Commit graph

384 commits

Author SHA1 Message Date
Mark Andrews
bf8d171a66 add RFC7793 2016-05-13 17:00:17 +10:00
Tinderbox User
05cf9e3285 update copyright notice / whitespace 2016-05-11 23:45:23 +00:00
Mark Andrews
bf4fe7ca1b 7830: The EDNS(0) Padding Option 2016-05-11 12:08:20 +10:00
Tinderbox User
f33abec8a6 regen master 2016-05-06 01:05:45 +00:00
Mark Andrews
08e36aa5a5 4356. [func] Add the ability to specify whether to wait for
nameserver addresses to be looked up or not to
                        rpz with a new modifying directive 'nsip-wait-recurse'.                         [RT #35009]
2016-05-05 16:29:05 +10:00
Tinderbox User
a179cbdf65 regen master 2015-12-16 01:04:13 +00:00
Mukund Sivaraman
ecc06cbc32 Use optimal message sizes to improve compression in AXFRs (#40996) 2015-12-15 13:24:14 +05:30
Mukund Sivaraman
58f7af60e7 Allow non-destructive control channel access using a "read-only" clause (#40498) 2015-11-11 13:46:57 +05:30
Witold Krecicki
bfd4b9e11a 4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726] 2015-11-05 12:19:04 +01:00
Tinderbox User
eadee66609 regen master 2015-10-29 02:56:15 +00:00
Tinderbox User
10b865e918 regen master 2015-10-03 01:07:28 +00:00
Tinderbox User
983df82baf regen master 2015-09-30 01:06:20 +00:00
Witold Krecicki
e6d0a391f5 4223. [func] Add support for setting max-cache-size to percentage
of available physical memory, set default to 90%.
			[RT #38442]
2015-09-28 11:08:50 +02:00
Mark Andrews
98a7f8c7ae 4222. [func] Bias IPv6 servers when selecting the next server to
query. [RT #40836]
2015-09-28 18:57:19 +10:00
Tinderbox User
09d72af3e9 regen master 2015-09-19 01:08:38 +00:00
Mark Andrews
f6e45a5c54 4217. [protocol] Add support for CSYNC. [RT #40532] 2015-09-18 23:45:12 +10:00
Mark Andrews
4ca7391e64 4196. [doc] Improve how "enum + other" types are documented.
[RT #40608]

