Commit graph

20388 commits

Author SHA1 Message Date
Daniel Salzman
29acaeaba9 tests-extra: improve bind_version() to accept newer extended string 2026-07-08 20:30:51 +02:00
Daniel Salzman
e7bac59dd9 Merge branch 'mempool-merge-with-kres' 2026-07-08 13:39:24 +02:00
Lukáš Ondráček
7c9ea1f625 contrib/ucw/mempool: remove mp_alloc_noalign 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
f350333bc4 contrib/ucw/mempool: unify size types to size_t 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
2c3aadb54c contrib/ucw/mempool: add valgrind directives 2026-07-08 13:38:26 +02:00
Daniel Salzman
3589cf357f contrib: add optional Valgrind Memcheck macros 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
cabd96a95e contrib/ucw/mempool: include chunk metadata in requested size
Originally, the requested chunk size was enlarged by the size of its metadata (~16 B)
and then in mmap version of mempools it was rounded up to the page size.
As the requested size itself is usually rounded to whole pages,
the chunk size was roughly by one page larger than expected;
still the whole space could have been used by mempools.

In non-mmap version (not used here), the effect might have been even worse,
as the rounding may be involved on the allocator level
and so the excessive memory cannot be used by mempools.

Now, usable size of chunks is a little smaller than requested,
but allocated area size corresponds to what was requested.
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
ddb01edc47 contrib/ucw/mempool: add mp_shrink and mention missing parts 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
590395c094 contrib/ucw/mempool: nits 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
cb884e8e38 contrib/ucw/mempool: add chunk to pool reference in debug mode 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
4bc9495092 contrib/ucw/mempool: adjust license 2026-07-08 13:38:26 +02:00
Lukáš Ondráček
be0aa260ac contrib/ucw/mempool: extend mp_stats with used_size
It was introduced in a newer upstream version
and can be useful for calculating mempool overhead
as (total_size - used_size);
though it's not currently used even in kres.
2026-07-08 13:38:01 +02:00
Lukáš Ondráček
b97ab0162c contrib/ucw/mempools: remove unused *_zero methods 2026-07-08 13:38:01 +02:00
Lukáš Ondráček
edd71b4356 contrib/ucw/mempool: unify types with kres 2026-07-08 13:38:01 +02:00
Daniel Salzman
4bf0c188c5 Knot.files: update 2026-07-08 13:38:01 +02:00
Libor Peltan
ecf3e99f31 libknot/QUIC: proper timeout value for client conns...
...mostly needed for proper sweep function in kxdpgun
2026-07-08 11:01:00 +02:00
Libor Peltan
f9e2deb35a Merge branch 'ctl_unset_ttl' into 'master'
ctl: use current TTL for zone-unset

See merge request knot/knot-dns!1890
2026-07-08 10:57:08 +02:00
Daniel Salzman
3b890a5138 ctl: use current TTL for zone-unset 2026-07-07 07:10:38 +02:00
Daniel Salzman
638415ae61 Merge branch 'quic_errcrypto_close' into 'master'
quic: close connection on TLS handshake failure (bis)

See merge request knot/knot-dns!1889
2026-07-06 18:10:38 +02:00
Libor Peltan
d7273756ee libknot/QUIC: improved error reporting when closing conn 2026-07-06 17:53:34 +02:00
Libor Peltan
6044ef298f libknot/QUIC: simplify sending close when TSL handshake failed 2026-07-06 17:37:53 +02:00
Libor Peltan
7e65254980 libknot/QUIC: refactoring: remove conn from table in send_special after sending excessiveLOADclosing pkt 2026-07-06 17:29:39 +02:00
Libor Peltan
916424b240 libknot/QUIC: refactoring: remove conn from table in send_special after sending closing pkt 2026-07-06 17:29:39 +02:00
vendemiat
73627820a1 quic: close connection on TLS handshake failure
Close connection on NGTCP2_ERR_CRYPTO from ngtcp2_conn_read_pkt) instead
of silently discarding the packet.
Fixes timeout issues for clients failing TLS handshake (for e.g. ALPN
mismatch or certificate algorithm mismatch)
2026-07-06 17:29:39 +02:00
Libor Peltan
d9e2a2f9e9 Merge branch 'xdp_tcp_mtu' into 'master'
xdp: add missing Ethernet header in socket->frame_limit calculation from MTU

