]>
git.ipfire.org Git - thirdparty/pdns.git/log
Gert van Dijk [Sun, 31 Mar 2019 18:51:55 +0000 (20:51 +0200)]
docs: fix formatting of 'rng' setting options
Was rendered as a field definition, because both:
* A blank line was omitted before starting the list items.
* Leading whitespace for each item (much like the commit that removes the
superfluous blockquotes).
Gert van Dijk [Sun, 31 Mar 2019 18:37:10 +0000 (20:37 +0200)]
docs: fix some links (invalid ref-role usage)
Gert van Dijk [Sun, 31 Mar 2019 18:30:28 +0000 (20:30 +0200)]
docs: Align position of version annotation in settings
On two out of many other occurrences the versionadded/deprecated directive
was rendered above the parameters, but the vast majority had it below. This
change aligns the two outliers.
Gert van Dijk [Sun, 31 Mar 2019 18:26:27 +0000 (20:26 +0200)]
docs: Remove superfluous comma in 'any-to-tcp' setting
Gert van Dijk [Sun, 31 Mar 2019 18:25:50 +0000 (20:25 +0200)]
docs: Add missing entry in table for the 'Lua' backend
Gert van Dijk [Sun, 31 Mar 2019 17:44:36 +0000 (19:44 +0200)]
docs: specify type of 8bit-dns setting
It had a superfluous description where other settings have the type there.
Gert van Dijk [Sun, 31 Mar 2019 17:37:08 +0000 (19:37 +0200)]
docs: Add warning on empty bind-dnssec-db for slave operation
I fell right into the pitfall of configuring a slave with the BIND
backend, serving presigned records, assuming it will serve the RRSIGs
just fine, but no, my domain went bogus. This was documented, but
not as clearly as I hoped for, this commit improves the documentation
regarding that.
Gert van Dijk [Sun, 31 Mar 2019 17:35:10 +0000 (19:35 +0200)]
docs: Consistent naming/casing of the BIND (backend)
Skipped some occurrences where it refers to PR titles or commit messages.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Cross-reference DNSSEC-ALIAS limitation
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Add a missing 'Default:' (consistency on page)
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Add paragraph on benefits of the BIND backend
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: BIND backend - improve formatting of output status
Before this change it was hard to distinguish the three possible statuses
due to the styling of the inline-monospaced text without contrast in the
background for the current Sphinx theme.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Add '(or zone transfer)' in sentence on BIND backend
If zones would never be reloaded without a regular non-AXFR DNS request,
the BIND backend would not be usable in a hidden master setup for example.
Als remove superfluous period after link to setting.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: fix several typos
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Change occurrences of "note" to admonition
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Hide the toctree on 'Backends' index page
Effectively, all the backends are listed in the nicely formatted table
already.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: fix links in 'Adding new DNS record types'
nested markup for monospaced text on link is not possible, see
https://stackoverflow.com/q/
4743845 /
1254292
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Emphasize no data should return in example
The line with just a '$' confused be until I've read the sentence above it
again.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Use 'sudo' to install packages
This also fixes the rendering of the shell command - was highlighted as
comment.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: formatting fixes for 'Dynamic DNS Update' page
* Fix a broken link to the domain metadata.
* Prettify method listing paragraph.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: HTTP API tsigkeys example shows wrong body
Two errors fixed:
* The JSON body parameter key 'key' was provided twice. I think it should
have been the 'name' key.
* One value wasn't terminated with a double quote.
The HTTP code block parser warned about this in the sphinx-build output.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Other minor fixes
* Make sentence actually part of the 'versionchanged' directive on the
settings page. Fixes sphinx-build warning.
* LDAP backend formatting changes so that ldap:// URIs don't get
linkified.
* Fix sphinx-build warning about under and over underlined sections.
Gert van Dijk [Sun, 31 Mar 2019 17:25:22 +0000 (19:25 +0200)]
docs: Fix link in Lua2 backend
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: Fix formatting of Lua2 backend API
Without a blank line between the paragraphs in the descriptions of
RST description lists [1], the list items will not render as list items,
but as a long single paragraph.
[1]: http://docutils.sourceforge.net/docs/user/rst/quickref.html#definition-lists
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: fix link in Lua backend
Two problems with the existing link:
* target was non-existent (anchor is different in Sphinx)
* nested markup for monospaced text on link is not possible, see
https://stackoverflow.com/q/
4743845 /
1254292
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: reword sentence in DNSSEC intro
"confirmation can be gotten" sounds weird to me.
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: Fix formatting of some code blocks
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: Add 'hidden master' approach in DNSSEC security
This approach is referred to in the public domain as well as once in the
PowerDNS changelog, but not described in any way before this change.
