mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-20 23:00:56 -05:00
218f5cfc92
* - fast-reload, add unbound-control fast_reload * - fast-reload, make a thread to service the unbound-control command. * - fast-reload, communication sockets for information transfer. * - fast-reload, fix compile for unbound-dnstap-socket. * - fast-reload, set nonblocking communication to keep the server thread responding to DNS requests. * - fast-reload, poll routine to test for readiness, timeout fails connection. * - fast-reload, detect loop in sock_poll_timeout routine. * - fast-reload, send done and exited notification. * - fast-reload, defines for constants in ipc. * - fast-reload, ipc socket recv and send resists partial reads and writes and can continue byte by byte. Also it can continue after an interrupt. * - fast-reload, send exit command to thread when done. * - fast-reload, output strings for client on string list. * - fast-reload, add newline to terminal output. * - fast-reload, send client string to remote client. * - fast-reload, better debug output. * - fast-reload, print queue structure, for output to the remote client. * - fast-reload, move print items to print queue from fast_reload_thread struct. * - fast-reload, keep list of pending print queue items in daemon struct. * - fast-reload, comment explains in_list for printq to print remainder. * - fast-reload, unit test testdata/fast_reload_thread.tdir that tests the thread output. * - fast-reload, fix test link for fast_reload_printq_list_delete function. * - fast-reload, reread config file from disk. * - fast-reload, unshare forwards, making the structure locked, with an rwlock. * - fast-reload, for nonthreaded, the unbound-control commands forward, forward_add and forward_delete should be distributed to other processes, but when threaded, they should not be distributed to other threads because the structure is not thread specific any more. * - fast-reload, unshared stub hints, making the structure locked, with an rwlock. * - fast-reload, helpful comments for hints lookup function return value. * - fast-reload, fix bug in fast reload printout, the strlist appendlist routine, and printout time statistics after the reload is done. * - fast-reload, keep track of reloadtime and deletestime and print them. * - fast-reload, keep track of constructtime and print it. * - fast-reload, construct new items. * - fast-reload, better comment. * - fast-reload, reload the config and swap trees for forwards and stub hints. * - fast-reload, in forwards_swap_tree set protection of trees with locks. * - fast-reload, in hints_swap_tree also swap the node count of the trees. * - fast-reload, reload ipc to stop and start threads. * - fast-reload, unused forward declarations removed. * - fast-reload, unit test that fast reload works with forwards and stubs. * - fast-reload, fix clang analyzer warnings. * - fast-reload, small documentation entry in unbound-control -h output. * - fast-reload, printout memory use by fast reload, in bytes. * - fast-reload, compile without threads. * - fast-reload, document fast_reload in man page. * - fast-reload, print ok when done successfully. * - fast-reload, option for fast-reload commandline, +v verbosity option, with timing and memory use output. * - fast-reload, option for fast-reload commandline, +p does not pause threads. * - fast-reload, option for fast-reload commandline, +d drops mesh queries. * - fast-reload, fix to poll every thread with nopause to make certain that resources are not held by the threads and can be deleted. * - fast-reload, fix to use atomic store for config variables with nopause. * - fast-reload, reload views. * - fast-reload, when tag defines are different, it drops the queries. * - fast-reload, fix tag define check. * - fast-reload, document that tag change causes drop of queries. * - fast-reload, fix space in documentation man page. * - fast-reload, copy respip client information to query state, put views tree in module env for lookup. * - fast-reload, nicer respip view comparison. * - fast-reload, respip global set is in module env. * - fast-reload, document that respip_client_info acl info is copied. * - fast-reload, reload the respip_set. * - fast-reload, document no pause and pick up of use_response_ip boolean. * - fast-reload, fix test compile. * - fast-reload, reload local zones. * Update locking management for iter_fwd and iter_hints methods. (#1054) fast reload, move most of the locking management to iter_fwd and iter_hints methods. The caller still has the ability to handle its own locking, if desired, for atomic operations on sets of different structs. Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com> * - fast-reload, reload access-control. * - fast-reload, reload access control interface, such as interface-action. * - fast-reload, reload tcp-connection-limit. * - fast-reload, improve comments on acl_list and tcl_list swap tree. * - fast-reload, fixup references to old tcp connection limits in open tcp connections. * - fast-reload, fixup to clean tcp connection also for different linked order. * - fast-reload, if no tcp connection limits existed, no need to remove references for that. * - fast-reload, document more options that work and do not work. * - fast-reload, reload auth_zone and rpz data. * - fast-reload, fix auth_zones_get_mem. * - fast-reload, fix compilation of testbound for the new comm_timer_get_mem reference in remote control. * - fast-reload, change use_rpz with reload. * - fast-reload, list changes in auth zones and stop zonemd callbacks for deleted auth zones. * - fast-reload, note xtree is not swapped, and why it is not swapped. * - fast-reload, for added auth zones, pick up zone transfer and zonemd tasks. * - fast-reload, unlock xfr when done with transfer pick up. * - fast-reload, unlock z when picking up the xfr for it during transfer task pick up. * - fast-reload, pick up task changes for added, deleted and modified auth zones. * - fast-reload, remove xfr of auth zone deletion without tasks. * - fast-reload, pick up zone transfer config. * - fast-reload, the main worker thread picks up the transfer tasks and also performs setup of the xfer struct. * - fast-reload, keep writelock on newzone when auth zone changes. * - fast-reload, change cachedb_enabled setting. * - fast-reload, pick up edns-strings config. * - fast-reload, note that settings are not updated. * - fast-reload, pick up dnstap config. * - fast-reload, dnstap options that need to be loaded without +p. * - fast-reload, fix auth zone reload * - fast-reload, remove debug for auth zone test. * - fast-reload, fix auth zone reload with zone transfer. * - fast-reload, fix auth zone reload lock order. * - fast-reload, remove debug from fast reload test. * - fast-reload, remove unused function. * - fast-reload, fix the worker trust anchor probe timer lock acquisition in the probe answer callback routine for trust anchor probes. * - fast-reload, reload trust anchors. * - fast-reload, fix trust anchor reload lock on autr global data and test for trust anchor reload. * - fast-reload, adjust cache sizes. * - fast-reload, reload cache sizes when changed. * - fast-reload, reload validator env changes. * - fast-reload, reload mesh changes. * - fast-reload, check for incompatible changes. * - fast-reload, improve error text for incompatible change. * - fast-reload, fix check config option compatibility. * - fast-reload, improve error text for nopause change. * - fast-reload, fix spelling of incompatible options. * - fast-reload, reload target-fetch-policy, outbound-msg-retry, max-sent-count and max-query-restarts. * - fast-reload, check nopause config change for target-fetch-policy. * - fast-reload, reload do-not-query-address, private-address and capt-exempt. * - fast-reload, check nopause config change for do-not-query-address, private-address and capt-exempt. * - fast-reload, check fast reload not possible due to interface and outgoing-interface changes. * - fast-reload, reload nat64 settings. * - fast-reload, reload settings stored in the infra structure. * - fast-reload, fix modstack lookup and remove outgoing-range check. * - fast-reload, more explanation for config parse failure. * - fast-reload, reload worker outside network changes. * - fast-reload, detect incompatible changes in network settings. * fast-reload, commit test files. * - fast-reload, fix warnings for call types in windows compile. * - fast-reload, fix warnings and comm_point_internal for tcp wouldblock calls. * - fast-reload, extend lock checks for repeat thread ids. * - fast-reload, additional test cases, cache change and tag changes. * - fast-reload, fix documentation for auth_zone_verify_zonemd_with_key. * - fast-reload, fix copy_cfg type casts and memory leak on config parse failure. * - fast-reload, fix use of WSAPoll. * Review comments for the fast reload feature (#1259) * - fast-reload review, respip set can be null from a view. * - fast-reload review, typos. * - fast-reload review, keep clang static analyzer happy. * - fast-reload review, don't forget to copy tag_actions. * - fast-reload review, less indentation. * - fast-reload review, don't leak respip_actions when reloading. * - fast-reload review, protect NULL pointer dereference in get_mem functions. * - fast-reload review, add fast_reload_most_options.tdir to test most options with high verbosity when fast reloading. * - fast-reload review, don't skip new line on long error printouts. * - fast-reload