Commit Graph

53 Commits

Author SHA1 Message Date
wouter
a6494a30da - low-rtt and low-rtt-pct in unbound.conf enable the server selection
of fast servers for some percentage of the time.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4612 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-04-09 13:27:28 +00:00
ralph
3d00933139 - Do use cached NSEC records to generate negative answers for domains under
DNSSEC Negative Trust Anchors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4593 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-03-21 14:34:17 +00:00
wouter
44915a87fe - Fix #2882: Unbound behaviour changes (wrong) when domain-insecure is
set for stub zone.  It no longer searches for DNSSEC information.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4404 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-11-14 10:01:44 +00:00
wouter
39ba948040 - Spelling fixes, from Phil Porada.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4344 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-09-15 14:29:28 +00:00
wouter
4ecf673365 - Fix #746: Fix unbound sets CD bit on all forwards.
If no trust anchors, it'll not set CD bit when forwarding to another
  server.  If a trust anchor, no CD bit on the first attempt to a
  forwarder, but CD bit thereafter on repeated attempts to get DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3679 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-03-17 14:01:59 +00:00
wouter
2c4190b319 - 0x20 fallback improved, better handling of servfail responses,
they do not count as missing comparisons (except if all are failed),
  and better handling of inability to find nameservers, no more
  nameservers can be found results in fallback acceptance.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3346 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-04 08:30:17 +00:00
wouter
674e12318a - Fix 0x20 capsforid fallback to omit gratuitous NS and additional
section changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3323 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-30 09:35:38 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-18 15:15:57 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 13:28:39 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-03 09:11:16 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-20 12:23:42 +00:00
wouter
2a46be9b00 - code review: return value of cache_store can be ignored for better
performance in out of memory conditions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2704 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-28 14:18:41 +00:00
wouter
28727b8b02 - new approach to NS fetches for DS lookup that works with
cornercases, and is more robust and considers forwarders.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2646 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-21 15:01:01 +00:00
wouter
e5d9f18a1c - fix to locate nameservers for DS lookup with NS fetches.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2645 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-03-19 15:44:21 +00:00
wouter
5a7af9871a Fix prefetch and stickyness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2632 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-16 11:04:53 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 09:42:32 +00:00
wouter
a1f677fcac - Makefile changed for BSD make compatibility.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2544 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-10 18:44:06 +00:00
wouter
950c3c067c revert earlier commit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2488 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-12 11:28:14 +00:00
wouter
97a89720c9 - Fix validation failures due to EDNS backoff retries, the retry
for fetch of data has want_dnssec because the iter_indicate_dnssec
         function returns true when validation failure retry happens, and
         then the serviced query code does not fallback to noEDNS, even if
         the cache says it has this.  This helps for DLV deployment when
         the DNSSEC status is not known for sure before the lookup concludes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2483 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-26 09:00:43 +00:00
wouter
6f7205f522 add and fix doxygen comments for doxygen-1.7.1. (which reports lots of
spurious items as well, by the way).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2211 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-08-13 08:41:49 +00:00
wouter
0aaf9f53aa - When retry to parent the retrycount is not wiped, so failed
nameservers are not tried again.
       - iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2145 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-06-11 14:09:56 +00:00
wouter
348f5baad7 parent-child misconfigured data lookup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2119 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-28 14:15:29 +00:00
wouter
f2596d95df - Fix dnssec-missing detection that was turned off by server selection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2107 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-04 08:39:04 +00:00
wouter
82e5783f72 Fix bug#307: 0x20 fallback outstanding query count, together with rec_lame,
and canonical rrset comparison.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2097 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-26 14:59:44 +00:00
wouter
5fb04b1a9c Move includes to code files.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2035 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-12 15:17:48 +00:00
wouter
81d203550b A little more strict DS scrubbing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1986 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-18 09:47:08 +00:00
wouter
daae24a855 Scrub DNSKEY, DLV and DS much more stringently.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1985 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-17 16:50:04 +00:00
wouter
988cdf0808 work on prefetch: store the updated results in the cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1954 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-08 15:59:36 +00:00
wouter
02d69146e3 Answer qclass=ANY.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1938 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-15 09:10:04 +00:00
wouter
170bc60cb6 Fix lookup of domains with parent-child zonecut data differences.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1929 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-08 13:37:59 +00:00
wouter
4ba1003f2c Data retry on validation failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-06 08:31:47 +00:00
wouter
b2e277f947 Fix problem with delegation where glue has expired.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1837 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-09-17 14:36:06 +00:00
wouter
00971e4abf Fixup lameness handling in server selection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1735 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-07-21 13:52:39 +00:00
wouter
a4f3d3f025 Recursion lame is detected and last resort is used to resolve.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1294 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-13 09:11:42 +00:00
wouter
a2c3b61c68 0x20 fallback code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1285 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-06 14:46:22 +00:00
wouter
c8f39cf0a7 lookup delegation from cache and printout.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1266 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-23 10:55:36 +00:00
wouter
4ab789fdcf fixup for newegg lameness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1137 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-25 09:39:57 +00:00
wouter
b649a1876b dnssec lame servers are used as last effort.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@716 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-23 12:37:18 +00:00
wouter
0da3454c6f dnssec lameness detection improved to disable detection when not sure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@715 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-23 08:30:21 +00:00
wouter
67d2bad8e0 dnssec lame detection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@714 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-22 15:25:37 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
wouter
e6d57f0ea1 resolution fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@682 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 07:34:13 +00:00
wouter
9b90ab87cd fixup glue timeout problems, and priming with safety belt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@622 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-19 12:17:42 +00:00
wouter
d7201ed226 cycle detection
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@452 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-26 09:29:21 +00:00
wouter
d9aac953ba cname chain caching (part).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@440 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-19 15:16:39 +00:00
wouter
ea2e3fdef0 shuffle NS selection randomly for getting addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@436 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-19 09:25:55 +00:00
wouter
6f7a978c78 Prime response state, both root priming and stub priming handling.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@364 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-04 12:22:38 +00:00
wouter
e7cd30c7d7 process_response, classify response, delegpt_from_message.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@359 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 20:24:33 +00:00
wouter
7eeeb162b0 conversion from parsed message to iterator region storage.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@357 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 12:52:07 +00:00