upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-23 16:20:26 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

plans.

Browse source 
git-svn-id: file:///svn/unbound/trunk@627 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2007-09-20 14:39:22 +00:00
parent 62e37fe3ee
commit db695709e6
3 changed files with 13 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/Changelog
View file

@ -5,6 +5,8 @@
- improved DS empty nonterminal handling. - improved DS empty nonterminal handling.
- compat with ANS nxdomain for empty nonterminals. Attempts the nodata - compat with ANS nxdomain for empty nonterminals. Attempts the nodata
proof anyway, which succeeds in ANS failure case. proof anyway, which succeeds in ANS failure case.
- striplab protection in case it becomes -1.
- plans for static and blacklist config.
19 September 2007: Wouter 19 September 2007: Wouter
- comments about non-packed usage. - comments about non-packed usage.

1
doc/TODO
View file

@ -51,3 +51,4 @@ o grab ports nonconsequtive and change the set after a while (change within
a given range). Could be bad for OS if wrong port. unsure if it helps secure. a given range). Could be bad for OS if wrong port. unsure if it helps secure.
o workaround for nxdomain responses for ENT DS queries. Not look at rcode and o workaround for nxdomain responses for ENT DS queries. Not look at rcode and
look at valid empty nonterminal proof that is inside the packet. look at valid empty nonterminal proof that is inside the packet.
o make timeout backoffs randomized (a couple percent random) to spread traffic.

18
doc/plan
View file

@ -167,7 +167,6 @@ Styleguide:
from-clients, from-internal, has-subrequests, a nice error report, from-clients, from-internal, has-subrequests, a nice error report,
so that an excerpt from those times can be made from the logs. so that an excerpt from those times can be made from the logs.
logfileparsing tool that makes these excerpts and emails them. logfileparsing tool that makes these excerpts and emails them.
* ANS failure workaround (nxdomain for ENT; check if nxdomain is ENTnodata).
* clear cache as a callback from the new-rrset-id routine. * clear cache as a callback from the new-rrset-id routine.
* make overload mode work; phase 0 all ok, phase 1 some threads close ports, * make overload mode work; phase 0 all ok, phase 1 some threads close ports,
to let other threads pick up work. phase 2, all threads closed, so all open to let other threads pick up work. phase 2, all threads closed, so all open
@ -179,18 +178,21 @@ Styleguide:
if phase 1, start servicing, phase is 0 again. Make robust against delays. if phase 1, start servicing, phase is 0 again. Make robust against delays.
readme: max about 1 second worth of incoming queries, 10k perhaps, readme: max about 1 second worth of incoming queries, 10k perhaps,
or 1/number of seconds it takes start up of 10k. or 1/number of seconds it takes start up of 10k.
* features from Jakob's graph.
* acl for allowed recursion (RD=1), then drop or refused query.
* static answers for queries, option
* blacklist (return fixed nxdomain), option
* after checking acl, static, blacklist, do iter forwards, recurse.
*** Local zones feature. *** Local zones feature.
* Build in local zone features. First the total stop for1912. * Build in local zone features. First the total stop for1912.
* Then 'local content' for minimal serving of localhost.localdomain, * Then 'local content' for minimal serving of localhost.localdomain,
and so on. and so on.
* Remember jakob's diagram. * Remember jakob's diagram. views support, selective recursive service:
* views support, selective recursive service * acl for allowed recursion (RD=1), then drop or refused query.
like 10.0.0.0/8 allow, 0.0.0.0/0 refuse, ... in-order.
perhaps also, same list to disallow RD=0 access, like;
allow_recursion, drop_recursion, refuse_recursion, drop_all
* static answers for queries, fixed RRs from cfg, option
query for that RR returns answer with that RR.
* blacklist (return fixed nxdomain for domain and below), option
can be used to block AS112 traffic, option to unblock a zone.
* after checking acl, do iter: static, blacklist, forwards, recurse.
* Forward-local-zone to NSD. * Forward-local-zone to NSD.
- include in package, autoforkexec on localhost to do so. - include in package, autoforkexec on localhost to do so.
* forward local zone to remote server. * forward local zone to remote server.