W.C.A. Wijngaards
dfa358dc8d
- simdzone-zone-load, remove config.h.in from the repository, it is generated
...
by autoreconf, since that has to be called to initialise the simdzone repo.
Add config.h.in to gitignore.
2025-12-11 08:50:15 +01:00
W.C.A. Wijngaards
6dd48dadc9
- simdzone-zone-load, remove install-sh from the repository, the configure.ac
...
requires it, and it is pulled in with autoreconf -fi, the configure script
checks and warns when it is missing, or if the simdzone module is missing.
Add install-sh to gitignore.
2025-12-10 16:48:40 +01:00
W.C.A. Wijngaards
d34733a69b
- simdzone-zone-load, stat the zonefile, instead of opening it, and then
...
clear the data.
2025-12-10 16:27:33 +01:00
W.C.A. Wijngaards
e1faea02de
- simdzone-zone-load, use cfg for _state struct in az_parse_file_simdzone
...
function.
2025-12-10 16:12:21 +01:00
W.C.A. Wijngaards
fdd0ada3c9
- simdzone-zone-load, document to get git submodule and autoreconf,
...
and add generated files to gitignore.
2025-12-10 16:09:35 +01:00
W.C.A. Wijngaards
ed3606d99d
- simdzone-zone-load, remove configure, aclocal.m4, ltmain.sh, config.guess,
...
and config.sub from the repository. Because of the simdzone submodule,
the repository needs to have autoreconf -fi for it.
2025-12-10 16:00:40 +01:00
W.C.A. Wijngaards
b9df07d8bb
- simdzone-zone-load, fix return value and variable name for rdata.
2025-12-10 11:56:40 +01:00
W.C.A. Wijngaards
ea9c957213
- simdzone-zone-load, remove copy of rdata from simdzone accept path for
...
ordinary zone read.
2025-12-10 11:39:24 +01:00
W.C.A. Wijngaards
828b05c956
- simdzone-zone-load, fix doc unit test to omit simdzone source code warnings.
2025-12-08 15:19:42 +01:00
W.C.A. Wijngaards
3b2a2e2440
Merge branch 'master' into simdzone-zone-load
2025-12-08 14:59:56 +01:00
W.C.A. Wijngaards
0557fdb940
- simdzone-zone-load, use simdzone for auth-zone and rpz zone read.
...
Fix unittest for ZONEMD to have correct digest length for test entry.
2025-12-08 14:51:37 +01:00
W.C.A. Wijngaards
c0522043f0
- Fix http2 drop handling to clear the postpone_drop state so that
...
ci / build (push) Has been cancelled
other streams on the http2 session are not affected by a drop,
and can clean up properly if also dropped. Fix http2 send reply
so that when there is a send failure is does not recurse into
the mesh functions and also does not drop the connection due to
the condition of one stream.
2025-12-03 14:41:10 +01:00
W.C.A. Wijngaards
b858801feb
- Fix to remove http2 stream mesh state when mesh new request is
...
ci / build (push) Waiting to run
dropping the new request.
2025-12-02 15:31:53 +01:00
W.C.A. Wijngaards
588db09928
- Fix header comment about EDE reference in validator/val_sigcrypt.h.
ci / build (push) Waiting to run
2025-12-01 16:04:41 +01:00
W.C.A. Wijngaards
5c66c48a1b
- Fix to add EDNS CO flag to testbound and debug message log.
2025-12-01 15:29:41 +01:00
Yorgos Thessalonikefs
83336477c6
- For #1375 , there is no DNSTAP environment if it wasn't configured.
ci / build (push) Has been cancelled
2025-11-28 15:20:21 +01:00
Yorgos Thessalonikefs
e3e5eb66cf
- Tag for 1.24.2 release.
...
ci / build (push) Has been cancelled
The repository continues with version 1.24.3.
2025-11-26 13:54:25 +01:00
Yorgos Thessalonikefs
00d3b97dbb
Merge branch 'branch-1.24.2'
2025-11-26 13:50:49 +01:00
Yorgos Thessalonikefs
f6269baa60
- Additional fix for CVE-2025-11411 (possible domain hijacking attack),
...
to include YXDOMAIN and non-referral nodata answers in the mitigation as
well, reported by TaoFei Guo from Peking University, Yang Luo and JianJun
Chen from Tsinghua University.
2025-11-26 11:09:40 +01:00
Yorgos Thessalonikefs
19154c6e58
- Set version to 1.24.2.
2025-11-26 10:58:06 +01:00
W.C.A. Wijngaards
0f43b0ea6c
Changelog note for #1375 , and lock for lockchecks and ifdef for compile fix.
...
ci / build (push) Has been cancelled
- Merge #1375 : Copy DNSTAP changes from daemon to workers after
fast_reload.
2025-11-13 15:45:27 +01:00
smeddlep
e6d92f458f
Copy DNSTAP changes from daemon to workers after fast_reload ( #1375 )
...
- On fast_reload, the identity and version strings are always freed and
reallocated as part of dt_apply_cfg(). Add fr_worker_pickup_dnstap_changes()
to copy any changes from daemon to workers.
2025-11-13 15:42:44 +01:00
W.C.A. Wijngaards
a31b9d50e2
Changelog note for #1374
...
ci / build (push) Waiting to run
- Merge #1374 : Mesh reply counters.
This adds the statistics num.queries.replyaddr_limit and
requestlist.current.replies.
2025-11-13 09:34:45 +01:00
Robert Edmonds
fceb4e8585
Mesh reply counters ( #1374 )
...
* Statistics counter for number of queries dropped by limit on reply addresses
Request list entries can be associated with multiple pending "reply
addresses". Basically each request list entry keeps its own list of
clients that should receive the response once the recursion is finished.
