]>
git.ipfire.org Git - thirdparty/knot-dns.git/log
David Vašek [Fri, 4 Jun 2021 19:43:56 +0000 (21:43 +0200)]
backup: updated backup format (BACKUP_FORMAT_2)
Functional changes:
1. Zone files are stored in a dedicated directory.
2. Zone files use the zones' default file names in the backup,
not the file names defined in the configuration as before. This
change eleminates file name conflicts which were possible with the
original backup design.
David Vašek [Fri, 4 Jun 2021 19:43:18 +0000 (21:43 +0200)]
backup: get the backup format version to be used by restore
Iff there isn't a label file and the force flag is set, use the original backup
format for restore.
Otherwise report a backup without a label file as malformed.
If there is an empty label file, the label file doesn't start with a label file
header, the label file doesn't include a backup format description, or the backup
format code isn't known, consider it a malformed backup and don't restore from it,
even if the force flag has been set.
David Vašek [Tue, 1 Jun 2021 14:23:05 +0000 (16:23 +0200)]
backup: add backup format versioning
David Vašek [Wed, 2 Jun 2021 14:15:44 +0000 (16:15 +0200)]
zone backup: source code style improvement
Sort the #include statements alphabetically and remove a duplicity.
Break up a too long macro line.
David Vašek [Wed, 19 May 2021 14:25:02 +0000 (16:25 +0200)]
backup: make the recent code a little more compact
David Vašek [Wed, 19 May 2021 14:14:59 +0000 (16:14 +0200)]
backup: label successful backups only, keep the lock file in failed ones
The label file is a warrant that the backup has benn successfully completed
and can be safely used for a restore.
David Vašek [Wed, 19 May 2021 13:00:55 +0000 (15:00 +0200)]
backup: if the backup label can't be created, propagate the error up and to the client
David Vašek [Mon, 10 May 2021 21:04:21 +0000 (23:04 +0200)]
backup: add an "-f" parameter for zone-restore
The "-f" parameter for zone-restore allows restore from older backups
which have been created without a backup label file.
David Vašek [Fri, 30 Apr 2021 17:33:17 +0000 (19:33 +0200)]
backup: create a backup label and check for its existence
The label file identifies the backup an prevents another backup to be made
to an already existing backup. Existence of a label file is necessary for a restore,
which helps to prevent a frequent user error and to avoid a number of failures
which would be triggered by it.
In addition to that, every label file contains a brief description
of the backup and its parameters. A list of zones that the backup contains
isn't included so far.
Daniel Salzman [Sun, 11 Jul 2021 09:11:14 +0000 (09:11 +0000)]
Merge branch 'kxdpgun_tcp2' into 'master'
Basic implementation of TCP over XDP for Knot server
See merge request knot/knot-dns!1300
Daniel Salzman [Sat, 10 Jul 2021 20:34:59 +0000 (22:34 +0200)]
kxdpgun: don't print per-thread received in send-only mode
Daniel Salzman [Fri, 9 Jul 2021 19:22:41 +0000 (21:22 +0200)]
kxdpgun: improve error processing and add 'lost' counter
Libor Peltan [Fri, 9 Jul 2021 10:50:25 +0000 (12:50 +0200)]
XDP-TCP bugfix: proper flags allocating IPv6/TCP reply
Daniel Salzman [Thu, 8 Jul 2021 19:21:43 +0000 (21:21 +0200)]
XDP-TCP: final code cleanup
Daniel Salzman [Thu, 8 Jul 2021 08:19:01 +0000 (10:19 +0200)]
XDP-TCP: simplify UDP handler API
Daniel Salzman [Wed, 7 Jul 2021 19:13:10 +0000 (21:13 +0200)]
XDP-TCP: xdp handler improvements
Daniel Salzman [Wed, 7 Jul 2021 06:59:46 +0000 (08:59 +0200)]
XDP-TCP: make udp_tick() optional
Daniel Salzman [Thu, 24 Jun 2021 09:18:33 +0000 (11:18 +0200)]
XDP-TCP: tiny cleanup of handler headers
Daniel Salzman [Tue, 6 Jul 2021 21:20:46 +0000 (23:20 +0200)]
distro/deb: update knot_tcp_* symbols
Daniel Salzman [Mon, 5 Jul 2021 10:50:33 +0000 (12:50 +0200)]
XDP-TCP: rename 'knot_tcp_input_buffers' to 'tcp_inbuf_update' and refactor internal API
Daniel Salzman [Tue, 6 Jul 2021 18:36:44 +0000 (20:36 +0200)]
XDP-TCP: rename 'knot_tcp_send_data' to 'knot_tcp_relay_answer'
Daniel Salzman [Tue, 6 Jul 2021 18:13:03 +0000 (20:13 +0200)]
