mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-29 10:59:35 -05:00
dnstap io, config entries parse and lex.
This commit is contained in:
W.C.A. Wijngaards
parent
78e6060858
commit
00700bbe13
5 changed files with 3681 additions and 3447 deletions
3853
util/configlexer.c
3853
util/configlexer.c
File diff suppressed because it is too large
Load diff
|
|
@ -430,6 +430,14 @@ local-zone-override{COLON} { YDVAR(3, VAR_LOCAL_ZONE_OVERRIDE) }
|
|||
dnstap{COLON} { YDVAR(0, VAR_DNSTAP) }
|
||||
dnstap-enable{COLON} { YDVAR(1, VAR_DNSTAP_ENABLE) }
|
||||
dnstap-socket-path{COLON} { YDVAR(1, VAR_DNSTAP_SOCKET_PATH) }
|
||||
dnstap-ip{COLON} { YDVAR(1, VAR_DNSTAP_IP) }
|
||||
dnstap-tls{COLON} { YDVAR(1, VAR_DNSTAP_TLS) }
|
||||
dnstap-tls-server-name{COLON} { YDVAR(1, VAR_DNSTAP_TLS_SERVER_NAME) }
|
||||
dnstap-tls-cert-bundle{COLON} { YDVAR(1, VAR_DNSTAP_TLS_CERT_BUNDLE) }
|
||||
dnstap-tls-client-key-file{COLON} {
|
||||
YDVAR(1, VAR_DNSTAP_TLS_CLIENT_KEY_FILE) }
|
||||
dnstap-tls-client-cert-file{COLON} {
|
||||
YDVAR(1, VAR_DNSTAP_TLS_CLIENT_CERT_FILE) }
|
||||
dnstap-send-identity{COLON} { YDVAR(1, VAR_DNSTAP_SEND_IDENTITY) }
|
||||
dnstap-send-version{COLON} { YDVAR(1, VAR_DNSTAP_SEND_VERSION) }
|
||||
dnstap-identity{COLON} { YDVAR(1, VAR_DNSTAP_IDENTITY) }
|
||||
|
|
|
|||
2706
util/configparser.c
2706
util/configparser.c
File diff suppressed because it is too large
Load diff
|
|
@ -200,130 +200,136 @@ extern int yydebug;
|
|||
VAR_DNSTAP = 406,
|
||||
VAR_DNSTAP_ENABLE = 407,
|
||||
VAR_DNSTAP_SOCKET_PATH = 408,
|
||||
VAR_DNSTAP_SEND_IDENTITY = 409,
|
||||
VAR_DNSTAP_SEND_VERSION = 410,
|
||||
VAR_DNSTAP_IDENTITY = 411,
|
||||
VAR_DNSTAP_VERSION = 412,
|
||||
VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 413,
|
||||
VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 414,
|
||||
VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 415,
|
||||
VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 416,
|
||||
VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 417,
|
||||
VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 418,
|
||||
VAR_RESPONSE_IP_TAG = 419,
|
||||
VAR_RESPONSE_IP = 420,
|
||||
VAR_RESPONSE_IP_DATA = 421,
|
||||
VAR_HARDEN_ALGO_DOWNGRADE = 422,
|
||||
VAR_IP_TRANSPARENT = 423,
|
||||
VAR_DISABLE_DNSSEC_LAME_CHECK = 424,
|
||||
VAR_IP_RATELIMIT = 425,
|
||||
VAR_IP_RATELIMIT_SLABS = 426,
|
||||
VAR_IP_RATELIMIT_SIZE = 427,
|
||||
VAR_RATELIMIT = 428,
|
||||
VAR_RATELIMIT_SLABS = 429,
|
||||
VAR_RATELIMIT_SIZE = 430,
|
||||
VAR_RATELIMIT_FOR_DOMAIN = 431,
|
||||
VAR_RATELIMIT_BELOW_DOMAIN = 432,
|
||||
VAR_IP_RATELIMIT_FACTOR = 433,
|
||||
VAR_RATELIMIT_FACTOR = 434,
|
||||
VAR_SEND_CLIENT_SUBNET = 435,
|
||||
VAR_CLIENT_SUBNET_ZONE = 436,
|
||||
VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 437,
|
||||
VAR_CLIENT_SUBNET_OPCODE = 438,
|
||||
VAR_MAX_CLIENT_SUBNET_IPV4 = 439,
|
||||
VAR_MAX_CLIENT_SUBNET_IPV6 = 440,
|
||||
VAR_MIN_CLIENT_SUBNET_IPV4 = 441,
|
||||
VAR_MIN_CLIENT_SUBNET_IPV6 = 442,
|
||||
VAR_MAX_ECS_TREE_SIZE_IPV4 = 443,
|
||||
VAR_MAX_ECS_TREE_SIZE_IPV6 = 444,
|
||||
VAR_CAPS_WHITELIST = 445,
|
||||
VAR_CACHE_MAX_NEGATIVE_TTL = 446,
|
||||
VAR_PERMIT_SMALL_HOLDDOWN = 447,
|
||||