This requires keeping allocations around for each client, and there is
a global limit on the number of *additional* reply addresses that can
be allocated. (Each new request list entry seems to get its own initial
reply address which is not counted against the limit.)
This commit adds a statistics counter "num_queries_replyaddr_limit" that
counts the number of incoming client queries that have been dropped due
to the restriction on allocating additional reply addresses. This allows
distinguishing these drops from other kinds of drops.
* Statistics counter for number of mesh reply entries
Request list entries can be associated with multiple pending "reply
addresses". Since there is a limit on the number of additional reply
addresses that can be allocated which can cause incoming queries to be
dropped if exceeded, it would be nice to be able to track this number.
This commit basically exports the mesh_area's internal counter
`num_reply_addrs` as "threadX.requestlist.current.replies" /
"total.requestlist.current.replies".
2025-11-13 09:33:05 +01:00
W.C.A. Wijngaards
98f4257890
- iana portlist updated.
ci / build (push) Waiting to run
2025-11-12 11:49:21 +01:00
W.C.A. Wijngaards
0a15118aff
- Fix that when discard timeout drops packet, they are accounted as
...
less reply addresses in use in the mesh area.
2025-11-12 11:49:04 +01:00
W.C.A. Wijngaards
e887a79a92
- Fix configure test for nonstring attribute so that it does not
...
ci / build (push) Has been cancelled
accept when the compiler prints a warning about an unknown
attribute.
2025-11-06 15:03:17 +01:00
W.C.A. Wijngaards
f9b9050ab8
- Fix configure test for noreturn attribute so it compiles without
...
warning.
2025-11-06 15:00:08 +01:00
W.C.A. Wijngaards
94735384fd
- Fix add comment to worker_handle_request function that explain it.
2025-11-06 14:32:56 +01:00
W.C.A. Wijngaards
5dab0609e5
- Fix dns64 log output to log the default instead of a null string.
ci / build (push) Has been cancelled
2025-11-04 10:19:03 +01:00
Yorgos Thessalonikefs
024c921dbf
- Fix #1366 : Infra cache does not work correctly for NAT64, by
...
ci / build (push) Has been cancelled
moving the NAT64 synthesis from the iterator when selecting a target
address, to the delegation point itself when adding target
addresses.
2025-11-01 15:10:27 +01:00
Yorgos Thessalonikefs
1a808e2978
- Fix typo; spotted by T3rm1.
ci / build (push) Has been cancelled
2025-10-28 14:42:20 +01:00
Yorgos Thessalonikefs
56ded934de
- Fix #1165 , document the possible circular dependency when using
...
ci / build (push) Waiting to run
host names instead of IP addresses for name servers in stub/forward
zones and log a warning when spotted in the configuration.
2025-10-27 14:01:10 +01:00
Yorgos Thessalonikefs
98952f11d1
Changelog entry for #1331 :
...
ci / build (push) Waiting to run
- Merge #1331 from Jitka Plesníková: Replace deprecated $function by
new $action, for SWIG.
2025-10-27 09:59:35 +01:00
Yorgos Thessalonikefs
cb4b3de62f
Merge pull request #1331 from jplesnik/master
...
Replace deprecated $function by new $action
2025-10-27 09:57:59 +01:00
Yorgos Thessalonikefs
c8dcfc0853
- For #1364 , use OPENSSL_VERSION_TEXT instead of OPENSSL_VERSION_NUMBER
...
ci / build (push) Has been cancelled
for part of the configure script. OPENSSL_VERSION_TEXT is more
consistent across versions.
2025-10-24 15:43:22 +02:00
Yorgos Thessalonikefs
2bb28fdf12
- Fix unused attribute warning in redis.c when threads are not
...
supported.
2025-10-24 14:44:58 +02:00
Yorgos Thessalonikefs
6ad26909dd
- Note Havard Eidnes for his suggestions on the mailing list.
2025-10-24 14:26:08 +02:00
Yorgos Thessalonikefs
9602973c86
- unbound.conf man page updates to include a preview of the section
...
clauses and some reformatting around the use of "clause", "option"
and "attributes".
2025-10-24 14:23:53 +02:00
Yorgos Thessalonikefs
713b1783d4
- Tag for 1.24.1 release.
...
ci / build (push) Has been cancelled
The repository continues with version 1.24.2.
2025-10-22 12:49:29 +02:00
Yorgos Thessalonikefs
e06b7eb3f1
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
Yorgos Thessalonikefs
a33f0638e1
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
...
Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua University.
2025-10-22 10:54:57 +02:00
Yorgos Thessalonikefs
bbeee42e25
- Set version to 1.24.1.
2025-10-22 10:50:18 +02:00
Yorgos Thessalonikefs
1cb9595a42
- Update the unbound.conf online man page link and some text
...
ci / build (push) Has been cancelled
reformatting in README.md.
2025-10-20 14:34:40 +02:00
W.C.A. Wijngaards
fbed3f30b2
- simdzone-zone-load, fix ci, enable platforms.
2025-10-17 16:44:03 +02:00
W.C.A. Wijngaards
2001d9fd15
- simdzone-zone-load, ci change.
2025-10-17 16:12:39 +02:00
W.C.A. Wijngaards
b3be0fe943
- simdzone-zone-load, update simdzone version.
2025-10-17 16:11:24 +02:00
W.C.A. Wijngaards
f04ee9767e
- simdzone-zone-load, ci change.
2025-10-17 15:47:32 +02:00
W.C.A. Wijngaards
899ad30ad9
- simdzone-zone-load, ci change.
2025-10-17 15:20:40 +02:00
W.C.A. Wijngaards
6c501b9aa2
- simdzone-zone-load, ci change to fix windows.
2025-10-17 14:51:57 +02:00