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: fix formatting of 'PKCS#11 support' page
Also:
* slightly reword some things where necessary
* Ubuntu 12.nothing/14.nothing do not exist, added assumed '.04'.
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: remove unintentional blockquotes in HTML
Having leading spaces in either:
* Lists
* RST directives, such as
.. toctree::
will lead to the listing being wrapped in an HTML <blockquote> element with
also the styling as such. This is probably unintentional and at least
inconsistent with other occurrences.
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: align meta-data -> metadata
This occurrence was the only one spelled like 'meta-data', all others are
spelled as 'metadata'.
Gert van Dijk [Sun, 31 Mar 2019 17:25:21 +0000 (19:25 +0200)]
docs: Improve "BIND-mode operation" for DNSSEC
Also:
* Mention that not just keys are part of this database, but also DNSSEC
domain metadata.
* Link to the pdns.conf setting.
Remi Gacogne [Mon, 8 Apr 2019 08:22:52 +0000 (10:22 +0200)]
Merge pull request #7677 from rgacogne/dnsdist-logging-facility
dnsdist: Add 'setSyslogFacility()'
Remi Gacogne [Mon, 8 Apr 2019 07:22:09 +0000 (09:22 +0200)]
Merge pull request #7649 from rgacogne/per-threads-cpu-stats
rec: This provides CPU usage statistics per thread (worker & distributor).
Remi Gacogne [Mon, 8 Apr 2019 07:21:39 +0000 (09:21 +0200)]
Merge pull request #7658 from Habbie/uuid-for-everyone
always link in uuid-utils because webserver logging needs it now
Remi Gacogne [Mon, 8 Apr 2019 07:19:20 +0000 (09:19 +0200)]
Merge pull request #7674 from Habbie/dnsdist-libcrypto-includes
dnsdist: honor libcrypto include path
Remi Gacogne [Mon, 8 Apr 2019 07:17:16 +0000 (09:17 +0200)]
Merge pull request #7679 from rgacogne/dnsdist-missing-overrides
dnsdist: Add missing overrides
Peter van Dijk [Mon, 8 Apr 2019 07:07:42 +0000 (09:07 +0200)]
Merge pull request #7629 from jsoref/dns-docs
dnssec clarifications
Peter van Dijk [Fri, 5 Apr 2019 17:01:24 +0000 (19:01 +0200)]
Merge pull request #7671 from Habbie/epel-python3
centos builds: ask for any python3
Remi Gacogne [Fri, 5 Apr 2019 16:10:23 +0000 (18:10 +0200)]
dnsdist: Add missing overrides
Remi Gacogne [Fri, 5 Apr 2019 14:22:28 +0000 (16:22 +0200)]
dnsdist: Add 'setSyslogFacility()'
Peter van Dijk [Fri, 5 Apr 2019 13:07:58 +0000 (15:07 +0200)]
dnsdist: honor libcrypto include path
Remi Gacogne [Fri, 5 Apr 2019 12:22:56 +0000 (14:22 +0200)]
Merge pull request #7668 from Habbie/boost-1.42
bump boost requirement to 1.42 unconditionally
Remi Gacogne [Fri, 5 Apr 2019 12:21:15 +0000 (14:21 +0200)]
Merge pull request #7559 from rgacogne/dnsdist-tcp-refactor-clean
dnsdist: Refactoring of the TCP stack
Remi Gacogne [Fri, 5 Apr 2019 12:10:58 +0000 (14:10 +0200)]
Merge pull request #7670 from Habbie/kill-addlua
dnsdist: remove addLuaAction and addLuaResponseAction
Remi Gacogne [Fri, 5 Apr 2019 10:51:45 +0000 (12:51 +0200)]
dnsdist: Add more TCP metrics
Keep, for each frontend and backend:
- the number of concurrent TCP connections
- the average number of queries per connection
- the average duration of a connection
Peter van Dijk [Thu, 4 Apr 2019 17:25:29 +0000 (19:25 +0200)]
centos builds: ask for any python3
Peter van Dijk [Thu, 4 Apr 2019 14:44:22 +0000 (16:44 +0200)]
dnsdist: remove addLuaAction and addLuaResponseAction
Peter van Dijk [Thu, 4 Apr 2019 13:10:45 +0000 (15:10 +0200)]
bump boost requirement to 1.42 unconditionally
Remi Gacogne [Thu, 4 Apr 2019 08:00:40 +0000 (10:00 +0200)]
dnsdist: Apply suggestions from chbruyand's reviews (thanks!)
Remi Gacogne [Wed, 3 Apr 2019 16:10:55 +0000 (18:10 +0200)]
dnsdist: Try reading from the TCP backend right away
Instead of waiting for the socket to be readable, as it might
already be, so we save a multiplexer trip, and prevent an issue
if we ever add a TLS layer between dnsdist and the backends.
