upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-02-03 20:29:28 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
8189 commits 25 branches 209 tags 134 MiB
Commit graph

5408 commits

Author SHA1 Message Date
Yorgos Thessalonikefs
faf40c97fc - Eagerly remove .skip mark files in between mini_tdir.sh runs in case
Some checks are pending
ci / build (push) Waiting to run
Details 
there has been a change on the environment.
 2026-02-03 15:08:59 +01:00
W.C.A. Wijngaards
daa016e3e4 - Add test for allow-notify with a host name.
Some checks failed
ci / build (push) Has been cancelled
Details
2026-01-27 13:49:33 +01:00
W.C.A. Wijngaards
039f69e735 - Fix to not skip allow-notify hostname lookups when there are only
Some checks are pending
ci / build (push) Waiting to run
Details 
urls.
 2026-01-26 16:16:38 +01:00
W.C.A. Wijngaards
b39009e487 Merge branch 'master' of github.com:NLnetLabs/unbound 2026-01-26 15:17:26 +01:00
W.C.A. Wijngaards
933769ee73 - Fix that allow-notify entries with hostnames are copied after IPv4 
and IPv6 lookup.
 2026-01-26 15:16:43 +01:00
Yorgos Thessalonikefs
57bff79627 - Update generated man pages.
Some checks failed
ci / build (push) Has been cancelled
Details
2026-01-23 18:04:25 +01:00
Yorgos Thessalonikefs
1b5559d534 Changelog entry for #1396: 
- Merge #1396: Log Linux thread ID.
- On Linux systems log the system-wide unique thread ID instead of
  Unbound's internal thread counter.
- Introduce the 'log-thread-id' configuration option to manage logging
  the system-wide Linux thread ID for easier debugging with system
  tools.
 2026-01-23 17:46:14 +01:00
Yorgos Thessalonikefs
9d271c5343
Merge pull request #1396 from NLnetLabs/features/thread-id 2026-01-23 17:42:30 +01:00
Yorgos Thessalonikefs
74cc49e6c4 - Introduce the 'log-thread-id' configuration option to manage logging 
the system-wide Linux thread ID for easier debugging with system
  tools.
 2026-01-23 17:15:14 +01:00
W.C.A. Wijngaards
9b123d1b78 - Fix http test tool petal to not print errors when there is no
Some checks failed
ci / build (push) Has been cancelled
Details 
error.
 2026-01-22 14:19:35 +01:00
W.C.A. Wijngaards
37b71261a2 - Fix that fast reload copies the iter_scrub_ns, iter_scrub_cname
Some checks are pending
ci / build (push) Waiting to run
Details 
and max_global_quota options.
 2026-01-22 09:42:56 +01:00
W.C.A. Wijngaards
4426db4d3d - Merge #1388: QNX Porting support for unbound.
Some checks are pending
ci / build (push) Waiting to run
Details
2026-01-21 13:13:01 +01:00
W.C.A. Wijngaards
67d2eae28c - Merge #1392: Include "V" (version) option in synopsis.
Some checks failed
ci / build (push) Has been cancelled
Details
2026-01-19 09:09:47 +01:00
David H. Gutteridge
9010a7075e
Include "V" (version) option in synopsis (#1392) 2026-01-19 09:09:12 +01:00
W.C.A. Wijngaards
cc6dbc9f38 - Fix documentation for requestlist.overwritten and
Some checks failed
ci / build (push) Has been cancelled
Details 
requestlist.exceeded, it explains which query was dropped.
 2026-01-15 09:35:04 +01:00
W.C.A. Wijngaards
08600d68e8 Changelog note for #1381, and man page explanation. 
- Merge #1381: Do not initialize quic_table unless it is enabled.
 2026-01-08 14:16:54 +01:00
Yorgos Thessalonikefs
f1b35bab4b Changelog entry for #1391:
Some checks failed
ci / build (push) Has been cancelled
Details 
- Merge #1391 from Götz Görisch: Fix documentation to adhere to
  RFC5952.
 2026-01-06 18:21:34 +01:00
Goetz Goerisch
