Daniel Salzman
29acaeaba9
tests-extra: improve bind_version() to accept newer extended string
2026-07-08 20:30:51 +02:00
Daniel Salzman
e7bac59dd9
Merge branch 'mempool-merge-with-kres'
2026-07-08 13:39:24 +02:00
Lukáš Ondráček
7c9ea1f625
contrib/ucw/mempool: remove mp_alloc_noalign
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
f350333bc4
contrib/ucw/mempool: unify size types to size_t
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
2c3aadb54c
contrib/ucw/mempool: add valgrind directives
2026-07-08 13:38:26 +02:00
Daniel Salzman
3589cf357f
contrib: add optional Valgrind Memcheck macros
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
cabd96a95e
contrib/ucw/mempool: include chunk metadata in requested size
...
Originally, the requested chunk size was enlarged by the size of its metadata (~16 B)
and then in mmap version of mempools it was rounded up to the page size.
As the requested size itself is usually rounded to whole pages,
the chunk size was roughly by one page larger than expected;
still the whole space could have been used by mempools.
In non-mmap version (not used here), the effect might have been even worse,
as the rounding may be involved on the allocator level
and so the excessive memory cannot be used by mempools.
Now, usable size of chunks is a little smaller than requested,
but allocated area size corresponds to what was requested.
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
ddb01edc47
contrib/ucw/mempool: add mp_shrink and mention missing parts
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
590395c094
contrib/ucw/mempool: nits
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
cb884e8e38
contrib/ucw/mempool: add chunk to pool reference in debug mode
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
4bc9495092
contrib/ucw/mempool: adjust license
2026-07-08 13:38:26 +02:00
Lukáš Ondráček
be0aa260ac
contrib/ucw/mempool: extend mp_stats with used_size
...
It was introduced in a newer upstream version
and can be useful for calculating mempool overhead
as (total_size - used_size);
though it's not currently used even in kres.
2026-07-08 13:38:01 +02:00
Lukáš Ondráček
b97ab0162c
contrib/ucw/mempools: remove unused *_zero methods
2026-07-08 13:38:01 +02:00
Lukáš Ondráček
edd71b4356
contrib/ucw/mempool: unify types with kres
2026-07-08 13:38:01 +02:00
Daniel Salzman
4bf0c188c5
Knot.files: update
2026-07-08 13:38:01 +02:00
Libor Peltan
ecf3e99f31
libknot/QUIC: proper timeout value for client conns...
...
...mostly needed for proper sweep function in kxdpgun
2026-07-08 11:01:00 +02:00
Libor Peltan
f9e2deb35a
Merge branch 'ctl_unset_ttl' into 'master'
...
ctl: use current TTL for zone-unset
See merge request knot/knot-dns!1890
2026-07-08 10:57:08 +02:00
Daniel Salzman
3b890a5138
ctl: use current TTL for zone-unset
2026-07-07 07:10:38 +02:00
Daniel Salzman
638415ae61
Merge branch 'quic_errcrypto_close' into 'master'
...
quic: close connection on TLS handshake failure (bis)
See merge request knot/knot-dns!1889
2026-07-06 18:10:38 +02:00
Libor Peltan
d7273756ee
libknot/QUIC: improved error reporting when closing conn
2026-07-06 17:53:34 +02:00
Libor Peltan
6044ef298f
libknot/QUIC: simplify sending close when TSL handshake failed
2026-07-06 17:37:53 +02:00
Libor Peltan
7e65254980
libknot/QUIC: refactoring: remove conn from table in send_special after sending excessiveLOADclosing pkt
2026-07-06 17:29:39 +02:00
Libor Peltan
916424b240
libknot/QUIC: refactoring: remove conn from table in send_special after sending closing pkt
2026-07-06 17:29:39 +02:00
vendemiat
73627820a1
quic: close connection on TLS handshake failure
...
Close connection on NGTCP2_ERR_CRYPTO from ngtcp2_conn_read_pkt) instead
of silently discarding the packet.
Fixes timeout issues for clients failing TLS handshake (for e.g. ALPN
mismatch or certificate algorithm mismatch)
2026-07-06 17:29:39 +02:00
Libor Peltan
d9e2a2f9e9
Merge branch 'xdp_tcp_mtu' into 'master'
...
xdp: add missing Ethernet header in socket->frame_limit calculation from MTU
See merge request knot/knot-dns!1888
2026-07-02 13:41:38 +02:00
Daniel Salzman
d150ae06bf
xdp: add missing Ethernet header in socket->frame_limit calculation from MTU
2026-07-02 13:13:25 +02:00
Daniel Salzman
a7bd06f033
Merge branch 'rrset_static' into 'master'
...