VAR_QNAME_MINIMISATION = 448,
|
||||
VAR_QNAME_MINIMISATION_STRICT = 449,
|
||||
VAR_IP_FREEBIND = 450,
|
||||
VAR_DEFINE_TAG = 451,
|
||||
VAR_LOCAL_ZONE_TAG = 452,
|
||||
VAR_ACCESS_CONTROL_TAG = 453,
|
||||
VAR_LOCAL_ZONE_OVERRIDE = 454,
|
||||
VAR_ACCESS_CONTROL_TAG_ACTION = 455,
|
||||
VAR_ACCESS_CONTROL_TAG_DATA = 456,
|
||||
VAR_VIEW = 457,
|
||||
VAR_ACCESS_CONTROL_VIEW = 458,
|
||||
VAR_VIEW_FIRST = 459,
|
||||
VAR_SERVE_EXPIRED = 460,
|
||||
VAR_SERVE_EXPIRED_TTL = 461,
|
||||
VAR_SERVE_EXPIRED_TTL_RESET = 462,
|
||||
VAR_SERVE_EXPIRED_REPLY_TTL = 463,
|
||||
VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 464,
|
||||
VAR_FAKE_DSA = 465,
|
||||
VAR_FAKE_SHA1 = 466,
|
||||
VAR_LOG_IDENTITY = 467,
|
||||
VAR_HIDE_TRUSTANCHOR = 468,
|
||||
VAR_TRUST_ANCHOR_SIGNALING = 469,
|
||||
VAR_AGGRESSIVE_NSEC = 470,
|
||||
VAR_USE_SYSTEMD = 471,
|
||||
VAR_SHM_ENABLE = 472,
|
||||
VAR_SHM_KEY = 473,
|
||||
VAR_ROOT_KEY_SENTINEL = 474,
|
||||
VAR_DNSCRYPT = 475,
|
||||
VAR_DNSCRYPT_ENABLE = 476,
|
||||
VAR_DNSCRYPT_PORT = 477,
|
||||
VAR_DNSCRYPT_PROVIDER = 478,
|
||||
VAR_DNSCRYPT_SECRET_KEY = 479,
|
||||
VAR_DNSCRYPT_PROVIDER_CERT = 480,
|
||||
VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 481,
|
||||
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 482,
|
||||
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 483,
|
||||
VAR_DNSCRYPT_NONCE_CACHE_SIZE = 484,
|
||||
VAR_DNSCRYPT_NONCE_CACHE_SLABS = 485,
|
||||
VAR_IPSECMOD_ENABLED = 486,
|
||||
VAR_IPSECMOD_HOOK = 487,
|
||||
VAR_IPSECMOD_IGNORE_BOGUS = 488,
|
||||
VAR_IPSECMOD_MAX_TTL = 489,
|
||||
VAR_IPSECMOD_WHITELIST = 490,
|
||||
VAR_IPSECMOD_STRICT = 491,
|
||||
VAR_CACHEDB = 492,
|
||||
VAR_CACHEDB_BACKEND = 493,
|
||||
VAR_CACHEDB_SECRETSEED = 494,
|
||||
VAR_CACHEDB_REDISHOST = 495,
|
||||
VAR_CACHEDB_REDISPORT = 496,
|
||||
VAR_CACHEDB_REDISTIMEOUT = 497,
|
||||
VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 498,
|
||||
VAR_FOR_UPSTREAM = 499,
|
||||
VAR_AUTH_ZONE = 500,
|
||||
VAR_ZONEFILE = 501,
|
||||
VAR_MASTER = 502,
|
||||
VAR_URL = 503,
|
||||
VAR_FOR_DOWNSTREAM = 504,
|
||||
VAR_FALLBACK_ENABLED = 505,
|
||||
VAR_TLS_ADDITIONAL_PORT = 506,
|
||||
VAR_LOW_RTT = 507,
|
||||
VAR_LOW_RTT_PERMIL = 508,
|
||||
VAR_FAST_SERVER_PERMIL = 509,
|
||||
VAR_FAST_SERVER_NUM = 510,
|
||||
VAR_ALLOW_NOTIFY = 511,
|
||||
VAR_TLS_WIN_CERT = 512,
|
||||
VAR_TCP_CONNECTION_LIMIT = 513,
|
||||
VAR_FORWARD_NO_CACHE = 514,
|
||||
VAR_STUB_NO_CACHE = 515,
|
||||
VAR_LOG_SERVFAIL = 516,
|
||||
VAR_DENY_ANY = 517,
|
||||
VAR_UNKNOWN_SERVER_TIME_LIMIT = 518,
|
||||
VAR_LOG_TAG_QUERYREPLY = 519,
|
||||
VAR_STREAM_WAIT_SIZE = 520,
|
||||
VAR_TLS_CIPHERS = 521,
|
||||
VAR_TLS_CIPHERSUITES = 522,
|
||||
VAR_IPSET = 523,
|
||||
VAR_IPSET_NAME_V4 = 524,
|
||||
VAR_IPSET_NAME_V6 = 525,
|
||||
VAR_TLS_SESSION_TICKET_KEYS = 526,
|
||||
VAR_RPZ = 527,
|
||||
VAR_TAGS = 528,
|
||||
VAR_RPZ_ACTION_OVERRIDE = 529,
|
||||
VAR_RPZ_CNAME_OVERRIDE = 530,
|
||||
VAR_RPZ_LOG = 531,
|
||||
VAR_RPZ_LOG_NAME = 532
|
||||
VAR_DNSTAP_IP = 409,
|
||||
VAR_DNSTAP_TLS = 410,
|
||||
VAR_DNSTAP_TLS_SERVER_NAME = 411,
|
||||
VAR_DNSTAP_TLS_CERT_BUNDLE = 412,
|
||||
VAR_DNSTAP_TLS_CLIENT_KEY_FILE = 413,
|
||||
