mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-26 09:39:43 -05:00
a616437338
* v1 EDER poc * remove superfluous edns_list_get_option function * create an EDER configurable * Hackathon 114 * Fixes for version -04 * Generated configparser and configlexer are not versioned in master anymore * Remove NOERROR DNS Error Reporting; not part of final RFC. * Use assigned IANA EDNS0 Option Code for Report-Channel. * Fix buffer protection and agent domain validity * Use DNS Error Reporting instead of the eder nickname * Update documentation. * Fix typo. * Bail out early if ede is not present. * Forget previous EDNS options from upstream; this is what was implicitly happening but not deterministacally. * Don't report LDNS_EDE_OTHER and bail early if there is no reporting agent. * Only do DNS error reporting when a client asked for something that went wrong. * Add an error reporting agent in the parent that should be ignored. * review feedback. * fixup for fast reload * Add 'num.dns_error_reports' to stats and test for it. --------- Co-authored-by: TCY16 <tom@nlnetlabs.nl> Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
44 lines
1.1 KiB
Text
44 lines
1.1 KiB
Text
server:
|
|
verbosity: 5
|
|
num-threads: 1
|
|
interface: 127.0.0.1
|
|
port: @PORT@
|
|
use-syslog: no
|
|
directory: ""
|
|
pidfile: "unbound.pid"
|
|
chroot: ""
|
|
username: ""
|
|
do-not-query-localhost: no
|
|
extended-statistics: yes
|
|
identity: "stat_values"
|
|
outbound-msg-retry: 0
|
|
root-key-sentinel: no
|
|
trust-anchor-signaling: no
|
|
serve-expired-client-timeout: 0
|
|
dns-error-reporting: yes
|
|
|
|
trust-anchor: "bogusdnssec. DS 1444 8 2 5224fb17d630a2e3efdc863a05a4032c5db415b5de3f32472ee9abed42e10146"
|
|
|
|
local-zone: local.zone static
|
|
local-data: "www.local.zone A 192.0.2.1"
|
|
remote-control:
|
|
control-enable: yes
|
|
control-interface: 127.0.0.1
|
|
# control-interface: ::1
|
|
control-port: @CONTROL_PORT@
|
|
server-key-file: "unbound_server.key"
|
|
server-cert-file: "unbound_server.pem"
|
|
control-key-file: "unbound_control.key"
|
|
control-cert-file: "unbound_control.pem"
|
|
stub-zone:
|
|
name: "example.com."
|
|
stub-addr: "127.0.0.1@@TOPORT@"
|
|
stub-zone:
|
|
name: "bogusdnssec."
|
|
stub-addr: "127.0.0.1@@TOPORT@"
|
|
stub-zone:
|
|
name: "an.agent."
|
|
stub-addr: "127.0.0.1@@TOPORT@"
|
|
stub-zone:
|
|
name: "expired."
|
|
stub-addr: "127.0.0.1@@EXPIREDPORT@"
|