mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-20 23:00:56 -05:00
a616437338
* v1 EDER poc * remove superfluous edns_list_get_option function * create an EDER configurable * Hackathon 114 * Fixes for version -04 * Generated configparser and configlexer are not versioned in master anymore * Remove NOERROR DNS Error Reporting; not part of final RFC. * Use assigned IANA EDNS0 Option Code for Report-Channel. * Fix buffer protection and agent domain validity * Use DNS Error Reporting instead of the eder nickname * Update documentation. * Fix typo. * Bail out early if ede is not present. * Forget previous EDNS options from upstream; this is what was implicitly happening but not deterministacally. * Don't report LDNS_EDE_OTHER and bail early if there is no reporting agent. * Only do DNS error reporting when a client asked for something that went wrong. * Add an error reporting agent in the parent that should be ignored. * review feedback. * fixup for fast reload * Add 'num.dns_error_reports' to stats and test for it. --------- Co-authored-by: TCY16 <tom@nlnetlabs.nl> Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
36 lines
878 B
Text
36 lines
878 B
Text
server:
|
|
verbosity: 5
|
|
num-threads: 1
|
|
interface: 127.0.0.1
|
|
module-config: "validator iterator"
|
|
port: @PORT@
|
|
use-syslog: no
|
|
directory: ""
|
|
pidfile: "unbound.pid"
|
|
chroot: ""
|
|
username: ""
|
|
do-not-query-localhost: no
|
|
extended-statistics: yes
|
|
identity: "stat_values"
|
|
outbound-msg-retry: 0
|
|
root-key-sentinel: no
|
|
trust-anchor-signaling: no
|
|
|
|
discard-timeout: 800
|
|
wait-limit: 1
|
|
wait-limit-netblock: 127.0.0.0/8 1
|
|
wait-limit-netblock: ::1/128 1
|
|
infra-cache-min-rtt: 3000 # This is for the discard-timeout test
|
|
|
|
remote-control:
|
|
control-enable: yes
|
|
control-interface: 127.0.0.1
|
|
# control-interface: ::1
|
|
control-port: @CONTROL_PORT@
|
|
server-key-file: "unbound_server.key"
|
|
server-cert-file: "unbound_server.pem"
|
|
control-key-file: "unbound_control.key"
|
|
control-cert-file: "unbound_control.pem"
|
|
stub-zone:
|
|
name: "unresponsive."
|
|
stub-addr: "127.0.0.1@@TOPORT@"
|