Commit graph

  • 9841b9a682
    Merge da001489be into 8e04d04949 Yorgos Thessalonikefs 2026-02-17 18:10:05 +0100
  • 8e04d04949 - For #1405: local-zone always_refuse also blocks queries of type DS. master W.C.A. Wijngaards 2026-02-17 15:36:08 +0100
  • c5627dbd52 - Fix to remove unused conditional from cookie timestamp at worker env. W.C.A. Wijngaards 2026-02-17 11:15:15 +0100
  • 4f9055bf52
    Merge 2805bfd250 into 014ed9c5ff Russell McConnachie 2026-02-17 09:11:06 +0100
  • 014ed9c5ff - Fix that cachedb aggressive negative responses have the RA flag set. W.C.A. Wijngaards 2026-02-16 16:35:37 +0100
  • da001489be
    Review comment for checking out of memory condition features/tls-protocols Yorgos Thessalonikefs 2026-02-16 16:28:58 +0100
  • 66294a3763
    Merge 2ffc17e826 into 16e1e6d375 Willem Toorop 2026-02-16 15:55:31 +0100
  • 16e1e6d375 - Fix #1404: Priming the root key fails after loading ipfire.org RPZ zones. Fixed by including the ZONEMD RRtype in the list of types to ignore for RPZ zones. Analysis and patch provided by ummeegge. Yorgos Thessalonikefs 2026-02-16 13:37:19 +0100
  • 5656bbb441 - Introduce new 'tls-protocols' configuration option that specifies which of the supported TLS protocols will be used. This change invalidates some previous changes: - TLSv1.2 is again enabled by default, but can be selectively turned off if desired (related to #1303). - The biefly introduced (not yet released) 'tls-use-system-versions' configuration option, that addressed #1346, is reverted in favor of 'tls-protocols'. - The briefly introduced (not yet released) '--enable-system-tls' configure option, related to #1401, is no longer needed with the new option and the current default. Yorgos Thessalonikefs 2026-02-13 17:17:55 +0100
  • feecbcda24
    Merge bc31a34416 into 1a9a4e4ca1 Toria 2026-02-14 23:39:15 +0100
  • c95698e70b
    Merge 18fec256b7 into 1a9a4e4ca1 Yorgos Thessalonikefs 2026-02-13 15:58:42 +0530
  • ba68fc6853
    Merge f7c180b4ed into 1a9a4e4ca1 J. Dekker 2026-02-12 15:47:09 +0530
  • 76bd9abf2b
    Merge 1c4cc1f944 into 1a9a4e4ca1 rezky_nightky 2026-02-11 20:57:05 +0000
  • 1a9a4e4ca1 - Fix #1403: Inconsistency between do-nat64 and do-not-query-address during retries. W.C.A. Wijngaards 2026-02-11 16:01:30 +0100
  • f7f638e18f - Update generated man pages. W.C.A. Wijngaards 2026-02-09 16:11:17 +0100
  • c956aea93d Changelog note and documentation for #1401. - Merge #1401: Add a new build-time option for system TLS. The --enable-system-tls flag enables the tls-use-system-policy-versions setting by default. W.C.A. Wijngaards 2026-02-09 16:05:28 +0100
  • 4556a4f490
    Add a new build-time option for system TLS (#1401) Petr Menšík 2026-02-09 15:57:16 +0100
  • 5f0b4c0cb0 Add a new build-time option for system TLS Petr Menšík 2026-02-09 15:40:51 +0100
  • 19751ec179 - add-prometheus-metrics, fix testbound link for metrics functions. add-prometheus-metrics W.C.A. Wijngaards 2026-02-06 17:05:45 +0100
  • 6468917fb8 Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-02-06 16:26:38 +0100
  • 747ce6ba47 - add-prometheus-metrics, print per-thread stats and the summed totals. W.C.A. Wijngaards 2026-02-06 16:26:17 +0100
  • 1cdddf0fe9 - Fix #1389: [FR] replacement with ECC-GOST12 according to RFC9558. Patch contributed by Igor V. Ruzanov, available in contrib/gost12.patch. Yorgos Thessalonikefs 2026-02-06 14:39:23 +0100