VAR_DNSTAP_TLS_CLIENT_CERT_FILE = 414,
|
||||
VAR_DNSTAP_SEND_IDENTITY = 415,
|
||||
VAR_DNSTAP_SEND_VERSION = 416,
|
||||
VAR_DNSTAP_IDENTITY = 417,
|
||||
VAR_DNSTAP_VERSION = 418,
|
||||
VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 419,
|
||||
VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 420,
|
||||
VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 421,
|
||||
VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 422,
|
||||
VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 423,
|
||||
VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 424,
|
||||
VAR_RESPONSE_IP_TAG = 425,
|
||||
VAR_RESPONSE_IP = 426,
|
||||
VAR_RESPONSE_IP_DATA = 427,
|
||||
VAR_HARDEN_ALGO_DOWNGRADE = 428,
|
||||
VAR_IP_TRANSPARENT = 429,
|
||||
VAR_DISABLE_DNSSEC_LAME_CHECK = 430,
|
||||
VAR_IP_RATELIMIT = 431,
|
||||
VAR_IP_RATELIMIT_SLABS = 432,
|
||||
VAR_IP_RATELIMIT_SIZE = 433,
|
||||
VAR_RATELIMIT = 434,
|
||||
VAR_RATELIMIT_SLABS = 435,
|
||||
VAR_RATELIMIT_SIZE = 436,
|
||||
VAR_RATELIMIT_FOR_DOMAIN = 437,
|
||||
VAR_RATELIMIT_BELOW_DOMAIN = 438,
|
||||
VAR_IP_RATELIMIT_FACTOR = 439,
|
||||
VAR_RATELIMIT_FACTOR = 440,
|
||||
VAR_SEND_CLIENT_SUBNET = 441,
|
||||
VAR_CLIENT_SUBNET_ZONE = 442,
|
||||
VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 443,
|
||||
VAR_CLIENT_SUBNET_OPCODE = 444,
|
||||
VAR_MAX_CLIENT_SUBNET_IPV4 = 445,
|
||||
VAR_MAX_CLIENT_SUBNET_IPV6 = 446,
|
||||
VAR_MIN_CLIENT_SUBNET_IPV4 = 447,
|
||||
VAR_MIN_CLIENT_SUBNET_IPV6 = 448,
|
||||
VAR_MAX_ECS_TREE_SIZE_IPV4 = 449,
|
||||
VAR_MAX_ECS_TREE_SIZE_IPV6 = 450,
|
||||
VAR_CAPS_WHITELIST = 451,
|
||||
VAR_CACHE_MAX_NEGATIVE_TTL = 452,
|
||||
VAR_PERMIT_SMALL_HOLDDOWN = 453,
|
||||
VAR_QNAME_MINIMISATION = 454,
|
||||
VAR_QNAME_MINIMISATION_STRICT = 455,
|
||||
VAR_IP_FREEBIND = 456,
|
||||
VAR_DEFINE_TAG = 457,
|
||||
VAR_LOCAL_ZONE_TAG = 458,
|
||||
VAR_ACCESS_CONTROL_TAG = 459,
|
||||
VAR_LOCAL_ZONE_OVERRIDE = 460,
|
||||
VAR_ACCESS_CONTROL_TAG_ACTION = 461,
|
||||
VAR_ACCESS_CONTROL_TAG_DATA = 462,
|
||||
VAR_VIEW = 463,
|
||||
VAR_ACCESS_CONTROL_VIEW = 464,
|
||||
VAR_VIEW_FIRST = 465,
|
||||
VAR_SERVE_EXPIRED = 466,
|
||||
VAR_SERVE_EXPIRED_TTL = 467,
|
||||
VAR_SERVE_EXPIRED_TTL_RESET = 468,
|
||||
VAR_SERVE_EXPIRED_REPLY_TTL = 469,
|
||||
VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 470,
|
||||
VAR_FAKE_DSA = 471,
|
||||
VAR_FAKE_SHA1 = 472,
|
||||
VAR_LOG_IDENTITY = 473,
|
||||
VAR_HIDE_TRUSTANCHOR = 474,
|
||||
VAR_TRUST_ANCHOR_SIGNALING = 475,
|
||||
VAR_AGGRESSIVE_NSEC = 476,
|
||||
VAR_USE_SYSTEMD = 477,
|
||||
VAR_SHM_ENABLE = 478,
|
||||
VAR_SHM_KEY = 479,
|
||||
VAR_ROOT_KEY_SENTINEL = 480,
|
||||
VAR_DNSCRYPT = 481,
|
||||
VAR_DNSCRYPT_ENABLE = 482,
|
||||
VAR_DNSCRYPT_PORT = 483,
|
||||
VAR_DNSCRYPT_PROVIDER = 484,
|
||||
VAR_DNSCRYPT_SECRET_KEY = 485,
|
||||
VAR_DNSCRYPT_PROVIDER_CERT = 486,
|
||||
VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 487,
|
||||
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 488,
|
||||
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 489,
|
||||
VAR_DNSCRYPT_NONCE_CACHE_SIZE = 490,
|
||||
VAR_DNSCRYPT_NONCE_CACHE_SLABS = 491,
|
||||
VAR_IPSECMOD_ENABLED = 492,
|
||||
VAR_IPSECMOD_HOOK = 493,
