2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00
Commit Graph

319 Commits

Author SHA1 Message Date
Mark Andrews
9e39bafd2e adjust SIT computation 2014-02-24 09:29:49 +11:00
Mark Andrews
02a5e3ed85 3755. [func] Add stats counters for known EDNS options + others.
[RT #35447]
2014-02-24 09:24:25 +11:00
Mark Andrews
6d7aa71f2f encrypt nonce and time 2014-02-24 07:16:00 +11:00
Mark Andrews
89b23dc57e silence compiler warning 2014-02-23 11:44:12 +11:00
Mark Andrews
47cb20eae1 add EDNS EXPIRE processing on ixfr and axfr out 2014-02-20 17:51:31 +11:00
Mark Andrews
16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
2014-02-20 14:56:20 +11:00
Mark Andrews
801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews
72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Francis Dupont
f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Mark Andrews
f45c36fb19 add client cookie in hmacsha* 2014-02-19 20:19:36 +11:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
2014-02-19 12:53:42 +11:00
Evan Hunt
31f6244cc2 [master] tcp and udp stats counters
3739.	[func]		Added per-zone stats counters to track TCP and
			UDP queries. [RT #35375]
2014-02-15 20:57:00 -08:00
Tinderbox User
81f58902eb update copyright notice 2014-02-07 23:46:39 +00:00
Evan Hunt
166341d554 [master] add no-case-compress
3731.	[func]		Added a "no-case-compress" ACL, which causes
			named to use case-insensitive compression
			(disabling change #3645) for specified
			clients. (This is useful when dealing
			with broken client implementations that
			use case-sensitive name comparisons,
			rejecting responses that fail to match the
			capitalization of the query that was sent.)
			[RT #35300]
2014-02-06 19:37:26 -08:00
Mark Andrews
c3c8823fed 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
2013-12-04 12:47:23 +11:00
Mark Andrews
cb69994ff8 3645. [protocol] Use case sensitive compression when responding to
queries. [RT #34737]
2013-09-05 12:22:34 +10:00
Mark Andrews
8e091f3d3e 3633. [cleanup] Refactor OPT processing in named to make it easier
to support new EDNS options. [RT #34414]
2013-08-15 12:01:12 +10:00
Evan Hunt
f3c8e48b95 [master] change RRL log category 'query-errors'
3575.	[func]		Changed the logging category for RRL events from
			'queries' to 'query-errors'. [RT #33540]
2013-05-21 12:20:54 -07:00
Evan Hunt
a6d43d18b1 [master] fixed several RRL issues
3554.	[bug]		RRL failed to correctly rate-limit upward
			referrals and failed to count dropped error
			responses in the statistics. [RT #33225]
2013-04-25 14:42:44 -07:00
Evan Hunt
67adc03ef8 [master] add DSCP support
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
2013-03-22 14:05:33 -07:00
Evan Hunt
55e5c51e66 [master] DNS RRL
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
2013-02-25 12:45:56 -08:00
Tinderbox User
573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt
2425d8bb7c [master] truncate logged rdata if too long
3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8
2013-02-20 13:54:52 -08:00
Mark Andrews
4151109b94 silence clang --analyze warnings 2012-11-30 18:50:38 +11:00
Evan Hunt
47c5b8af92 [master] silence coverity warnings
3401.	[bug]		Addressed Coverity warnings. [RT #31484]
2012-10-23 22:04:06 -07:00
Mark Andrews
4b17401c9c add test support for dropping edns messages (-T dropedns); ignoring edns in queries (-T noedns); variable max UDP (-T maxudp=value) 2012-10-16 10:23:08 +11:00
Mark Andrews
611dc88768 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 14:20:45 +10:00
Tinderbox User
adb113e235 update copyright notice 2012-09-29 23:46:01 +00:00
Mark Andrews
cc0a2f0283 Add undocumented '-T delay=value' to allow for simulation of remote servers 2012-09-29 13:07:09 +10:00
Mark Andrews
8e0a15f42f 3370. [bug] Address use after free while shutting down. [RT #30241] 2012-08-22 19:19:30 +10:00
Evan Hunt
d878b8d87c merged filter-aaaa-on-v6 (ATT SoW)
3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]
2012-05-14 11:50:00 -07:00
Evan Hunt
dd2a0a6d2d Merge statistics code (ATT SoW, rt24117)
This includes the following changes:

