upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-01-15 19:22:55 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

pad-queries default yes

Browse source
This commit is contained in:
Willem Toorop 2020-04-14 08:52:51 +02:00
parent 60e53d36b7
commit 2c8a91c2f9
4 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/example.conf.in
View file

@ -771,7 +771,7 @@ server:
# tls-win-cert: no
# Pad queries over TLS upstreams
# pad-queries: no
# pad-queries: yes
# Padded queries will be padded to the closest multiple of this size.
# pad-queries-block-size: 128

2
doc/unbound.conf.5.in
View file

@ -560,7 +560,7 @@ Default is 468.
.B pad\-queries: \fI<yes or no>
If enabled, all queries sent over TLS upstreams will be padded to the closest
multiple of the size specified in \fBpad\-queries\-block\-size\fR.
Default is no.
Default is yes.
.TP
.B pad\-queries\-block\-size: \fI<number>
The block size with which to pad queries sent over TLS upstreams.

2
util/config_file.c
View file

@ -324,7 +324,7 @@ config_create(void)
cfg->dnscrypt_nonce_cache_slabs = 4;
cfg->pad_responses = 1;
cfg->pad_responses_block_size = 468; /* from RFC8467 */
cfg->pad_queries = 0;
cfg->pad_queries = 1;
cfg->pad_queries_block_size = 128; /* from RFC8467 */
#ifdef USE_IPSECMOD
cfg->ipsecmod_enabled = 1;

3
util/data/msgencode.c
View file

@ -843,8 +843,7 @@ attach_edns_record_max_msg_sz(sldns_buffer* pkt, struct edns_data* edns,
/* By use of calc_edns_field_size, calling functions should
* have made sure that there is enough space for at least a
* zero sized padding option, but it cannot harm to leave it
* out if there isn't.
* zero sized padding option.
*/
log_assert(pad_pos + 4 <= msg_sz);