|
||||
VAR_IPSECMOD_IGNORE_BOGUS = 494,
|
||||
VAR_IPSECMOD_MAX_TTL = 495,
|
||||
VAR_IPSECMOD_WHITELIST = 496,
|
||||
VAR_IPSECMOD_STRICT = 497,
|
||||
VAR_CACHEDB = 498,
|
||||
VAR_CACHEDB_BACKEND = 499,
|
||||
VAR_CACHEDB_SECRETSEED = 500,
|
||||
VAR_CACHEDB_REDISHOST = 501,
|
||||
VAR_CACHEDB_REDISPORT = 502,
|
||||
VAR_CACHEDB_REDISTIMEOUT = 503,
|
||||
VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 504,
|
||||
VAR_FOR_UPSTREAM = 505,
|
||||
VAR_AUTH_ZONE = 506,
|
||||
VAR_ZONEFILE = 507,
|
||||
VAR_MASTER = 508,
|
||||
VAR_URL = 509,
|
||||
VAR_FOR_DOWNSTREAM = 510,
|
||||
VAR_FALLBACK_ENABLED = 511,
|
||||
VAR_TLS_ADDITIONAL_PORT = 512,
|
||||
VAR_LOW_RTT = 513,
|
||||
VAR_LOW_RTT_PERMIL = 514,
|
||||
VAR_FAST_SERVER_PERMIL = 515,
|
||||
VAR_FAST_SERVER_NUM = 516,
|
||||
VAR_ALLOW_NOTIFY = 517,
|
||||
VAR_TLS_WIN_CERT = 518,
|
||||
VAR_TCP_CONNECTION_LIMIT = 519,
|
||||
VAR_FORWARD_NO_CACHE = 520,
|
||||
VAR_STUB_NO_CACHE = 521,
|
||||
VAR_LOG_SERVFAIL = 522,
|
||||
VAR_DENY_ANY = 523,
|
||||
VAR_UNKNOWN_SERVER_TIME_LIMIT = 524,
|
||||
VAR_LOG_TAG_QUERYREPLY = 525,
|
||||
VAR_STREAM_WAIT_SIZE = 526,
|
||||
VAR_TLS_CIPHERS = 527,
|
||||
VAR_TLS_CIPHERSUITES = 528,
|
||||
VAR_IPSET = 529,
|
||||
VAR_IPSET_NAME_V4 = 530,
|
||||
VAR_IPSET_NAME_V6 = 531,
|
||||
VAR_TLS_SESSION_TICKET_KEYS = 532,
|
||||
VAR_RPZ = 533,
|
||||
VAR_TAGS = 534,
|
||||
VAR_RPZ_ACTION_OVERRIDE = 535,
|
||||
VAR_RPZ_CNAME_OVERRIDE = 536,
|
||||
VAR_RPZ_LOG = 537,
|
||||
VAR_RPZ_LOG_NAME = 538
|
||||
};
|
||||
#endif
|
||||
/* Tokens. */
|
||||
|
|
@ -478,130 +484,136 @@ extern int yydebug;
|
|||
#define VAR_DNSTAP 406
|
||||
#define VAR_DNSTAP_ENABLE 407
|
||||
#define VAR_DNSTAP_SOCKET_PATH 408
|
||||
#define VAR_DNSTAP_SEND_IDENTITY 409
|
||||
#define VAR_DNSTAP_SEND_VERSION 410
|
||||
#define VAR_DNSTAP_IDENTITY 411
|
||||
#define VAR_DNSTAP_VERSION 412
|
||||
#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 413
|
||||
#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 414
|
||||
#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 415
|
||||
#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 416
|
||||
#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 417
|
||||
#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 418
|
||||
#define VAR_RESPONSE_IP_TAG 419
|
||||
#define VAR_RESPONSE_IP 420
|
||||
#define VAR_RESPONSE_IP_DATA 421
|
||||
#define VAR_HARDEN_ALGO_DOWNGRADE 422
|
||||
#define VAR_IP_TRANSPARENT 423
|
||||
#define VAR_DISABLE_DNSSEC_LAME_CHECK 424
|
||||
#define VAR_IP_RATELIMIT 425
|
||||
#define VAR_IP_RATELIMIT_SLABS 426
|
||||
#define VAR_IP_RATELIMIT_SIZE 427
|
||||
#define VAR_RATELIMIT 428
|
||||
#define VAR_RATELIMIT_SLABS 429
|
||||
#define VAR_RATELIMIT_SIZE 430
|
||||
#define VAR_RATELIMIT_FOR_DOMAIN 431
|
||||
#define VAR_RATELIMIT_BELOW_DOMAIN 432
|
||||
#define VAR_IP_RATELIMIT_FACTOR 433
|
||||
#define VAR_RATELIMIT_FACTOR 434
|
||||
#define VAR_SEND_CLIENT_SUBNET 435
|
||||
#define VAR_CLIENT_SUBNET_ZONE 436
|
||||
#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 437
|
||||
#define VAR_CLIENT_SUBNET_OPCODE 438
|
||||
#define VAR_MAX_CLIENT_SUBNET_IPV4 439
|
||||
#define VAR_MAX_CLIENT_SUBNET_IPV6 440