See merge request knot/knot-dns!1888
2026-07-02 13:41:38 +02:00
Daniel Salzman
d150ae06bf xdp: add missing Ethernet header in socket->frame_limit calculation from MTU 2026-07-02 13:13:25 +02:00
Daniel Salzman
a7bd06f033 Merge branch 'rrset_static' into 'master'
Rrset static

See merge request knot/knot-dns!1887
2026-07-02 07:51:22 +02:00
Libor Peltan
7d074afe8f zone/offline expiry: improve log message 2026-07-02 06:49:57 +02:00
Libor Peltan
99bc8e8601 knot: use knot_rrset_static() where appropriate 2026-07-01 19:45:38 +02:00
Libor Peltan
4270285d8d libknot: helpers for static init of single-RR RRsets 2026-07-01 19:15:19 +02:00
Babak Farrokhi
1b053bcfe1 libknot: add support for EDE code 33 (Negative Trust Anchor)
Let users know what a resolver returned an insecure answer, when an NTA
is in effect.

IANA has already assigned an Extended DNS Error INFO-CODE 33 "Negative Trust Anchor"

Link: https://datatracker.ietf.org/doc/draft-farrokhi-dnsop-ede-nta/
2026-07-01 14:59:32 +02:00
Daniel Salzman
365aa44a1c tls: don't call gnutls_subject_alt_names_deinit() with the NULL argument 2026-07-01 11:00:09 +02:00
Daniel Salzman
486d8e1ea3 ctl: don't log interrupted poll() as warning during shutdown 2026-06-30 15:59:35 +02:00
Daniel Salzman
220a629401 libknot: add KNOT_EINTR (EINTR equivalent) error code 2026-06-30 15:15:30 +02:00
Daniel Salzman
95a542e6a7 ctl: log failed accept if not a timeout 2026-06-30 13:49:13 +02:00
Daniel Salzman
8b0595aa53 server: log error if a worker initialization fails 2026-06-29 17:44:00 +02:00
Daniel Salzman
c88d94dd43 libngtcp2: update embedded library to v1.24.0 2026-06-28 15:36:15 +02:00
Daniel Salzman
fdd673405a Merge branch 'events_ctl_improve' into 'master'
zone/events+ctl: refactoring: forced/user and more are now event flags/param

See merge request knot/knot-dns!1885
2026-06-26 18:09:23 +02:00
Libor Peltan
0822fccb07 zone/events+ctl: refactoring: forced/user and more are now event flags/param 2026-06-26 18:01:39 +02:00
Daniel Salzman
8ebc4406bf Merge branch 'keymgr_trash_bin' into 'master'
"trash bin" for removed DNSSEC keys

See merge request knot/knot-dns!1881
2026-06-26 13:33:37 +02:00
David Vašek
405f3c0373 conf: fix a comment typo 2026-06-26 13:20:30 +02:00
David Vašek
6c00b1834a doc/operation: describe the zone removal procedure 2026-06-26 13:20:30 +02:00
David Vašek
c5118c16c5 doc/operation: describe cleanup of removed legacy DNSSEC keys 2026-06-26 13:20:30 +02:00
David Vašek
316900cfca tests-extra: add a new test dnssec/trash_bin
For full testing, this test requires knotd binary built with
the following option:

   ./configure --with-gc-interval=30 ...

For good testing of the "trash bin" functionality, this option is
encouraged for all tests! There are no adverse side effects.
2026-06-26 13:20:30 +02:00
David Vašek
75a6b43584 tests-extra: dnssec/purge_keys -- update to "trash bin" use and current '+keys' purging 2026-06-26 13:20:30 +02:00
Daniel Salzman
ea766bff2a tests-extra: add fatal parameter to isset() and compare() 2026-06-26 13:20:30 +02:00
David Vašek
e1200aa9a3 kasp: policy-dependant default for trash-delay 2026-06-26 13:20:30 +02:00
David Vašek
feb3d0002b purge: when purging keys, use the "trash bin" instead of delete 2026-06-26 13:20:30 +02:00
David Vašek
8ac0c227b3 dnssec: use incomplete DNSSEC context for orphan keys 2026-06-26 13:20:30 +02:00
David Vašek
060df28e0a dnssec: refactor kdnssec_ctx_deinit() 2026-06-26 13:20:30 +02:00