  • 18fec256b7 - Support pthread_setname_np, and variants, to set the name on spawned threads for easier debugging/monitoring. features/pthread-setname Yorgos Thessalonikefs 2026-02-06 14:15:32 +0100
  • 3875759b34
    Merge 4b8686f1f1 into 567c70dada TomasKorbar 2026-02-06 16:48:45 +0800
  • 9b319396d1
    Merge d725d94793 into 567c70dada Wouter Wijngaards 2026-02-05 17:12:11 +0100
  • 567c70dada Fix attribution of fix. W.C.A. Wijngaards 2026-02-04 14:17:56 +0100
  • 8b4b2a88f7 - Fix local privilege escalation on Windows. Thanks to Hao Huang for the report. The OpenSSL init calls are set to not load the openssl.cnf file when compiled for Windows. W.C.A. Wijngaards 2026-02-04 11:54:11 +0100
  • 70bb61a3b3
    Merge 3212426574 into faf40c97fc R. Christian McDonald 2026-02-03 20:57:23 +0530
  • 831a805cd4 Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-02-03 15:22:08 +0100
  • faf40c97fc - Eagerly remove .skip mark files in between mini_tdir.sh runs in case there has been a change on the environment. Yorgos Thessalonikefs 2026-02-03 15:07:37 +0100
  • a00cac5094 - add-prometheus-metrics, testbound implementation, and if metrics are disabled there is no http service created. W.C.A. Wijngaards 2026-02-03 12:01:36 +0100
  • 705d180096 - add-prometheus-metrics, respect stat-cumulative option, print num queries. W.C.A. Wijngaards 2026-02-03 11:48:55 +0100
  • ece48de2bc - add-prometheus-metrics, add metrics-enable, metrics-interface, metrics-port, and metrics-path options. W.C.A. Wijngaards 2026-01-30 16:20:23 +0100
  • 90c2ca4c55 - add-prometheus-metrics, adjust configure.ac, Makefile.in and add daemon/metrics.c and daemon/metrics.h for statistics in prometheus metrics. W.C.A. Wijngaards 2026-01-30 09:38:00 +0100
  • 26052ea3ef
    Merge 9735e34f89 into d725d94793 Wouter Wijngaards 2026-01-29 08:13:48 +0000
  • d725d94793 Merge branch 'master' into simdzone-zone-load simdzone-zone-load W.C.A. Wijngaards 2026-01-29 09:06:38 +0100
  • 9735e34f89 - rpz-zone-load, fix comment for the rrset_insert_rr_wol function. rpz-zone-load W.C.A. Wijngaards 2026-01-28 14:35:40 +0100
  • ac9ca8c5af - rpz-zone-load, fix signedness of name character comparisons. W.C.A. Wijngaards 2026-01-28 14:13:13 +0100
  • 1d18f34c79 - rpz-zone-load, handle alloc failures from dname_rdata_to_str. W.C.A. Wijngaards 2026-01-28 13:58:09 +0100
  • 17f64b818e - rpz-zone-load, optimise canonical name compare tolower calls. W.C.A. Wijngaards 2026-01-28 12:47:03 +0100
  • 9cf1344960 Merge branch 'master' into rpz-zone-load W.C.A. Wijngaards 2026-01-28 11:50:45 +0100
  • 098200ba5a - rpz-zone-load, optimise rpz_insert_local_zones_trigger to remove second local zones tree lookup for non local data cases. W.C.A. Wijngaards 2026-01-28 11:48:53 +0100
  • daa016e3e4 - Add test for allow-notify with a host name. W.C.A. Wijngaards 2026-01-27 13:49:33 +0100
  • 039f69e735 - Fix to not skip allow-notify hostname lookups when there are only urls. W.C.A. Wijngaards 2026-01-26 16:16:38 +0100
  • b39009e487 Merge branch 'master' of github.com:NLnetLabs/unbound W.C.A. Wijngaards 2026-01-26 15:17:26 +0100
  • 933769ee73 - Fix that allow-notify entries with hostnames are copied after IPv4 and IPv6 lookup. W.C.A. Wijngaards 2026-01-26 15:16:43 +0100
  • 57bff79627 - Update generated man pages. Yorgos Thessalonikefs 2026-01-23 18:04:25 +0100
  • 1b5559d534 Changelog entry for #1396: - Merge #1396: Log Linux thread ID. - On Linux systems log the system-wide unique thread ID instead of Unbound's internal thread counter. - Introduce the 'log-thread-id' configuration option to manage logging the system-wide Linux thread ID for easier debugging with system tools. Yorgos Thessalonikefs 2026-01-23 17:46:14 +0100