|
||||
#define VAR_MIN_CLIENT_SUBNET_IPV4 441
|
||||
#define VAR_MIN_CLIENT_SUBNET_IPV6 442
|
||||
#define VAR_MAX_ECS_TREE_SIZE_IPV4 443
|
||||
#define VAR_MAX_ECS_TREE_SIZE_IPV6 444
|
||||
#define VAR_CAPS_WHITELIST 445
|
||||
#define VAR_CACHE_MAX_NEGATIVE_TTL 446
|
||||
#define VAR_PERMIT_SMALL_HOLDDOWN 447
|
||||
#define VAR_QNAME_MINIMISATION 448
|
||||
#define VAR_QNAME_MINIMISATION_STRICT 449
|
||||
#define VAR_IP_FREEBIND 450
|
||||
#define VAR_DEFINE_TAG 451
|
||||
#define VAR_LOCAL_ZONE_TAG 452
|
||||
#define VAR_ACCESS_CONTROL_TAG 453
|
||||
#define VAR_LOCAL_ZONE_OVERRIDE 454
|
||||
#define VAR_ACCESS_CONTROL_TAG_ACTION 455
|
||||
#define VAR_ACCESS_CONTROL_TAG_DATA 456
|
||||
#define VAR_VIEW 457
|
||||
#define VAR_ACCESS_CONTROL_VIEW 458
|
||||
#define VAR_VIEW_FIRST 459
|
||||
#define VAR_SERVE_EXPIRED 460
|
||||
#define VAR_SERVE_EXPIRED_TTL 461
|
||||
#define VAR_SERVE_EXPIRED_TTL_RESET 462
|
||||
#define VAR_SERVE_EXPIRED_REPLY_TTL 463
|
||||
#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 464
|
||||
#define VAR_FAKE_DSA 465
|
||||
#define VAR_FAKE_SHA1 466
|
||||
#define VAR_LOG_IDENTITY 467
|
||||
#define VAR_HIDE_TRUSTANCHOR 468
|
||||
#define VAR_TRUST_ANCHOR_SIGNALING 469
|
||||
#define VAR_AGGRESSIVE_NSEC 470
|
||||
#define VAR_USE_SYSTEMD 471
|
||||
#define VAR_SHM_ENABLE 472
|
||||
#define VAR_SHM_KEY 473
|
||||
#define VAR_ROOT_KEY_SENTINEL 474
|
||||
#define VAR_DNSCRYPT 475
|
||||
#define VAR_DNSCRYPT_ENABLE 476
|
||||
#define VAR_DNSCRYPT_PORT 477
|
||||
#define VAR_DNSCRYPT_PROVIDER 478
|
||||
#define VAR_DNSCRYPT_SECRET_KEY 479
|
||||
#define VAR_DNSCRYPT_PROVIDER_CERT 480
|
||||
#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 481
|
||||
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 482
|
||||
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 483
|
||||
#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 484
|
||||
#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 485
|
||||
#define VAR_IPSECMOD_ENABLED 486
|
||||
#define VAR_IPSECMOD_HOOK 487
|
||||
#define VAR_IPSECMOD_IGNORE_BOGUS 488
|
||||
#define VAR_IPSECMOD_MAX_TTL 489
|
||||
#define VAR_IPSECMOD_WHITELIST 490
|
||||
#define VAR_IPSECMOD_STRICT 491
|
||||
#define VAR_CACHEDB 492
|
||||
#define VAR_CACHEDB_BACKEND 493
|
||||
#define VAR_CACHEDB_SECRETSEED 494
|
||||
#define VAR_CACHEDB_REDISHOST 495
|
||||
#define VAR_CACHEDB_REDISPORT 496
|
||||
#define VAR_CACHEDB_REDISTIMEOUT 497
|
||||
#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 498
|
||||
#define VAR_FOR_UPSTREAM 499
|
||||
#define VAR_AUTH_ZONE 500
|
||||
#define VAR_ZONEFILE 501
|
||||
#define VAR_MASTER 502
|
||||
#define VAR_URL 503
|
||||
#define VAR_FOR_DOWNSTREAM 504
|
||||
#define VAR_FALLBACK_ENABLED 505
|
||||
#define VAR_TLS_ADDITIONAL_PORT 506
|
||||
#define VAR_LOW_RTT 507
|
||||
#define VAR_LOW_RTT_PERMIL 508
|
||||
#define VAR_FAST_SERVER_PERMIL 509
|
||||
#define VAR_FAST_SERVER_NUM 510
|
||||
#define VAR_ALLOW_NOTIFY 511
|
||||
#define VAR_TLS_WIN_CERT 512
|
||||
#define VAR_TCP_CONNECTION_LIMIT 513
|
||||
#define VAR_FORWARD_NO_CACHE 514
|
||||
#define VAR_STUB_NO_CACHE 515
|
||||
#define VAR_LOG_SERVFAIL 516
|
||||
#define VAR_DENY_ANY 517