3326.	[func]		Added task list statistics: task model, worker
			threads, quantum, tasks running, tasks ready.
			[RT #27678]

3325.	[func]		Report cache statistics: memory use, number of
			nodes, number of hash buckets, hit and miss counts.
			[RT #27056]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3323.	[func]		Report the number of buckets the resolver is using.
			[RT #27020]

3322.	[func]		Monitor the number of active TCP and UDP dispatches.
			[RT #27055]

3321.	[func]		Monitor the number of recursive fetches and the
			number of open sockets, and report these values in
			the statistics channel. [RT #27054]

3320.	[func]		Added support for monitoring of recursing client
			count. [RT #27009]

3319.	[func]		Added support for monitoring of ADB entry count and
			hash size. [RT #27057]
2012-05-14 10:06:05 -07:00
Mark Andrews
d8e73b1c76 3296. [bug] Named could die with a INSIST failure in
client.c:exit_check. [RT #28346]
2012-03-15 11:33:43 +11:00
Automatic Updater
41f1164438 update copyright notice 2012-01-31 23:47:33 +00:00
Evan Hunt
93143fd81a 3273. [bug] AAAA responses could be returned in the additional
section even when filter-aaaa-on-v4 was in use.
                        [RT #27292]
2012-01-31 06:58:39 +00:00
Evan Hunt
77d048b03e 3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495] 2011-11-09 22:05:09 +00:00
Evan Hunt
83c0ef8815 3210. [bug] Canceling the oldest query due to recursive-client
overload could trigger an assertion failure. [RT #26463]
2011-11-07 23:03:09 +00:00
Evan Hunt
fd0cb18761 3199. [func] When logging client information, include the name
being queried. [RT #25944]
2011-11-03 21:14:22 +00:00
Evan Hunt
f704fa0ca6 3178. [bug] A race condition introduced by change #3163 could
cause an assertion failure on shutdown. [RT #26271]
2011-10-25 16:21:21 +00:00
Automatic Updater
0e11ca0f0b update copyright notice 2011-10-11 23:46:45 +00:00
Evan Hunt
793814f807 3164. [func] Enable DLZ modules to retrieve client information,
so that responses can be changed depending on the
			source address of the query. [RT #25768]
2011-10-11 00:09:03 +00:00
Evan Hunt
b2086d798b 3163. [bug] Use finer-grained locking in client.c to address
concurrency problems with large numbers of threads.
			[RT #26044]
2011-10-10 22:57:14 +00:00
Evan Hunt
a6c74da2b0 3159. [bug] On some platforms, named could assert on startup
when running in a chrooted environment without
			/proc. [RT #25863]

3158.	[bug]		Recursive servers would prefer a particular UDP
			socket instead of using all available sockets.
			[RT #26038]
2011-10-04 16:04:22 +00:00
Automatic Updater
2f17ad4545 update copyright notice 2011-07-28 23:47:59 +00:00
Mark Andrews
31f46f1869 3138. [bug] Address memory leaks and out-of-order operations when
shutting named down. [RT #25210]
2011-07-28 04:27:27 +00:00
Evan Hunt
f07b2fccaf 3137. [func] Improve hardware scalability by allowing multiple
worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]
2011-07-28 04:04:37 +00:00
Mark Andrews
fe646be4b7 set/reset client->signer. change 3106 used it before it was set 2011-05-05 23:44:52 +00:00
Evan Hunt
9eea4c5cbd 3106. [func] When logging client requests, include the name of
the TSIG key if any. [RT #23619]
2011-05-05 20:04:24 +00:00
Automatic Updater
135bcc2e42 update copyright notice 2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c 3006. [func] Allow dynamically generated TSIG keys to be preserved
across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]
2011-01-10 05:32:04 +00:00