Remi Gacogne [Wed, 3 Apr 2019 15:35:41 +0000 (17:35 +0200)]
dnsdist: Actually try to read before checking if the socket is readable
We need to because the TLS layer might already have data waiting
for us, while there might not be anything left on the OS-level
buffer associated to the socket.
If we don't ask the TLS layer, we might wait indefinitely for
something to arrive while the client has already sent everything,
and it's just waiting for us because the TLS record has been read.
Remi Gacogne [Wed, 3 Apr 2019 15:30:52 +0000 (17:30 +0200)]
dnsdist: Better reporting of syscall errors via OpenSSL's libssl
Remi Gacogne [Wed, 3 Apr 2019 15:30:21 +0000 (17:30 +0200)]
mplexer: Add an accessor to get the number of watched FDs
Remi Gacogne [Wed, 3 Apr 2019 15:29:39 +0000 (17:29 +0200)]
dnsdist: Add a few more regression tests for DNS over TLS
Remi Gacogne [Tue, 26 Mar 2019 14:18:34 +0000 (15:18 +0100)]
dnsdist: Update the documentation for the new TCP stack
Remi Gacogne [Tue, 26 Mar 2019 13:26:41 +0000 (14:26 +0100)]
dnsdist: Fix invalid carbon formatting for TCP stats
Remi Gacogne [Tue, 26 Mar 2019 10:22:03 +0000 (11:22 +0100)]
dnsdist: Display (and export via API) the frontend type (DoT, ..)
Remi Gacogne [Tue, 26 Mar 2019 10:10:57 +0000 (11:10 +0100)]
dnsdist: Display backend and frontend TCP metrics in showTCPStats()
Remi Gacogne [Tue, 26 Mar 2019 09:24:35 +0000 (10:24 +0100)]
dnsdist: Add more TCP metrics
Remi Gacogne [Mon, 25 Mar 2019 16:57:31 +0000 (17:57 +0100)]
dnsdist: Add a "lots of TCP connections" regression test
Remi Gacogne [Mon, 25 Mar 2019 16:11:22 +0000 (17:11 +0100)]
dnsdist: Downstream failures only count for fresh TCP connections
Remi Gacogne [Mon, 25 Mar 2019 16:10:13 +0000 (17:10 +0100)]
dnsdist: Properly handle an I/O error while sending a TCP response
Remi Gacogne [Fri, 22 Mar 2019 17:25:44 +0000 (18:25 +0100)]
mplexer: Add some unit tests for our multiplexers
Remi Gacogne [Fri, 22 Mar 2019 14:03:14 +0000 (15:03 +0100)]
mplexer: Keep TTD ordered so we can scan for timeouts efficiently
Remi Gacogne [Thu, 21 Mar 2019 17:49:27 +0000 (18:49 +0100)]
dnsdist: Handle EAGAIN when reading from the non-blocking TCP pipe
Remi Gacogne [Thu, 21 Mar 2019 17:45:40 +0000 (18:45 +0100)]
dnsdist: Don't scan for TCP timeouts more than once every second
Remi Gacogne [Thu, 21 Mar 2019 17:36:33 +0000 (18:36 +0100)]
dnsdist: Make sure that the TCP distribution pipes are non-blocking
Remi Gacogne [Thu, 21 Mar 2019 17:30:42 +0000 (18:30 +0100)]
dnsdist: Fix outstanding count for TCP connections
Remi Gacogne [Wed, 20 Mar 2019 11:09:28 +0000 (12:09 +0100)]
dnsdist: Use a unique pointer for the global TCPClientCollection
Remi Gacogne [Tue, 19 Mar 2019 14:53:38 +0000 (15:53 +0100)]
dnsdist: Remove code duplication between UDP and TCP in the tests
Remi Gacogne [Fri, 8 Mar 2019 17:44:36 +0000 (18:44 +0100)]
dnsdist: Disable regression tests for invalid AXFR
The new implementation does not try to be too smart about that
anymore.
Remi Gacogne [Thu, 28 Feb 2019 14:39:40 +0000 (15:39 +0100)]
dnsdist: TCP refactoring using an event-based logic
Remi Gacogne [Tue, 5 Mar 2019 10:48:02 +0000 (11:48 +0100)]
Only allocate the SSocket buffer when we actually need it, cleanup
Remi Gacogne [Tue, 5 Mar 2019 10:49:24 +0000 (11:49 +0100)]
Return EINPROGRESS instead of -1 in SConnectWithTimeout wo/ timeout
Remi Gacogne [Fri, 8 Mar 2019 15:41:22 +0000 (16:41 +0100)]
mplexer: Add support for write timeouts
Remi Gacogne [Mon, 4 Mar 2019 10:32:23 +0000 (11:32 +0100)]
mplexer: Make it possible to set the read TTD right away
Remi Gacogne [Wed, 27 Feb 2019 13:12:42 +0000 (14:12 +0100)]
dnsdist: Define empty DNSCrypt-related objects when not enabled
This way the rest of the code can mostly ignore whether DNSCrypt
support is enabled.