XDP-TCP: rename prefix 'knot_xdp_tcp' to 'knot_tcp', and 'knot_tcp_timeout' to 'knot_tcp_sweep'
Daniel Salzman [Mon, 5 Jul 2021 09:36:28 +0000 (11:36 +0200)]
conf: remove 'tcp' parameter from conf_xdp_iface()
Daniel Salzman [Tue, 6 Jul 2021 20:31:25 +0000 (22:31 +0200)]
XDP-TCP: refactor Siphash secret handling
Daniel Salzman [Sun, 4 Jul 2021 11:10:49 +0000 (13:10 +0200)]
XDP-TCP: various code cleanup
Daniel Salzman [Sun, 4 Jul 2021 20:11:09 +0000 (22:11 +0200)]
XDP-TCP: move mock API from xdp.h to test_xdp_tcp.c
Daniel Salzman [Fri, 2 Jul 2021 11:37:57 +0000 (13:37 +0200)]
XDP-TCP: configuration cleanup
Daniel Salzman [Sun, 4 Jul 2021 19:38:36 +0000 (21:38 +0200)]
XDP-TCP: remove unused mm parameter from knot_xdp_tcp_relay()
Daniel Salzman [Sun, 4 Jul 2021 19:12:24 +0000 (21:12 +0200)]
XDP-TCP: move testing API from xdp.h to test_xdp_tcp.c
Daniel Salzman [Sun, 4 Jul 2021 11:14:39 +0000 (13:14 +0200)]
libknot: move XDP-related headers from libknot.h to xdp.h
Daniel Salzman [Sun, 4 Jul 2021 11:09:19 +0000 (13:09 +0200)]
mod-probe: don't try to get TCP RTT in the XDP mode
Daniel Salzman [Fri, 2 Jul 2021 11:09:14 +0000 (13:09 +0200)]
conf: move 'server.listen-xdp' to 'xdp.listen' with backward compatibility
Daniel Salzman [Fri, 2 Jul 2021 11:00:08 +0000 (13:00 +0200)]
conf: simplify conf_db_param()
Daniel Salzman [Fri, 2 Jul 2021 10:55:52 +0000 (12:55 +0200)]
conf: move 'server.xdp-route-check' to 'xdp.route-check'
Libor Peltan [Fri, 2 Jul 2021 12:07:02 +0000 (14:07 +0200)]
XDP-TCP: logging of closed/reset connections
Jan Hak [Thu, 1 Jul 2021 08:06:18 +0000 (10:06 +0200)]
kxdpgun: change default batch size for TCP and update documentation
Daniel Salzman [Mon, 28 Jun 2021 18:07:18 +0000 (20:07 +0200)]
dynarray: move from contrib to libknot
Libor Peltan [Tue, 8 Jun 2021 13:38:05 +0000 (15:38 +0200)]
nameserver: disable multi-message answers thru XDP...
...until out-buffers are implemented
...to avoid XDP buffers overrun on large answer
Libor Peltan [Tue, 1 Jun 2021 11:22:11 +0000 (13:22 +0200)]
XDP-TCP: remove list_t from libknot public api
Libor Peltan [Fri, 28 May 2021 15:31:35 +0000 (17:31 +0200)]
XDP-TCP: configurable parameters of TCP stack
Libor Peltan [Fri, 28 May 2021 12:08:17 +0000 (14:08 +0200)]
XDP-TCP: count total inbuf usage
Libor Peltan [Thu, 20 May 2021 15:28:40 +0000 (17:28 +0200)]
tests: XDP-TCP test of connection handling, states and stress
Libor Peltan [Fri, 21 May 2021 13:49:15 +0000 (15:49 +0200)]
XDP-TCP: bugfix: set conn ackno properly after SYN+ACK
Libor Peltan [Thu, 20 May 2021 08:53:45 +0000 (10:53 +0200)]
XDP-TCP: limit incomming MSS to what XDP can handle
Libor Peltan [Wed, 12 May 2021 15:28:59 +0000 (17:28 +0200)]
XDP-TCP: enable fragmented outgoing DNS according to MSS
Libor Peltan [Wed, 12 May 2021 11:19:31 +0000 (13:19 +0200)]
XDP-TCP: announce correct MSS
Libor Peltan [Wed, 12 May 2021 08:56:54 +0000 (10:56 +0200)]
XDP-TCP: allow incomming data+FIN
Libor Peltan [Wed, 12 May 2021 08:39:22 +0000 (10:39 +0200)]
XDP-TCP: advertise infinite window size
Libor Peltan [Wed, 12 May 2021 05:47:54 +0000 (07:47 +0200)]
XDP-TCP: bugfix: dont impose limit on resets per second
Libor Peltan [Wed, 12 May 2021 05:45:04 +0000 (07:45 +0200)]
XDP-TCP: bugfix: don't return error if just EAGAIN on flush
Libor Peltan [Thu, 6 May 2021 16:44:06 +0000 (18:44 +0200)]
XDP-TCP: enable receiving DNS messages fragmented in multiple packets
Libor Peltan [Thu, 6 May 2021 15:02:00 +0000 (17:02 +0200)]
XDP-TCP: bugfix: don't timeout-close already closing connections
Libor Peltan [Thu, 6 May 2021 12:11:16 +0000 (14:11 +0200)]
XDP-TCP: better handling of not-yet-ACKed ackno
Libor Peltan [Thu, 6 May 2021 09:40:55 +0000 (11:40 +0200)]
XDP-TCP: bugfix: set active only when ACK match
Libor Peltan [Thu, 6 May 2021 09:26:36 +0000 (11:26 +0200)]
UDP handler: enable regular check/timeout of XDP-TCP connections
Libor Peltan [Thu, 6 May 2021 08:20:16 +0000 (10:20 +0200)]
XDP-TCP: use list_t for removed timeouted connections
Libor Peltan [Thu, 6 May 2021 08:00:08 +0000 (10:00 +0200)]
XDP-TCP: limit number of connection closed at once...
