 (12:49 +0100)]
Avoid having to use numbered indexes by given all indexes a tag
and specifying them in the call if needed.
Otto Moerbeek [Wed, 27 Nov 2019 13:42:39 +0000 (14:42 +0100)]
Do not show verbose messages if !tty
Otto Moerbeek [Wed, 27 Nov 2019 13:30:11 +0000 (14:30 +0100)]
Merge pull request #8582 from omoerbeek/rec-reformat
rec: Reformat code
Remi Gacogne [Wed, 27 Nov 2019 10:45:26 +0000 (11:45 +0100)]
Merge pull request #8581 from phonedph1/patch-19
dnsdist: Fix typos in dnsnameset.rst' example code
Aki Tuomi [Thu, 7 Nov 2019 11:18:53 +0000 (13:18 +0200)]
docs: backends/pipe - Fix performance page location
Aki Tuomi [Thu, 7 Nov 2019 11:05:21 +0000 (13:05 +0200)]
docs: Update upgrading info
Aki Tuomi [Mon, 21 Oct 2019 07:34:18 +0000 (10:34 +0300)]
docs: Update documentation about isIPv4 and isIPv6
Aki Tuomi [Mon, 21 Oct 2019 07:30:51 +0000 (10:30 +0300)]
global: Normalize isIpv4 to isIPv4
Aki Tuomi [Sun, 20 Oct 2019 10:07:48 +0000 (13:07 +0300)]
global: Normalize isIpv6 to isIPv6
Otto Moerbeek [Wed, 27 Nov 2019 09:49:19 +0000 (10:49 +0100)]
Check if formatting is ok
Otto Moerbeek [Wed, 27 Nov 2019 09:09:00 +0000 (10:09 +0100)]
Reformat
phonedph1 [Tue, 26 Nov 2019 17:15:50 +0000 (10:15 -0700)]
Update dnsnameset.rst
Fix example
Otto Moerbeek [Tue, 26 Nov 2019 14:58:22 +0000 (15:58 +0100)]
Merge pull request #8345 from omoerbeek/format-code-script
Add script to format code,
Otto Moerbeek [Tue, 26 Nov 2019 14:45:48 +0000 (15:45 +0100)]
quotes
Otto Moerbeek [Tue, 26 Nov 2019 14:39:05 +0000 (15:39 +0100)]
More robust script
Otto Moerbeek [Tue, 26 Nov 2019 12:24:59 +0000 (13:24 +0100)]
pthread_rwlock_init() should be matched by pthread_rwlock_destroy()
On some platforms, pthread_rwlock_init() not only inits mem, but also
acquires resources.
Peter van Dijk [Mon, 25 Nov 2019 12:05:22 +0000 (13:05 +0100)]
LUA view: do not crash on empty IP list, fixes #8572
Peter van Dijk [Mon, 25 Nov 2019 16:54:45 +0000 (17:54 +0100)]
Merge pull request #8577 from Habbie/auth-tests-rootzone-domain.net
auth root zone tests: do not ask the internet about domain.net
Peter van Dijk [Mon, 25 Nov 2019 14:44:27 +0000 (15:44 +0100)]
auth root zone tests: do not ask the internet about domain.net
Pieter Lexis [Fri, 22 Nov 2019 10:33:44 +0000 (11:33 +0100)]
Merge pull request #8419 from pieterlexis/rm-trusty
Deb: Remove Ubuntu Trusty build files
Pieter Lexis [Fri, 22 Nov 2019 10:31:00 +0000 (11:31 +0100)]
Merge pull request #8562 from pieterlexis/yahttp-accept-headers-without-spaces
YAHTTP: Accept headers without spaces
Pieter Lexis [Fri, 22 Nov 2019 10:28:53 +0000 (11:28 +0100)]
Merge pull request #8563 from omoerbeek/rec-doc-api-zones
rec: Explain the condition that must be true for the adding of auth zones and forwarding zones.