review, typo. * - fast-reload review, use new_z for consistency. * - fast-reload review, nit for unlock ordering to make eye comparison with the lock counterpart easier. * - fast-reload review, in case of error the sockets are already closed. * - fast-reload review, identation. * - fast-reload review, add static keywords. * - fast-reload review, update unbound-control usage text. * - fast-reload review, updates to the man page. * - fast-reload, the fast-reload command is experimental. * - fast-reload, fix compile of doqclient for fast reload functions. * Changelog comment for #1042 - Merge #1042: Fast Reload. The unbound-control fast_reload is added. It reads changed config in a thread, then only briefly pauses the service threads, that keep running. DNS service is only interrupted briefly, less than a second. --------- Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
320 lines
7.6 KiB
Text
320 lines
7.6 KiB
Text
# #-- fast_reload_fwd.test --#
|
|
# source the master var file when it's there
|
|
[ -f ../.tpkg.var.master ] && source ../.tpkg.var.master
|
|
# use .tpkg.var.test for in test variable passing
|
|
[ -f .tpkg.var.test ] && source .tpkg.var.test
|
|
|
|
PRE="../.."
|
|
. ../common.sh
|
|
|
|
echo "> unbound-control status"
|
|
$PRE/unbound-control -c ub.conf status
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
else
|
|
echo "exit value: OK"
|
|
fi
|
|
|
|
# test that the forwards and stubs point to the right upstream.
|
|
for x in example1.org example2.org example3.org stub1.org stub2.org stub3.org; do
|
|
echo ""
|
|
echo "dig www.$x [upstream is NS1]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.1" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
for x in example4.org example5.org example6.org stub4.org stub5.org stub6.org; do
|
|
echo ""
|
|
echo "dig www.$x [upstream is NS2]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.2" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
for x in auth1.org auth2.org auth3.org auth5.org auth6.org auth7.org; do
|
|
echo ""
|
|
echo "dig www.$x [auth is 1.2.3.4]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.4" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
echo ""
|
|
echo "> list_insecure"
|
|
$PRE/unbound-control -c ub.conf list_insecure 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
fi
|
|
if grep "insec1.ta1.example.com" output >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "insec2.ta1.example.com" output >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "insec3.ta1.example.com" output >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
echo ""
|
|
echo "> trustanchor.unbound"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT trustanchor.unbound CH TXT 2>&1 | tee outfile
|
|
if grep "ta1.example.com. 55566" outfile >/dev/null; then :; else
|
|
echo "wrong output ta1"
|
|
exit 1
|
|
fi
|
|
if grep "ta2.example.com. 55566" outfile >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "ta3.example.com. 55566" outfile >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
echo "> replace config file ub.conf"
|
|
mv ub.conf ub.conf.orig
|
|
mv ub.conf2 ub.conf
|
|
echo ""
|
|
echo "> unbound-control fast_reload"
|
|
$PRE/unbound-control -c ub.conf fast_reload +vv 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
else
|
|
echo "exit value: OK"
|
|
fi
|
|
|
|
# for the previous digs to www.x the cached value should remain the same
|
|
# but for new lookups, to www2.x the new upstream should be used.
|
|
for x in example1.org example2.org example3.org stub1.org stub2.org stub3.org; do
|
|
echo ""
|
|
echo "dig www.$x [upstream is NS1]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.1" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
for x in example4.org example5.org example6.org stub4.org stub5.org stub6.org; do
|
|
echo ""
|
|
echo "dig www.$x [upstream is NS2]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.2" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# new lookups for www2 go to the upstream.
|
|
for x in example2.org example4.org example6.org stub2.org stub4.org stub6.org; do
|
|
echo ""
|
|
echo "dig www2.$x [upstream is NS1]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www2.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.1" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www2.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
for x in example1.org example3.org example5.org stub1.org stub3.org stub5.org; do
|
|
echo ""
|
|
echo "dig www2.$x [upstream is NS2]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www2.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.2" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www2.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# auth is unchanged, or at ns1.