Remi Gacogne [Wed, 27 Feb 2019 11:06:53 +0000 (12:06 +0100)]
dnsdist: Add a function to extract an EDNS0Record from a DNS packet
Remi Gacogne [Tue, 26 Feb 2019 13:17:46 +0000 (14:17 +0100)]
dnsdist: Refactoring of the response handling path
Remi Gacogne [Mon, 25 Feb 2019 14:54:58 +0000 (15:54 +0100)]
dnsdist: Python 3 compat fixes for the regression tests
Remi Gacogne [Mon, 25 Feb 2019 14:54:13 +0000 (15:54 +0100)]
dnsdist: Refactoring to merge the UDP and TCP paths
Remi Gacogne [Thu, 4 Apr 2019 09:31:31 +0000 (11:31 +0200)]
Merge pull request #7481 from rgacogne/ipcrypt
Add support for encrypting IP addresses #gdpr
Remi Gacogne [Thu, 4 Apr 2019 09:29:29 +0000 (11:29 +0200)]
Merge pull request #7620 from shane-kerr/readme-link-fixes
Correct dnsdist & recursor information in README
Remi Gacogne [Thu, 4 Apr 2019 09:29:04 +0000 (11:29 +0200)]
Merge pull request #7652 from Habbie/dnsdist-ednsoptionview
dnsdist, recursor: EDNSOptionView improvements
Remi Gacogne [Thu, 4 Apr 2019 09:27:16 +0000 (11:27 +0200)]
Merge pull request #7578 from qvr/addtl-gstats
dnsdist: add frontend response statistics
Remi Gacogne [Thu, 4 Apr 2019 09:26:24 +0000 (11:26 +0200)]
Merge pull request #7343 from rgacogne/dnsdist-dyngroup-smt
dnsdist: Add addDynBlockSMT() support to dynBlockRulesGroup
Remi Gacogne [Thu, 4 Apr 2019 09:25:05 +0000 (11:25 +0200)]
Merge pull request #7585 from rgacogne/dnsdist-zero-ttl
dnsdist: Prevent 0-TTL cache hits
Remi Gacogne [Thu, 4 Apr 2019 09:24:04 +0000 (11:24 +0200)]
Merge pull request #7586 from rgacogne/dnsdist-null-latency-web
dnsdist: Gracefully handle a null latency in the webserver's JS
Peter van Dijk [Wed, 3 Apr 2019 07:10:09 +0000 (09:10 +0200)]
Merge pull request #7598 from jsoref/spelling
Spelling
Peter van Dijk [Wed, 3 Apr 2019 07:03:11 +0000 (09:03 +0200)]
Merge pull request #7656 from Habbie/dnsdist-macos-build-nit
dnsdist README: update macOS instructions
Peter van Dijk [Tue, 2 Apr 2019 21:54:37 +0000 (23:54 +0200)]
always link in uuid-utils because webserver logging needs it now
Peter van Dijk [Tue, 2 Apr 2019 16:29:04 +0000 (18:29 +0200)]
1-index recursor EDNSOptionView
Peter van Dijk [Tue, 2 Apr 2019 15:33:53 +0000 (17:33 +0200)]
dnsdist README: update macOS instructions
aerique [Tue, 2 Apr 2019 12:26:43 +0000 (14:26 +0200)]
Merge pull request #7654 from aerique/feature/changelog-and-secpoll-for-rec-4.1.12
Update changelog and secpoll for rec-4.1.12.
Peter van Dijk [Tue, 2 Apr 2019 12:11:52 +0000 (14:11 +0200)]
simplify vector indexing
Peter van Dijk [Tue, 2 Apr 2019 12:10:59 +0000 (14:10 +0200)]
adjust indexes in tests
Erik Winkels [Tue, 2 Apr 2019 11:08:12 +0000 (13:08 +0200)]
Update changelog and secpoll for rec-4.1.12.
Otto Moerbeek [Tue, 2 Apr 2019 08:38:05 +0000 (10:38 +0200)]
Merge pull request #7631 from omoerbeek/rec-ecs-cache-limit-with-ttl
Rec ecs cache limit with ttl
Peter van Dijk [Mon, 1 Apr 2019 19:29:55 +0000 (21:29 +0200)]
Lua tables are indexed from 1