Remi Gacogne [Fri, 22 Nov 2019 09:29:02 +0000 (10:29 +0100)]
Merge pull request #8380 from rgacogne/ddist-default-openssl
dnsdist: Switch the default DoT provider from GnuTLS to OpenSSL
Remi Gacogne [Fri, 22 Nov 2019 09:28:03 +0000 (10:28 +0100)]
Merge pull request #8523 from rgacogne/dnsdist-tests-skip
dnsdist: Use env toggles to disable some regression tests in Travis
Remi Gacogne [Fri, 22 Nov 2019 09:27:45 +0000 (10:27 +0100)]
Merge pull request #8529 from rgacogne/ddist-statnode-bytes
dnsdist: Add the number of received bytes to StatNode entries
Remi Gacogne [Fri, 22 Nov 2019 09:26:28 +0000 (10:26 +0100)]
Merge pull request #8538 from rgacogne/ddist-reduce-sholder-copies
Use move semantics when updating the content of the StateHolder
Remi Gacogne [Fri, 22 Nov 2019 09:26:12 +0000 (10:26 +0100)]
Merge pull request #8555 from krombel/doc_doh-over-http
[DOC dnsdist] Extend guide for DoH over HTTP
Peter van Dijk [Thu, 21 Nov 2019 09:07:32 +0000 (10:07 +0100)]
Merge pull request #8301 from Habbie/luasynth-db-state
auth: on luaSynth exception, drain db output. Fixes #8299
Remi Gacogne [Wed, 20 Nov 2019 16:36:48 +0000 (17:36 +0100)]
Merge pull request #8557 from rgacogne/ddist-140-changelog-secpoll
dnsdist: ChangeLog and secpoll update for dnsdist 1.4.0
Pieter Lexis [Wed, 20 Nov 2019 14:09:00 +0000 (15:09 +0100)]
YAHTTP: Accept headers without spaces
Otto Moerbeek [Wed, 20 Nov 2019 14:07:56 +0000 (15:07 +0100)]
Explain the condition that must be true for the adding of auth zones and
forwarding zones.
Fixes #5376, though the code could use some proper use checking as well.
Peter van Dijk [Wed, 20 Nov 2019 14:14:10 +0000 (15:14 +0100)]
Merge pull request #8536 from Habbie/fix-lmdb-backend
Fix lmdb backend
Peter van Dijk [Wed, 20 Nov 2019 14:01:58 +0000 (15:01 +0100)]
Otto Moerbeek [Wed, 20 Nov 2019 13:44:35 +0000 (14:44 +0100)]
Merge pull request #8560 from omoerbeek/rec-dup-error-handling
rec: check return value of dup() and avoid fd leak if if fdopen() fails
Otto Moerbeek [Wed, 20 Nov 2019 13:25:28 +0000 (14:25 +0100)]
Merge pull request #8559 from omoerbeek/rec-thread-startup-race
Avoid startup race by setting the state of a tread before starting it.
Peter van Dijk [Wed, 20 Nov 2019 13:20:31 +0000 (14:20 +0100)]
Peter van Dijk [Wed, 20 Nov 2019 13:18:34 +0000 (14:18 +0100)]
Peter van Dijk [Wed, 20 Nov 2019 13:11:01 +0000 (14:11 +0100)]
Peter van Dijk [Wed, 20 Nov 2019 13:08:42 +0000 (14:08 +0100)]
Otto Moerbeek [Wed, 20 Nov 2019 12:58:34 +0000 (13:58 +0100)]
Merge pull request #8561 from omoerbeek/rec-qname-min-not-experimental
QName Minimization is no longer experimental
Otto Moerbeek [Wed, 20 Nov 2019 12:53:01 +0000 (13:53 +0100)]
We have reasons to believe that QName Minimization is no longer experimental.
Otto Moerbeek [Wed, 20 Nov 2019 12:39:09 +0000 (13:39 +0100)]
Check return value of dup() and avoid fd leak if if fdopen() fails.