...otherwise XDP may fail to send so many FIN/RSTs
Libor Peltan [Thu, 6 May 2021 06:42:00 +0000 (08:42 +0200)]
XDP-TCP: ignore ACK with unmatching ackno
Libor Peltan [Wed, 5 May 2021 13:39:30 +0000 (15:39 +0200)]
XDP-TCP: allow connection timeout
Libor Peltan [Fri, 30 Apr 2021 14:46:09 +0000 (16:46 +0200)]
implemented server answering TCP over XDP
Libor Peltan [Mon, 3 May 2021 14:55:39 +0000 (16:55 +0200)]
conf: option for TCP over XDP
Libor Peltan [Mon, 3 May 2021 15:57:42 +0000 (17:57 +0200)]
TCP over XDP: bugfixes in answering logic
Libor Peltan [Fri, 30 Apr 2021 09:30:07 +0000 (11:30 +0200)]
libknot: TCP over XDP: use dynarray for relays
Libor Peltan [Wed, 14 Apr 2021 20:02:09 +0000 (22:02 +0200)]
XDP: basic TCP connection stateful, in kxdpgun
Libor Peltan [Thu, 8 Jul 2021 12:46:51 +0000 (12:46 +0000)]
Merge branch 'nosoa' into 'master'
Add semantich check for SOA presence
Closes #746
See merge request knot/knot-dns!1322
Daniel Salzman [Thu, 8 Jul 2021 06:57:11 +0000 (06:57 +0000)]
Merge branch 'ip_route_get_specific' into 'master'
kxdpgun: query route to specific addr instead of dumping route table...
See merge request knot/knot-dns!1323
Libor Peltan [Wed, 7 Jul 2021 19:03:24 +0000 (21:03 +0200)]
kxdpgun: query route to specific addr instead of dumping route table...
...in order to fix issue with IPv6 routing tables
not hinting source address
Daniel Salzman [Wed, 7 Jul 2021 16:38:26 +0000 (18:38 +0200)]
semcheck: add mandatory check for SOA
Daniel Salzman [Fri, 2 Jul 2021 06:55:21 +0000 (08:55 +0200)]
doc: various fixes in server and module references
Daniel Salzman [Thu, 1 Jul 2021 14:05:55 +0000 (14:05 +0000)]
Merge branch 'dnssec-unsafe' into 'master'
dnssec: implemented unsafe policy
See merge request knot/knot-dns!1308
Libor Peltan [Thu, 10 Jun 2021 15:39:26 +0000 (17:39 +0200)]
dnssec: implemented unsafe policy
Libor Peltan [Wed, 30 Jun 2021 19:41:04 +0000 (21:41 +0200)]
doc/catalog: examples of config
Daniel Salzman [Wed, 30 Jun 2021 14:23:46 +0000 (16:23 +0200)]
distro/deb: add symbol 'knot_svcb_param_names'
Daniel Salzman [Wed, 30 Jun 2021 05:58:32 +0000 (05:58 +0000)]
Merge branch 'geoip_nodata' into 'master'
module geoip: respond NODATA instead NXDMAIN where appropriate
Closes #745
See merge request knot/knot-dns!1315
Libor Peltan [Tue, 29 Jun 2021 17:59:47 +0000 (19:59 +0200)]
nameserver: don't shadow positive zone record with module's NODATA
Libor Peltan [Wed, 16 Jun 2021 13:52:01 +0000 (15:52 +0200)]
module geoip: respond NODATA instead NXDMAIN where appropriate
Daniel Salzman [Mon, 28 Jun 2021 16:49:56 +0000 (16:49 +0000)]
Merge branch 'nsec3param_ttl' into 'master'
nsec3param: set TTL to the same like for NSEC3...