  • 9d271c5343
    Merge pull request #1396 from NLnetLabs/features/thread-id Yorgos Thessalonikefs 2026-01-23 17:42:30 +0100
  • 74cc49e6c4 - Introduce the 'log-thread-id' configuration option to manage logging the system-wide Linux thread ID for easier debugging with system tools. Yorgos Thessalonikefs 2026-01-23 17:15:14 +0100
  • d414ebf0c7 - On Linux systems log the system-wide unique thread ID instead of Unbound's internal thread counter. Yorgos Thessalonikefs 2026-01-23 17:08:55 +0100
  • 08a2734e91 - rpz-zone-load, rpz load does not pass unwanted string, and rr data. W.C.A. Wijngaards 2026-01-23 16:40:52 +0100
  • 14264c9ed9 - rpz-zone-load, authzone changes to not spool data into rr from simdzone rdata, for rpz load. W.C.A. Wijngaards 2026-01-23 15:21:26 +0100
  • 33142ac743
    Merge feb101bc70 into 9b123d1b78 David Gwynne 2026-01-23 08:25:33 -0500
  • 76f0bb8ba2 - simdzone-zone-load, use_simdzone variable to switch sldns and simdzone parse. W.C.A. Wijngaards 2026-01-23 11:33:27 +0100
  • 051fef8456 - simdzone-zone-load, update simdzone version. W.C.A. Wijngaards 2026-01-22 14:46:07 +0100
  • b8c96862cb Merge branch 'master' into simdzone-zone-load W.C.A. Wijngaards 2026-01-22 14:20:08 +0100
  • 9b123d1b78 - Fix http test tool petal to not print errors when there is no error. W.C.A. Wijngaards 2026-01-22 14:19:35 +0100
  • 37b71261a2 - Fix that fast reload copies the iter_scrub_ns, iter_scrub_cname and max_global_quota options. W.C.A. Wijngaards 2026-01-22 09:42:56 +0100
  • 64009d2329
    Merge 34d0b93c71 into 4426db4d3d Yorgos Thessalonikefs 2026-01-22 06:01:54 +0530
  • 1c4cc1f944
    fix: cross typos, see detail below rezky_nightky 2026-01-22 01:24:16 +0700
  • d99a4375bf Merge branch 'master' into simdzone-zone-load W.C.A. Wijngaards 2026-01-21 14:55:50 +0100
  • 4426db4d3d - Merge #1388: QNX Porting support for unbound. W.C.A. Wijngaards 2026-01-21 13:13:01 +0100
  • fe10bc7682
    QNX Porting support for unbound branch-1.24.1 (#1388) nnarayanamurthy 2026-01-21 17:42:13 +0530
  • 67d2eae28c - Merge #1392: Include "V" (version) option in synopsis. W.C.A. Wijngaards 2026-01-19 09:09:47 +0100
  • 9010a7075e
    Include "V" (version) option in synopsis (#1392) David H. Gutteridge 2026-01-19 03:09:12 -0500
  • 4fe49f1fdc
    Include "V" (version) option in synopsis David H. Gutteridge 2026-01-16 17:45:56 -0500
  • 5582fbc443 - simdzone-zone-load, update simdzone version. W.C.A. Wijngaards 2026-01-16 14:08:34 +0100
  • a72374000e - simdzone-zone-load, fix to use chrootdir adjustment when dealing with $INCLUDE in a zonefile read. W.C.A. Wijngaards 2026-01-16 13:46:03 +0100
  • cea8f493b2 - simdzone-zone-load, update simdzone version. W.C.A. Wijngaards 2026-01-16 13:43:56 +0100
  • 285b5aa461 - sidzone-zone-load, set no_includes option for http transferred files. W.C.A. Wijngaards 2026-01-16 13:43:16 +0100
  • cc6dbc9f38 - Fix documentation for requestlist.overwritten and requestlist.exceeded, it explains which query was dropped. W.C.A. Wijngaards 2026-01-15 09:35:04 +0100
  • a50dd4e407 - simdzone-zone-load, implement that the auth http transferred zone files are parsed with simdzone parse from callback. W.C.A. Wijngaards 2026-01-13 16:25:46 +0100
  • 966801a984 - simdzone-zone-load, move sldns auth https download parse to another routine. W.C.A. Wijngaards 2026-01-13 15:35:17 +0100