|
||||
#define VAR_UNKNOWN_SERVER_TIME_LIMIT 518
|
||||
#define VAR_LOG_TAG_QUERYREPLY 519
|
||||
#define VAR_STREAM_WAIT_SIZE 520
|
||||
#define VAR_TLS_CIPHERS 521
|
||||
#define VAR_TLS_CIPHERSUITES 522
|
||||
#define VAR_IPSET 523
|
||||
#define VAR_IPSET_NAME_V4 524
|
||||
#define VAR_IPSET_NAME_V6 525
|
||||
#define VAR_TLS_SESSION_TICKET_KEYS 526
|
||||
#define VAR_RPZ 527
|
||||
#define VAR_TAGS 528
|
||||
#define VAR_RPZ_ACTION_OVERRIDE 529
|
||||
#define VAR_RPZ_CNAME_OVERRIDE 530
|
||||
#define VAR_RPZ_LOG 531
|
||||
#define VAR_RPZ_LOG_NAME 532
|
||||
#define VAR_DNSTAP_IP 409
|
||||
#define VAR_DNSTAP_TLS 410
|
||||
#define VAR_DNSTAP_TLS_SERVER_NAME 411
|
||||
#define VAR_DNSTAP_TLS_CERT_BUNDLE 412
|
||||
#define VAR_DNSTAP_TLS_CLIENT_KEY_FILE 413
|
||||
#define VAR_DNSTAP_TLS_CLIENT_CERT_FILE 414
|
||||
#define VAR_DNSTAP_SEND_IDENTITY 415
|
||||
#define VAR_DNSTAP_SEND_VERSION 416
|
||||
#define VAR_DNSTAP_IDENTITY 417
|
||||
#define VAR_DNSTAP_VERSION 418
|
||||
#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 419
|
||||
#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 420
|
||||
#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 421
|
||||
#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 422
|
||||
#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 423
|
||||
#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 424
|
||||
#define VAR_RESPONSE_IP_TAG 425
|
||||
#define VAR_RESPONSE_IP 426
|
||||
#define VAR_RESPONSE_IP_DATA 427
|
||||
#define VAR_HARDEN_ALGO_DOWNGRADE 428
|
||||
#define VAR_IP_TRANSPARENT 429
|
||||
#define VAR_DISABLE_DNSSEC_LAME_CHECK 430
|
||||
#define VAR_IP_RATELIMIT 431
|
||||
#define VAR_IP_RATELIMIT_SLABS 432
|
||||
#define VAR_IP_RATELIMIT_SIZE 433
|
||||
#define VAR_RATELIMIT 434
|
||||
#define VAR_RATELIMIT_SLABS 435
|
||||
#define VAR_RATELIMIT_SIZE 436
|
||||
#define VAR_RATELIMIT_FOR_DOMAIN 437
|
||||
#define VAR_RATELIMIT_BELOW_DOMAIN 438
|
||||
#define VAR_IP_RATELIMIT_FACTOR 439
|
||||
#define VAR_RATELIMIT_FACTOR 440
|
||||
#define VAR_SEND_CLIENT_SUBNET 441
|
||||
#define VAR_CLIENT_SUBNET_ZONE 442
|
||||
#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 443
|
||||
#define VAR_CLIENT_SUBNET_OPCODE 444
|
||||
#define VAR_MAX_CLIENT_SUBNET_IPV4 445
|
||||
#define VAR_MAX_CLIENT_SUBNET_IPV6 446
|
||||
#define VAR_MIN_CLIENT_SUBNET_IPV4 447
|
||||
#define VAR_MIN_CLIENT_SUBNET_IPV6 448
|
||||
#define VAR_MAX_ECS_TREE_SIZE_IPV4 449
|
||||
#define VAR_MAX_ECS_TREE_SIZE_IPV6 450
|
||||
#define VAR_CAPS_WHITELIST 451
|
||||
#define VAR_CACHE_MAX_NEGATIVE_TTL 452
|
||||
#define VAR_PERMIT_SMALL_HOLDDOWN 453
|
||||
#define VAR_QNAME_MINIMISATION 454
|
||||
#define VAR_QNAME_MINIMISATION_STRICT 455
|
||||
#define VAR_IP_FREEBIND 456
|
||||
#define VAR_DEFINE_TAG 457
|
||||
#define VAR_LOCAL_ZONE_TAG 458
|
||||
#define VAR_ACCESS_CONTROL_TAG 459
|
||||
#define VAR_LOCAL_ZONE_OVERRIDE 460
|
||||
#define VAR_ACCESS_CONTROL_TAG_ACTION 461
|
||||
#define VAR_ACCESS_CONTROL_TAG_DATA 462
|
||||
#define VAR_VIEW 463
|
||||
#define VAR_ACCESS_CONTROL_VIEW 464
|
||||
#define VAR_VIEW_FIRST 465
|
||||
#define VAR_SERVE_EXPIRED 466
|
||||
#define VAR_SERVE_EXPIRED_TTL 467
|
||||