adb0374a4d Fix documentation to adhere to RFC 5952 
Update the text representations of IPv6 addresses.
 2026-01-06 16:10:37 +01:00
W.C.A. Wijngaards
b0b634558b - Fix edns subnet, that scope zero queries, when there is a
Some checks are pending
ci / build (push) Waiting to run
Details 
subquery without subnet, and the forward-no-cache or
  stub-no-cache option is set, it is not stored in cache due to
  the forward or stub option.
This has the changelog entry and test.
 2026-01-06 09:33:00 +01:00
Yorgos Thessalonikefs
44659cb3bf - Use the same EDE removal logic when encoding errors as when encoding
Some checks failed
ci / build (push) Has been cancelled
Details 
replies.
 2025-12-31 16:22:15 +01:00
Yorgos Thessalonikefs
a1ac2d0252 - Update the unbound-anchor man page to note write permissions of the 
generated file if it is to be used with Unbound's
  auto-trust-anchor-file option.
 2025-12-31 14:05:42 +01:00
Yorgos Thessalonikefs
5c7a26b615 - Mark "THROWAWAY" and "(DNSSEC) LAME" responses clearly as Unbound's
Some checks are pending
ci / build (push) Waiting to run
Details 
categorization in the log output.
 2025-12-30 13:15:37 +01:00
Yorgos Thessalonikefs
09d352b917 - More specific wording in the unbound.conf man page for stub-first
Some checks failed
ci / build (push) Has been cancelled
Details 
and forward-first options.
 2025-12-24 14:57:44 +01:00
W.C.A. Wijngaards
c0522043f0 - Fix http2 drop handling to clear the postpone_drop state so that
Some checks failed
ci / build (push) Has been cancelled
Details 
other streams on the http2 session are not affected by a drop,
  and can clean up properly if also dropped. Fix http2 send reply
  so that when there is a send failure is does not recurse into
  the mesh functions and also does not drop the connection due to
  the condition of one stream.
 2025-12-03 14:41:10 +01:00
W.C.A. Wijngaards
b858801feb - Fix to remove http2 stream mesh state when mesh new request is
Some checks are pending
ci / build (push) Waiting to run
Details 
dropping the new request.
 2025-12-02 15:31:53 +01:00
W.C.A. Wijngaards
588db09928 - Fix header comment about EDE reference in validator/val_sigcrypt.h.
Some checks are pending
ci / build (push) Waiting to run
Details
2025-12-01 16:04:41 +01:00
W.C.A. Wijngaards
5c66c48a1b - Fix to add EDNS CO flag to testbound and debug message log. 2025-12-01 15:29:41 +01:00
Yorgos Thessalonikefs
83336477c6 - For #1375, there is no DNSTAP environment if it wasn't configured.
Some checks failed
ci / build (push) Has been cancelled
Details
2025-11-28 15:20:21 +01:00
Yorgos Thessalonikefs
e3e5eb66cf - Tag for 1.24.2 release.
Some checks failed
ci / build (push) Has been cancelled
Details 
The repository continues with version 1.24.3.
 2025-11-26 13:54:25 +01:00
W.C.A. Wijngaards
0f43b0ea6c Changelog note for #1375, and lock for lockchecks and ifdef for compile fix.
Some checks failed
ci / build (push) Has been cancelled
Details 
- Merge #1375: Copy DNSTAP changes from daemon to workers after
  fast_reload.
 2025-11-13 15:45:27 +01:00
W.C.A. Wijngaards
a31b9d50e2 Changelog note for #1374
Some checks are pending
ci / build (push) Waiting to run
Details 
- Merge #1374: Mesh reply counters.
  This adds the statistics num.queries.replyaddr_limit and
  requestlist.current.replies.
 2025-11-13 09:34:45 +01:00
Robert Edmonds
fceb4e8585
Mesh reply counters (#1374) 
* Statistics counter for number of queries dropped by limit on reply addresses