  • 6084171db7 Merge branch 'master' into simdzone-zone-load W.C.A. Wijngaards 2026-01-13 15:21:58 +0100
  • 4baa2ccc9c - simdzone-zone-load, update simdzone version. W.C.A. Wijngaards 2026-01-13 15:21:38 +0100
  • 3682b6cd07
    Merge fd4af23351 into 4198343dbe zebop117 2026-01-12 23:40:58 -0800
  • bfbf5cbd5a
    Merge 1aa8519b39 into 4198343dbe R. Christian McDonald 2026-01-11 23:40:16 -0800
  • 4198343dbe Compile fixup for #1381. W.C.A. Wijngaards 2026-01-08 14:19:06 +0100
  • 08600d68e8 Changelog note for #1381, and man page explanation. - Merge #1381: Do not initialize quic_table unless it is enabled. W.C.A. Wijngaards 2026-01-08 14:16:54 +0100
  • 18e098285e
    Do not initialize quic_table unless it is enabled (#1381) Petr Menšík 2026-01-08 14:12:32 +0100
  • a3abee81ec
    Merge c834ee635c into f1b35bab4b Willem Toorop 2026-01-07 16:03:31 +0100
  • 0f82636411
    Merge 6f54f6fefc into f1b35bab4b Martine Lenders 2026-01-06 20:37:38 +0100
  • f1b35bab4b Changelog entry for #1391: - Merge #1391 from Götz Görisch: Fix documentation to adhere to RFC5952. Yorgos Thessalonikefs 2026-01-06 18:21:34 +0100
  • 84ed77238d
    Merge pull request #1391 from GoetzGoerisch/docs Yorgos Thessalonikefs 2026-01-06 18:19:47 +0100
  • adb0374a4d Fix documentation to adhere to RFC 5952 Goetz Goerisch 2026-01-06 16:10:37 +0100
  • b0b634558b - Fix edns subnet, that scope zero queries, when there is a subquery without subnet, and the forward-no-cache or stub-no-cache option is set, it is not stored in cache due to the forward or stub option. This has the changelog entry and test. W.C.A. Wijngaards 2026-01-06 09:33:00 +0100
  • 8546247292 - Fix edns subnet, that scope zero queries, when there is a subquery without subnet, and the forward-no-cache or stub-no-cache option is set, it is not stored in cache due to the forward or stub option. W.C.A. Wijngaards 2026-01-06 09:32:21 +0100
  • 3ef24b76b5
    Merge 7e9d9b03a4 into 44659cb3bf Petr Menšík 2026-01-04 07:11:08 +0100
  • 44659cb3bf - Use the same EDE removal logic when encoding errors as when encoding replies. Yorgos Thessalonikefs 2025-12-31 16:22:15 +0100
  • a1ac2d0252 - Update the unbound-anchor man page to note write permissions of the generated file if it is to be used with Unbound's auto-trust-anchor-file option. Yorgos Thessalonikefs 2025-12-31 14:05:42 +0100
  • bc31a34416
    Change need for sudo, to use systemd unit ability to run as user:group natively (safer than needing sudoers access AND config). Toria 2025-12-30 20:37:25 +0000
  • 85a0ef858a
    Refactor roothints-sig as well. Toria 2025-12-30 20:02:28 +0000
  • 1e48fa4a90
    Move units to their own folder. Comment out additional units in unbound.service.in. Also add reference to icannbundle.pem to unbound-anchor.service.in. Toria 2025-12-30 18:18:09 +0000
  • 5c7a26b615 - Mark "THROWAWAY" and "(DNSSEC) LAME" responses clearly as Unbound's categorization in the log output. Yorgos Thessalonikefs 2025-12-30 13:15:37 +0100
  • 684dcefc40
    Merge f2a2d9c1e9 into 09d352b917 Paul Menzel 2025-12-29 12:25:21 +0100
  • d75c6cb907
    Merge d42138976d into 09d352b917 Ryan R Sundberg 2025-12-25 03:29:04 +0000
  • 09d352b917 - More specific wording in the unbound.conf man page for stub-first and forward-first options. Yorgos Thessalonikefs 2025-12-24 14:57:44 +0100
  • de5ce0efa6
    Merge 7ee8ba3794 into c0522043f0 WolverinDEV 2025-12-19 16:17:13 +0800
  • 3b0c2385e3
    Merge 98b0e6f80a into c0522043f0 张欣接 2025-12-16 20:47:52 -0400