Otto Moerbeek [Wed, 20 Nov 2019 11:26:14 +0000 (12:26 +0100)]
Avoid startup race by setting the state of a tread before starting it.
Remi Gacogne [Wed, 20 Nov 2019 10:32:58 +0000 (11:32 +0100)]
dnsdist: ChangeLog and secpoll update for dnsdist 1.4.0
Krombel [Tue, 19 Nov 2019 14:56:49 +0000 (15:56 +0100)]
dnsdist: Add DoH behind reverse proxy (and http) to guide
Krombel [Tue, 19 Nov 2019 14:56:39 +0000 (15:56 +0100)]
dnsdist: Fix formatting on DoH guide
Otto Moerbeek [Tue, 19 Nov 2019 10:54:49 +0000 (11:54 +0100)]
Merge pull request #8525 from omoerbeek/rec-prune-failed-servers
Rec: Purge map of failed auths periodically by keeping a last changed timestamp.
Remi Gacogne [Tue, 19 Nov 2019 10:36:45 +0000 (11:36 +0100)]
Merge pull request #8540 from rgacogne/doh-guide
dnsdist: Add a DoH guide to the documentation.
Otto Moerbeek [Tue, 19 Nov 2019 09:03:17 +0000 (10:03 +0100)]
Avoid looking up an entry twice by using a ref.
Remi Gacogne [Tue, 19 Nov 2019 08:40:23 +0000 (09:40 +0100)]
dnsdist: Const-correctness for addAction() parameters
Otto Moerbeek [Mon, 18 Nov 2019 14:35:05 +0000 (15:35 +0100)]
Merge pull request #8532 from phonedph1/qnamecnt
rec: qname-minimization metrics
phonedph1 [Mon, 18 Nov 2019 14:26:15 +0000 (14:26 +0000)]
Point to correct reference
Peter van Dijk [Mon, 18 Nov 2019 12:03:12 +0000 (13:03 +0100)]
Merge pull request #8225 from smellyspice/ttl-fix-take2
timestamp TTL limiting to fix Issue #7439 - Take 2
Peter van Dijk [Mon, 18 Nov 2019 10:45:59 +0000 (11:45 +0100)]
Merge pull request #4628 from zeha/api-list-no-dnssec
API: do not return dnssec info in domain list
Remi Gacogne [Mon, 18 Nov 2019 10:16:48 +0000 (11:16 +0100)]
dnsdist: Fix a typo in the DoH guide
Remi Gacogne [Mon, 18 Nov 2019 09:13:08 +0000 (10:13 +0100)]
rec: Prevent copies when updating the State Holder
Remi Gacogne [Mon, 18 Nov 2019 09:12:46 +0000 (10:12 +0100)]
dnsdist: Prevent copies when updating the State Holder
Remi Gacogne [Mon, 18 Nov 2019 09:11:58 +0000 (10:11 +0100)]
Use move semantics when updating the content of the StateHolder
Peter van Dijk [Fri, 15 Nov 2019 15:50:42 +0000 (16:50 +0100)]
dnsdist: adjust lmdb usage for shared_ptr
Peter van Dijk [Fri, 15 Nov 2019 14:29:51 +0000 (15:29 +0100)]
auth api: after a db lookup, always finish the get cycle
Remi Gacogne [Fri, 15 Nov 2019 13:54:35 +0000 (14:54 +0100)]
Merge pull request #8524 from rgacogne/ddist-lowercase-dynblocksmt
dnsdist: Lowercase the name blocked by a SMT dynamic block
Peter van Dijk [Fri, 15 Nov 2019 13:02:30 +0000 (14:02 +0100)]
lmdbbackend: use nested transaction in list() when possible/needed
Peter van Dijk [Fri, 15 Nov 2019 12:01:24 +0000 (13:01 +0100)]
pdnsutil add/replace record: do not end transaction before we are done with it
Peter van Dijk [Fri, 15 Nov 2019 12:01:01 +0000 (13:01 +0100)]
lmdbbackend: use nested transaction in lookup() when possible/needed
phonedph1 [Thu, 14 Nov 2019 16:21:41 +0000 (16:21 +0000)]
consistent spelling
phonedph1 [Thu, 14 Nov 2019 15:54:01 +0000 (15:54 +0000)]
qname metrics
Pieter Lexis [Thu, 14 Nov 2019 11:37:20 +0000 (12:37 +0100)]
LMDB: Update lmdb-safe and make the backend compile
This updates lmdb-safe to
https://github.com/ahupowerdns/lmdb-safe/pull/6 at
7ce9a821412480c699ce73e85d8bbafa2a9535e5
Remi Gacogne [Thu, 14 Nov 2019 08:16:42 +0000 (09:16 +0100)]
Merge pull request #8531 from phonedph1/patch-18
dnsdist: Update dnsdist-console.cc
Pieter Lexis [Mon, 28 Oct 2019 11:35:05 +0000 (12:35 +0100)]
Auth: Remove local-ipv6 setting
Treat listen address as equally as possible. This removes a bunch of
duplicate code.