Rrset static
See merge request knot/knot-dns!1887
2026-07-02 07:51:22 +02:00
Libor Peltan
7d074afe8f
zone/offline expiry: improve log message
2026-07-02 06:49:57 +02:00
Libor Peltan
99bc8e8601
knot: use knot_rrset_static() where appropriate
2026-07-01 19:45:38 +02:00
Libor Peltan
4270285d8d
libknot: helpers for static init of single-RR RRsets
2026-07-01 19:15:19 +02:00
Babak Farrokhi
1b053bcfe1
libknot: add support for EDE code 33 (Negative Trust Anchor)
...
Let users know what a resolver returned an insecure answer, when an NTA
is in effect.
IANA has already assigned an Extended DNS Error INFO-CODE 33 "Negative Trust Anchor"
Link: https://datatracker.ietf.org/doc/draft-farrokhi-dnsop-ede-nta/
2026-07-01 14:59:32 +02:00
Daniel Salzman
365aa44a1c
tls: don't call gnutls_subject_alt_names_deinit() with the NULL argument
2026-07-01 11:00:09 +02:00
Daniel Salzman
486d8e1ea3
ctl: don't log interrupted poll() as warning during shutdown
2026-06-30 15:59:35 +02:00
Daniel Salzman
220a629401
libknot: add KNOT_EINTR (EINTR equivalent) error code
2026-06-30 15:15:30 +02:00
Daniel Salzman
95a542e6a7
ctl: log failed accept if not a timeout
2026-06-30 13:49:13 +02:00
Daniel Salzman
8b0595aa53
server: log error if a worker initialization fails
2026-06-29 17:44:00 +02:00
Daniel Salzman
c88d94dd43
libngtcp2: update embedded library to v1.24.0
2026-06-28 15:36:15 +02:00
Daniel Salzman
fdd673405a
Merge branch 'events_ctl_improve' into 'master'
...
zone/events+ctl: refactoring: forced/user and more are now event flags/param
See merge request knot/knot-dns!1885
2026-06-26 18:09:23 +02:00
Libor Peltan
0822fccb07
zone/events+ctl: refactoring: forced/user and more are now event flags/param
2026-06-26 18:01:39 +02:00
Daniel Salzman
8ebc4406bf
Merge branch 'keymgr_trash_bin' into 'master'
...
"trash bin" for removed DNSSEC keys
See merge request knot/knot-dns!1881
2026-06-26 13:33:37 +02:00
David Vašek
405f3c0373
conf: fix a comment typo
2026-06-26 13:20:30 +02:00
David Vašek
6c00b1834a
doc/operation: describe the zone removal procedure
2026-06-26 13:20:30 +02:00
David Vašek
c5118c16c5
doc/operation: describe cleanup of removed legacy DNSSEC keys
2026-06-26 13:20:30 +02:00
David Vašek
316900cfca
tests-extra: add a new test dnssec/trash_bin
...
For full testing, this test requires knotd binary built with
the following option:
./configure --with-gc-interval=30 ...
For good testing of the "trash bin" functionality, this option is
encouraged for all tests! There are no adverse side effects.
2026-06-26 13:20:30 +02:00
David Vašek
75a6b43584
tests-extra: dnssec/purge_keys -- update to "trash bin" use and current '+keys' purging
2026-06-26 13:20:30 +02:00
Daniel Salzman
ea766bff2a
tests-extra: add fatal parameter to isset() and compare()
2026-06-26 13:20:30 +02:00
David Vašek
e1200aa9a3
kasp: policy-dependant default for trash-delay
2026-06-26 13:20:30 +02:00
David Vašek
feb3d0002b
purge: when purging keys, use the "trash bin" instead of delete
2026-06-26 13:20:30 +02:00
David Vašek
8ac0c227b3
dnssec: use incomplete DNSSEC context for orphan keys
2026-06-26 13:20:30 +02:00
David Vašek
060df28e0a
dnssec: refactor kdnssec_ctx_deinit()
2026-06-26 13:20:30 +02:00