|
|
for x in auth1.org auth5.org auth8.org; do
|
|
echo ""
|
|
echo "dig www.$x [auth is 1.2.3.4]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.4" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# deleted auth
|
|
for x in auth2.org auth6.org; do
|
|
echo ""
|
|
echo "dig www.$x [auth is deleted]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "SERVFAIL" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# changed and added auth
|
|
for x in auth3.org auth4.org auth7.org; do
|
|
echo ""
|
|
echo "dig www.$x [auth is 1.2.3.5]"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT www.$x A 2>&1 | tee outfile
|
|
if grep "1.2.3.5" outfile; then
|
|
echo "response OK"
|
|
else
|
|
echo "www.$x got the wrong answer"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
echo ""
|
|
echo "> list_insecure"
|
|
$PRE/unbound-control -c ub.conf list_insecure 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
fi
|
|
if grep "insec1.ta1.example.com" output >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "insec2.ta1.example.com" output >/dev/null; then
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "insec3.ta1.example.com" output >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "insec4.ta1.example.com" output >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
echo ""
|
|
echo "> trustanchor.unbound"
|
|
dig @127.0.0.1 -p $UNBOUND_PORT trustanchor.unbound CH TXT 2>&1 | tee outfile
|
|
if grep "ta1.example.com. 55566" outfile >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "ta2.example.com. 55566" outfile >/dev/null; then
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "ta3.example.com. 55566" outfile >/dev/null; then
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "ta3.example.com. 55567" outfile >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
if grep "ta4.example.com. 55566" outfile >/dev/null; then :; else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
echo "> test change: add tag1 tag2"
|
|
cp ub.conf ub.conf.orig2
|
|
echo "server:" >> ub.conf
|
|
echo ' define-tag: "tag1 tag2"' >> ub.conf
|
|
echo "> unbound-control fast_reload"
|
|
$PRE/unbound-control -c ub.conf fast_reload +vv 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
else
|
|
echo "exit value: OK"
|
|
fi
|
|
|
|
echo ""
|
|
echo "> test change: change to tag2 tag3"
|
|
cp ub.conf.orig2 ub.conf
|
|
echo "server:" >> ub.conf
|
|
echo ' define-tag: "tag2 tag3"' >> ub.conf
|
|
echo "> unbound-control fast_reload"
|
|
$PRE/unbound-control -c ub.conf fast_reload +vv 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
else
|
|
echo "exit value: OK"
|
|
fi
|
|
if grep "tags have changed" output; then
|
|
echo "output OK"
|
|
else
|
|
echo "wrong output"
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
echo "> test change: change cache size"
|
|
cp ub.conf.orig2 ub.conf
|
|
echo "server:" >> ub.conf
|
|
echo " msg-cache-size: 10m" >> ub.conf
|
|
echo " rrset-cache-size: 5m" >> ub.conf
|
|
echo "> unbound-control fast_reload"
|
|
$PRE/unbound-control -c ub.conf fast_reload +vv 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
else
|
|
echo "exit value: OK"
|
|
fi
|
|
|
|
echo ""
|
|
echo "> test change: change nothing, +p too"
|
|
$PRE/unbound-control -c ub.conf fast_reload +vv +p 2>&1 | tee output
|
|
if test $? -ne 0; then
|
|
echo "wrong exit value."
|
|
exit 1
|
|
else
|
|
echo "exit value: OK"
|
|
fi
|
|
|
|
echo ""
|
|
echo "> stop unbound"
|
|
kill_pid $UNBOUND_PID
|
|
if test -f unbound.pid; then sleep 1; fi
|
|
if test -f unbound.pid; then sleep 1; fi
|
|
if test -f unbound.pid; then sleep 1; fi
|
|
if test -f unbound.pid; then echo "unbound.pid still there"; fi
|
|
# check the locks.
|
|
function locktest() {
|
|
if test -x $PRE/lock-verify -a -f ublocktrace.0; then
|
|
$PRE/lock-verify ublocktrace.*
|
|
if test $? -ne 0; then
|
|
echo "lock-verify error"
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
locktest
|
|
|
|
exit 0
|