phonedph1 [Wed, 13 Nov 2019 21:38:58 +0000 (14:38 -0700)]
Update dnsdist-console.cc
Remi Gacogne [Wed, 13 Nov 2019 15:32:50 +0000 (16:32 +0100)]
dnsdist: Add the number of received bytes to StatNode entries
Otto Moerbeek [Wed, 13 Nov 2019 14:03:42 +0000 (15:03 +0100)]
Merge pull request #8521 from omoerbeek/rec-quit-nicely-8347-retry
rec: Make threads run until asked to stop.
Otto Moerbeek [Wed, 13 Nov 2019 13:55:14 +0000 (14:55 +0100)]
Explicitly initialize RecursorControlChannel::stop
Otto Moerbeek [Wed, 13 Nov 2019 09:11:58 +0000 (10:11 +0100)]
ednsmap might be cleared while yielding; so reassign pointer.
Switch away from a ref to a pointer because of above and use modern
init for EDNSStatus.
Remi Gacogne [Wed, 13 Nov 2019 08:02:40 +0000 (09:02 +0100)]
Merge pull request #8522 from rgacogne/ddist-statnode-noerrors-drops
dnsdist: Add bindings for the noerrors and drops members of StatNode
Remi Gacogne [Wed, 13 Nov 2019 08:00:30 +0000 (09:00 +0100)]
Merge pull request #8526 from rgacogne/ddist-prefer-server-order
dnsdist: Prefer the cipher suite from the server by default (DoH, DoT)
Otto Moerbeek [Tue, 12 Nov 2019 16:00:44 +0000 (17:00 +0100)]
If modeSetAt is zero, we never updated the entry and it can go.
Otto Moerbeek [Tue, 12 Nov 2019 15:42:10 +0000 (16:42 +0100)]
Also purge t_sstorage.ednsstatus and include edns size in the periodic report.
Remi Gacogne [Tue, 12 Nov 2019 13:24:30 +0000 (14:24 +0100)]
dnsdist: Prefer the cipher suite from the server by default (DoH, DoT)
This setting should only be set when all ciphers offered by the server
are considered secure, and our default suite still has a few options
offered for compatibility reasons, which might not be as secure as
other alternatives.
Apparently this also causes issue for some clients, even though it
should not matter.
Otto Moerbeek [Tue, 12 Nov 2019 13:09:57 +0000 (14:09 +0100)]
man page bits
Otto Moerbeek [Tue, 12 Nov 2019 12:31:28 +0000 (13:31 +0100)]
Purge map of failed auths periodically by keeping a last changed timestamp.
SyncRes thread local storage includes a map of failed auths which was
only cleaned if a specific IP was contacted again and that contact
succeeded. Persistent failing auths or auths that are never tried
again remained in the map.
While here add code to dump the failed servers map. Might (partially?)
solve #7771.