#define VAR_SERVE_EXPIRED_TTL_RESET 468
|
||||
#define VAR_SERVE_EXPIRED_REPLY_TTL 469
|
||||
#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 470
|
||||
#define VAR_FAKE_DSA 471
|
||||
#define VAR_FAKE_SHA1 472
|
||||
#define VAR_LOG_IDENTITY 473
|
||||
#define VAR_HIDE_TRUSTANCHOR 474
|
||||
#define VAR_TRUST_ANCHOR_SIGNALING 475
|
||||
#define VAR_AGGRESSIVE_NSEC 476
|
||||
#define VAR_USE_SYSTEMD 477
|
||||
#define VAR_SHM_ENABLE 478
|
||||
#define VAR_SHM_KEY 479
|
||||
#define VAR_ROOT_KEY_SENTINEL 480
|
||||
#define VAR_DNSCRYPT 481
|
||||
#define VAR_DNSCRYPT_ENABLE 482
|
||||
#define VAR_DNSCRYPT_PORT 483
|
||||
#define VAR_DNSCRYPT_PROVIDER 484
|
||||
#define VAR_DNSCRYPT_SECRET_KEY 485
|
||||
#define VAR_DNSCRYPT_PROVIDER_CERT 486
|
||||
#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 487
|
||||
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 488
|
||||
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 489
|
||||
#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 490
|
||||
#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 491
|
||||
#define VAR_IPSECMOD_ENABLED 492
|
||||
#define VAR_IPSECMOD_HOOK 493
|
||||
#define VAR_IPSECMOD_IGNORE_BOGUS 494
|
||||
#define VAR_IPSECMOD_MAX_TTL 495
|
||||
#define VAR_IPSECMOD_WHITELIST 496
|
||||
#define VAR_IPSECMOD_STRICT 497
|
||||
#define VAR_CACHEDB 498
|
||||
#define VAR_CACHEDB_BACKEND 499
|
||||
#define VAR_CACHEDB_SECRETSEED 500
|
||||
#define VAR_CACHEDB_REDISHOST 501
|
||||
#define VAR_CACHEDB_REDISPORT 502
|
||||
#define VAR_CACHEDB_REDISTIMEOUT 503
|
||||
#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 504
|
||||
#define VAR_FOR_UPSTREAM 505
|
||||
#define VAR_AUTH_ZONE 506
|
||||
#define VAR_ZONEFILE 507
|
||||
#define VAR_MASTER 508
|
||||
#define VAR_URL 509
|
||||
#define VAR_FOR_DOWNSTREAM 510
|
||||
#define VAR_FALLBACK_ENABLED 511
|
||||
#define VAR_TLS_ADDITIONAL_PORT 512
|
||||
#define VAR_LOW_RTT 513
|
||||
#define VAR_LOW_RTT_PERMIL 514
|
||||
#define VAR_FAST_SERVER_PERMIL 515
|
||||
#define VAR_FAST_SERVER_NUM 516
|
||||
#define VAR_ALLOW_NOTIFY 517
|
||||
#define VAR_TLS_WIN_CERT 518
|
||||
#define VAR_TCP_CONNECTION_LIMIT 519
|
||||
#define VAR_FORWARD_NO_CACHE 520
|
||||
#define VAR_STUB_NO_CACHE 521
|
||||
#define VAR_LOG_SERVFAIL 522
|
||||
#define VAR_DENY_ANY 523
|
||||
#define VAR_UNKNOWN_SERVER_TIME_LIMIT 524
|
||||
#define VAR_LOG_TAG_QUERYREPLY 525
|
||||
#define VAR_STREAM_WAIT_SIZE 526
|
||||
#define VAR_TLS_CIPHERS 527
|
||||
#define VAR_TLS_CIPHERSUITES 528
|
||||
#define VAR_IPSET 529
|
||||
#define VAR_IPSET_NAME_V4 530
|
||||
#define VAR_IPSET_NAME_V6 531
|
||||
#define VAR_TLS_SESSION_TICKET_KEYS 532
|
||||
#define VAR_RPZ 533
|
||||
#define VAR_TAGS 534
|
||||
#define VAR_RPZ_ACTION_OVERRIDE 535
|
||||
#define VAR_RPZ_CNAME_OVERRIDE 536
|
||||
#define VAR_RPZ_LOG 537
|
||||
#define VAR_RPZ_LOG_NAME 538
|
||||
|
||||
/* Value type. */
|
||||
#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED
|
||||
|
|
@ -611,7 +623,7 @@ union YYSTYPE
|
|||
|
||||
char* str;
|
||||
|
||||
#line 615 "util/configparser.h"
|
||||
#line 627 "util/configparser.h"
|
||||
|
||||
};
|
||||
typedef union YYSTYPE YYSTYPE;
|
||||
|
|
|
|||
|
|
