plans.

git-svn-id: file:///svn/unbound/trunk@627 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 101700d8ca2a3c20ff606e94fa0a2d744521c065..02668134516403bd219f25b4121f8805841fbcb3 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -5,6 +5,8 @@
        - improved DS empty nonterminal handling.
        - compat with ANS nxdomain for empty nonterminals. Attempts the nodata
          proof anyway, which succeeds in ANS failure case.
+       - striplab protection in case it becomes -1.
+       - plans for static and blacklist config.
 
 19 September 2007: Wouter
        - comments about non-packed usage.

diff --git a/doc/TODO b/doc/TODO
index 99d129b76f1677814130bc9e556d54e1d948797a..19e6115781e467dc782a3b84679199ca07658919 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -51,3 +51,4 @@ o grab ports nonconsequtive and change the set after a while (change within
   a given range). Could be bad for OS if wrong port. unsure if it helps secure.
 o workaround for nxdomain responses for ENT DS queries. Not look at rcode and
   look at valid empty nonterminal proof that is inside the packet.
+o make timeout backoffs randomized (a couple percent random) to spread traffic.

diff --git a/doc/plan b/doc/plan
index 77458bfbfb2dec81bd069b8ed902d83736cae9c1..e66c720974971627adc58b792de74c3d7663f7e3 100644 (file)
--- a/doc/plan
+++ b/doc/plan
@@ -167,7 +167,6 @@ Styleguide:
   from-clients, from-internal, has-subrequests, a nice error report,
   so that an excerpt from those times can be made from the logs.
   logfileparsing tool that makes these excerpts and emails them.
-* ANS failure workaround (nxdomain for ENT; check if nxdomain is ENTnodata).
 * clear cache as a callback from the new-rrset-id routine.
 * make overload mode work; phase 0 all ok, phase 1 some threads close ports,
   to let other threads pick up work. phase 2, all threads closed, so all open
@@ -179,18 +178,21 @@ Styleguide:
   if phase 1, start servicing, phase is 0 again. Make robust against delays.
   readme: max about 1 second worth of incoming queries, 10k perhaps,
        or 1/number of seconds it takes start up of 10k.
-* features from Jakob's graph.
-       * acl for allowed recursion (RD=1), then drop or refused query.
-       * static answers for queries, option
-       * blacklist (return fixed nxdomain), option
-       * after checking acl, static, blacklist, do iter forwards, recurse.
 
 *** Local zones feature.
 * Build in local zone features. First the total stop for1912.
 * Then 'local content' for minimal serving of localhost.localdomain,
   and so on. 
-* Remember jakob's diagram.
-       * views support, selective recursive service
+* Remember jakob's diagram. views support, selective recursive service:
+       * acl for allowed recursion (RD=1), then drop or refused query.
+         like 10.0.0.0/8 allow, 0.0.0.0/0 refuse, ... in-order.
+         perhaps also, same list to disallow RD=0 access, like;
+         allow_recursion, drop_recursion, refuse_recursion, drop_all
+       * static answers for queries, fixed RRs from cfg, option
+         query for that RR returns answer with that RR.
+       * blacklist (return fixed nxdomain for domain and below), option
+         can be used to block AS112 traffic, option to unblock a zone.
+       * after checking acl, do iter: static, blacklist, forwards, recurse.
 * Forward-local-zone to NSD.
        - include in package, autoforkexec on localhost to do so.
 * forward local zone to remote server.