See merge request knot/knot-dns!1320
Libor Peltan [Mon, 28 Jun 2021 16:35:38 +0000 (18:35 +0200)]
nsec3param: set TTL to the same like for NSEC3...
...the change does not take effect until NSEC3PARAM
is updated for other reason (eg resalt)
Daniel Salzman [Mon, 28 Jun 2021 16:03:59 +0000 (16:03 +0000)]
Merge branch 'catalog_startstop_leak' into 'master'
catalog: minor memleak when stopping before catalog_upd_apply
See merge request knot/knot-dns!1319
Libor Peltan [Mon, 28 Jun 2021 15:34:58 +0000 (17:34 +0200)]
catalog: minor memleak when stopping before catalog_upd_apply
Daniel Salzman [Mon, 28 Jun 2021 12:24:36 +0000 (14:24 +0200)]
libknot, libzscanner: compile and build against libfuzzer to fix small number of 8-bit counters
fixes #744
Daniel Salzman [Fri, 25 Jun 2021 08:08:28 +0000 (08:08 +0000)]
Merge branch 'tests_extra_pidfile' into 'master'
tests-extra: if there is a PID file before the server starts, wait if it disappears
See merge request knot/knot-dns!1318
David Vašek [Thu, 24 Jun 2021 13:17:35 +0000 (15:17 +0200)]
tests-extra: if there is a PID file before the server starts, wait if it disappears
This change prevents unnecessary test failures under Valgrind on our new (and faster) test server.
David Vašek [Thu, 24 Jun 2021 13:03:22 +0000 (15:03 +0200)]
tests-extra: python style improvement
Daniel Salzman [Thu, 24 Jun 2021 07:47:20 +0000 (09:47 +0200)]
doc/configuration: fix typo
Daniel Salzman [Thu, 24 Jun 2021 07:42:34 +0000 (07:42 +0000)]
Merge branch 'knotc_keys_load' into 'master'
knotc: implemented zone-keys-load without dropping RRSIGs
See merge request knot/knot-dns!1313
Libor Peltan [Tue, 15 Jun 2021 11:47:22 +0000 (13:47 +0200)]
knotc: implemented zone-keys-load without dropping RRSIGs
Daniel Salzman [Wed, 23 Jun 2021 09:52:05 +0000 (09:52 +0000)]
Merge branch 'conf_singleton_misuse' into 'master'
Conf singleton proper access
See merge request knot/knot-dns!1312
Libor Peltan [Mon, 14 Jun 2021 16:50:19 +0000 (18:50 +0200)]
nameserver: bugfix: consistent reading of conf
Libor Peltan [Mon, 14 Jun 2021 16:22:24 +0000 (18:22 +0200)]
stats: read conf consistently
Libor Peltan [Mon, 14 Jun 2021 16:17:57 +0000 (18:17 +0200)]
server/tcp: read conf consistently
Libor Peltan [Fri, 11 Jun 2021 19:43:07 +0000 (21:43 +0200)]
journal: use correct conf_t in event handlers
Libor Peltan [Fri, 11 Jun 2021 19:26:58 +0000 (21:26 +0200)]
update/load: use correct conf in event handler
Libor Peltan [Fri, 11 Jun 2021 14:52:23 +0000 (16:52 +0200)]
dnssec: refactor/fix: dont use conf() in event handlers
Daniel Salzman [Wed, 23 Jun 2021 05:56:34 +0000 (05:56 +0000)]
Merge branch 'svcb_dump' into 'master'
SVCB/HTTPS rrtype support
Closes #654
See merge request knot/knot-dns!1238
Daniel Salzman [Sun, 20 Jun 2021 19:26:26 +0000 (21:26 +0200)]
doc: update supported rrtypes
Daniel Salzman [Fri, 18 Jun 2021 13:48:14 +0000 (15:48 +0200)]
libzscanner: update generated scanner files
Daniel Salzman [Tue, 22 Jun 2021 19:54:06 +0000 (21:54 +0200)]
tests-extra: replace zone/dump_load with extended records/load
Daniel Salzman [Tue, 22 Jun 2021 19:47:51 +0000 (21:47 +0200)]
tests-extra: remove explicit TTLs from records.zone to solve different processing Knot/Bind
Daniel Salzman [Fri, 18 Jun 2021 13:47:50 +0000 (15:47 +0200)]
tests/libzscanner: extend tests for SVCB and HTTPS