@ -116,7 +116,9 @@ extern struct config_parser_state* cfg_parser;
|
|||
%token VAR_UNBLOCK_LAN_ZONES VAR_INSECURE_LAN_ZONES
|
||||
%token VAR_INFRA_CACHE_MIN_RTT
|
||||
%token VAR_DNS64_PREFIX VAR_DNS64_SYNTHALL VAR_DNS64_IGNORE_AAAA
|
||||
%token VAR_DNSTAP VAR_DNSTAP_ENABLE VAR_DNSTAP_SOCKET_PATH
|
||||
%token VAR_DNSTAP VAR_DNSTAP_ENABLE VAR_DNSTAP_SOCKET_PATH VAR_DNSTAP_IP
|
||||
%token VAR_DNSTAP_TLS VAR_DNSTAP_TLS_SERVER_NAME VAR_DNSTAP_TLS_CERT_BUNDLE
|
||||
%token VAR_DNSTAP_TLS_CLIENT_KEY_FILE VAR_DNSTAP_TLS_CLIENT_CERT_FILE
|
||||
%token VAR_DNSTAP_SEND_IDENTITY VAR_DNSTAP_SEND_VERSION
|
||||
%token VAR_DNSTAP_IDENTITY VAR_DNSTAP_VERSION
|
||||
%token VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES
|
||||
|
|
@ -2720,6 +2722,9 @@ dtstart: VAR_DNSTAP
|
|||
contents_dt: contents_dt content_dt
|
||||
| ;
|
||||
content_dt: dt_dnstap_enable | dt_dnstap_socket_path |
|
||||
dt_dnstap_ip | dt_dnstap_tls | dt_dnstap_tls_server_name |
|
||||
dt_dnstap_tls_cert_bundle |
|
||||
dt_dnstap_tls_client_key_file | dt_dnstap_tls_client_cert_file |
|
||||
dt_dnstap_send_identity | dt_dnstap_send_version |
|
||||
dt_dnstap_identity | dt_dnstap_version |
|
||||
dt_dnstap_log_resolver_query_messages |
|
||||
|
|
@ -2745,6 +2750,50 @@ dt_dnstap_socket_path: VAR_DNSTAP_SOCKET_PATH STRING_ARG
|
|||
cfg_parser->cfg->dnstap_socket_path = $2;
|
||||
}
|
||||
;
|
||||
dt_dnstap_ip: VAR_DNSTAP_IP STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_ip:%s)\n", $2));
|
||||
free(cfg_parser->cfg->dnstap_ip);
|
||||
cfg_parser->cfg->dnstap_ip = $2;
|
||||
}
|
||||
;
|
||||
dt_dnstap_tls: VAR_DNSTAP_TLS STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_tls:%s)\n", $2));
|
||||
if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
|
||||
yyerror("expected yes or no.");
|
||||
else cfg_parser->cfg->dnstap_tls = (strcmp($2, "yes")==0);
|
||||
free($2);
|
||||
}
|
||||
;
|
||||
dt_dnstap_tls_server_name: VAR_DNSTAP_TLS_SERVER_NAME STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_tls_server_name:%s)\n", $2));
|
||||
free(cfg_parser->cfg->dnstap_tls_server_name);
|
||||
cfg_parser->cfg->dnstap_tls_server_name = $2;
|
||||
}
|
||||
;
|
||||
dt_dnstap_tls_cert_bundle: VAR_DNSTAP_TLS_CERT_BUNDLE STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_tls_cert_bundle:%s)\n", $2));
|
||||
free(cfg_parser->cfg->dnstap_tls_cert_bundle);
|
||||
cfg_parser->cfg->dnstap_tls_cert_bundle = $2;
|
||||
}
|
||||
;
|
||||
dt_dnstap_tls_client_key_file: VAR_DNSTAP_TLS_CLIENT_KEY_FILE STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_tls_client_key_file:%s)\n", $2));
|
||||
free(cfg_parser->cfg->dnstap_tls_client_key_file);
|
||||
cfg_parser->cfg->dnstap_tls_client_key_file = $2;
|
||||
}
|
||||
;
|
||||
dt_dnstap_tls_client_cert_file: VAR_DNSTAP_TLS_CLIENT_CERT_FILE STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_tls_client_cert_file:%s)\n", $2));
|
||||
free(cfg_parser->cfg->dnstap_tls_client_cert_file);
|
||||
cfg_parser->cfg->dnstap_tls_client_cert_file = $2;
|
||||
}
|
||||
;
|
||||
dt_dnstap_send_identity: VAR_DNSTAP_SEND_IDENTITY STRING_ARG
|
||||
{
|
||||
OUTYY(("P(dt_dnstap_send_identity:%s)\n", $2));
|
||||
|
|
|
|||
Loading…
Reference in a new issue