Request list entries can be associated with multiple pending "reply
addresses". Basically each request list entry keeps its own list of
clients that should receive the response once the recursion is finished.
This requires keeping allocations around for each client, and there is
a global limit on the number of *additional* reply addresses that can
be allocated. (Each new request list entry seems to get its own initial
reply address which is not counted against the limit.)

This commit adds a statistics counter "num_queries_replyaddr_limit" that
counts the number of incoming client queries that have been dropped due
to the restriction on allocating additional reply addresses. This allows
distinguishing these drops from other kinds of drops.

* Statistics counter for number of mesh reply entries

Request list entries can be associated with multiple pending "reply
addresses". Since there is a limit on the number of additional reply
addresses that can be allocated which can cause incoming queries to be
dropped if exceeded, it would be nice to be able to track this number.

This commit basically exports the mesh_area's internal counter
`num_reply_addrs` as "threadX.requestlist.current.replies" /
"total.requestlist.current.replies".
 2025-11-13 09:33:05 +01:00
W.C.A. Wijngaards
98f4257890 - iana portlist updated.
Some checks are pending
ci / build (push) Waiting to run
Details
2025-11-12 11:49:21 +01:00
W.C.A. Wijngaards
0a15118aff - Fix that when discard timeout drops packet, they are accounted as 
less reply addresses in use in the mesh area.
 2025-11-12 11:49:04 +01:00
W.C.A. Wijngaards
e887a79a92 - Fix configure test for nonstring attribute so that it does not
Some checks failed
ci / build (push) Has been cancelled
Details 
accept when the compiler prints a warning about an unknown
  attribute.
 2025-11-06 15:03:17 +01:00
W.C.A. Wijngaards
f9b9050ab8 - Fix configure test for noreturn attribute so it compiles without 
warning.
 2025-11-06 15:00:08 +01:00
W.C.A. Wijngaards
94735384fd - Fix add comment to worker_handle_request function that explain it. 2025-11-06 14:32:56 +01:00
W.C.A. Wijngaards
5dab0609e5 - Fix dns64 log output to log the default instead of a null string.
Some checks failed
ci / build (push) Has been cancelled
Details
2025-11-04 10:19:03 +01:00
Yorgos Thessalonikefs
024c921dbf - Fix #1366: Infra cache does not work correctly for NAT64, by
Some checks failed
ci / build (push) Has been cancelled
Details 
moving the NAT64 synthesis from the iterator when selecting a target
  address, to the delegation point itself when adding target
  addresses.
 2025-11-01 15:10:27 +01:00
Yorgos Thessalonikefs
56ded934de - Fix #1165, document the possible circular dependency when using
Some checks are pending
ci / build (push) Waiting to run
Details 
host names instead of IP addresses for name servers in stub/forward
  zones and log a warning when spotted in the configuration.
 2025-10-27 14:01:10 +01:00
Yorgos Thessalonikefs
98952f11d1 Changelog entry for #1331:
Some checks are pending
ci / build (push) Waiting to run
Details 
- Merge #1331 from Jitka Plesníková: Replace deprecated $function by
  new $action, for SWIG.
 2025-10-27 09:59:35 +01:00
Yorgos Thessalonikefs
c8dcfc0853 - For #1364, use OPENSSL_VERSION_TEXT instead of OPENSSL_VERSION_NUMBER
Some checks failed
ci / build (push) Has been cancelled
Details 
for part of the configure script. OPENSSL_VERSION_TEXT is more
  consistent across versions.
 2025-10-24 15:43:22 +02:00
Yorgos Thessalonikefs
2bb28fdf12 - Fix unused attribute warning in redis.c when threads are not 
supported.
 2025-10-24 14:44:58 +02:00
Yorgos Thessalonikefs
6ad26909dd - Note Havard Eidnes for his suggestions on the mailing list. 2025-10-24 14:26:08 +02:00
Yorgos Thessalonikefs
9602973c86 - unbound.conf man page updates to include a preview of the section 
clauses and some reformatting around the use of "clause", "option"
  and "attributes".
 2025-10-24 14:23:53 +02:00
Yorgos Thessalonikefs
713b1783d4 - Tag for 1.24.1 release.
Some checks failed
ci / build (push) Has been cancelled
Details 
The repository continues with version 1.24.2.
 2025-10-22 12:49:29 +02:00
Yorgos Thessalonikefs
e06b7eb3f1 Merge branch 'branch-1.24.1' 2025-10-22 12:44:59 +02:00
Yorgos Thessalonikefs
a33f0638e1 - Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu, 
Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua University.
 2025-10-22 10:54:57 +02:00
Wouter Wijngaards
aa21e38b3a
Fix for analysis and ports workflows iOS, Windows (#1361)
Some checks failed
ci / build (push) Has been cancelled
Details 
* - Remove SDK_VERSION and only run failed jobs, echo windows config.log

* Use commented out to fix syntax of ci.

* - Turn off succeeded tests, only link libssp for cross compile, use
no-shared for openssl ios.

* - Remove iPhone armv7s, and iPhoneSimulator i386 from ios ci.
  The lib system does not provide symbols for it on the new macos
  runner.
- Fix to exclude libssp for windows compiles.
 2025-10-15 16:12:39 +02:00
W.C.A. Wijngaards
964848b94a - Fix unbound.conf man page entry for root-hints to say it can 
be used without strongly recommending it.
 2025-10-15 15:40:47 +02:00