4195.   [bug]           'max-zone-ttl unlimited;' was broken. [RT #40608]
2015-09-09 17:02:11 +10:00
Mark Andrews
483f1611fc update list of supported types in the ARM 2015-08-31 15:15:55 +10:00
Tinderbox User
aa6c5a3e33 regen master 2015-08-13 01:26:22 +00:00
Mark Andrews
b63a83eea8 update 2015-08-12 22:58:07 +10:00
Mark Andrews
090ba6ff30 update 2015-07-26 06:45:53 +10:00
Tinderbox User
98e1584b29 update copyright notice / whitespace 2015-07-24 23:45:21 +00:00
Mark Andrews
b2b408e4ed update 2015-07-24 23:39:58 +10:00
Mark Andrews
364162f4ae update 2015-07-24 15:05:20 +10:00
Mark Andrews
230f8da57c update 2015-07-24 14:58:21 +10:00
Tinderbox User
c0cbdeedb5 regen master 2015-07-10 01:05:03 +00:00
Tinderbox User
40f508f08b regen master 2015-07-08 01:04:56 +00:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Tinderbox User
1879ff4932 regen master 2015-07-06 01:04:49 +00:00
Tinderbox User
8168c28739 regen master 2015-04-24 01:05:03 +00:00
Tinderbox User
947d37484e regen master 2015-03-04 01:04:48 +00:00
Tinderbox User
d9184858dd regen master 2015-01-21 01:04:51 +00:00
Evan Hunt
761d135ed6 [master] add TCP pipelining support
4040.	[func]		Added server-side support for pipelined TCP
			queries. TCP connections are no longer closed after
			the first query received from a client. (The new
			"keep-response-order" option allows clients to be
			specified for which the old behavior will still be
			used.) [RT #37821]
2015-01-20 16:14:09 -08:00
Tinderbox User
88a2182a1a regen master 2014-12-03 01:04:59 +00:00
Francis Dupont
5c5c6d289d Add a TCP only option to server/peer 2014-12-02 14:17:59 +01:00
Tinderbox User
795beed720 regen master 2014-11-20 01:04:52 +00:00
Tinderbox User
d6984fd680 regen master 2014-11-19 01:05:15 +00:00
Tinderbox User
a3ff24aaa5 regen master 2014-10-30 01:05:12 +00:00
Tinderbox User
60c29cf21a regen master 2014-09-29 01:05:38 +00:00
Tinderbox User
8908291ce5 regen master 2014-09-11 01:05:15 +00:00
Tinderbox User
5fa6a064b8 regen master 2014-09-05 19:26:47 +00:00
Tinderbox User
aa1905addf regen master 2014-08-31 01:47:15 +00:00
Tinderbox User
78c3882f77 regen master 2014-08-26 01:05:40 +00:00
Mark Andrews
15a885dfc6 remove duplicate request-ixfr rt36878
(cherry picked from commit 0a484c39fc)
2014-08-16 08:51:20 +10:00
Tinderbox User
3e80f25d33 regen master 2014-08-06 05:17:24 +00:00
Tinderbox User
61ab11c0ec regen master 2014-06-19 01:05:10 +00:00
Tinderbox User
fc74b733bf regen master 2014-05-17 01:05:14 +00:00
Tinderbox User
f39512a917 regen master 2014-04-20 01:05:19 +00:00
Tinderbox User
42be858f85 regen master 2014-02-27 01:06:20 +00:00
Mark Andrews
f4193c2021 update copyrights 2014-02-25 12:07:41 +11:00
Tinderbox User
bfceb3a1ed update copyright notice 2014-02-24 23:46:25 +00:00
Francis Dupont
1b0d803a75 hmac(key, message) 2014-02-25 00:35:31 +01:00
Mark Andrews
d3d9c0c8f6 add a brief description of SIT 2014-02-25 09:50:17 +11:00
Mark Andrews
5e45c8aabf add CFG_CLAUSEFLAG_NOTCONFIGURED flag 2014-02-21 12:48:39 +11:00
Tinderbox User
0e1dece22e regen master 2014-02-20 19:19:27 +00:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
2014-02-19 12:53:42 +11:00
Tinderbox User
f2016fcecf regen master 2014-02-08 01:05:40 +00:00
Tinderbox User
a1e81a1c5b regen master 2014-01-13 01:04:54 +00:00
Mark Andrews
fb756ba304 3703. [func] Prefetch about to expire records if they are queried
for, see prefetch option for details. [RT #35041]
2014-01-12 21:29:15 +11:00
Tinderbox User
52cc3bd9c1 regen master 2013-11-15 01:05:18 +00:00
Tinderbox User
ed2fefd8d2 regen master 2013-08-02 01:04:38 +00:00
Tinderbox User
c11135d39e regen master 2013-07-14 04:47:51 +00:00
Tinderbox User
7be2f6d5df regen master 2013-04-30 04:23:14 +00:00
Tinderbox User
d0d1dbab0f regen master 2013-04-26 01:04:43 +00:00
Tinderbox User
3a32ac2a72 regen master 2013-03-23 01:04:36 +00:00
Evan Hunt
67adc03ef8 [master] add DSCP support
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
2013-03-22 14:05:33 -07:00
Tinderbox User
dad65f7c93 regen master 2013-02-28 01:04:36 +00:00
Tinderbox User
c7f299247c regen master 2013-02-27 01:07:46 +00:00
Tinderbox User
43b9448395 regen master 2013-01-25 01:04:51 +00:00
Tinderbox User
bcf15a19ae regen master 2012-12-07 01:11:33 +00:00
Tinderbox User
aa444144ad regen master 2012-10-04 01:05:27 +00:00
Mark Andrews
058e44186b 3387. [func] Support for a DS digest can be disabled at
runtime with disable-ds-digests. [RT #21581]
2012-10-03 12:38:43 +10:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User
7831419d1e regen master 2012-06-21 01:05:35 +00:00
Tinderbox User
edaa064885 regen master 2012-06-15 01:04:29 +00:00
Tinderbox User
29651c3a80 regen master 2012-06-01 01:04:18 +00:00
Tinderbox User
4cfb5ea3a5 regen master 2012-05-15 01:06:40 +00:00
Evan Hunt
e41d5a00bc added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Automatic Updater
36da16fa31 regen HEAD 2011-11-07 01:15:05 +00:00
Automatic Updater
6f64d4ab8e regen HEAD 2011-10-14 00:04:24 +00:00
Automatic Updater
eea6be913f regen HEAD 2011-09-07 01:14:44 +00:00
Automatic Updater
c978c6cb6e regen HEAD 2011-08-31 01:14:43 +00:00
Automatic Updater
06ac94d81a regen HEAD 2011-07-02 01:14:42 +00:00
Automatic Updater
9ce6056d52 regen HEAD 2011-05-24 01:14:44 +00:00
Automatic Updater
d9c707589a regen HEAD 2011-05-09 01:14:47 +00:00
Automatic Updater
db6353c9b8 regen HEAD 2011-04-30 01:14:43 +00:00
Automatic Updater
8a8d38eb8e regen HEAD 2011-02-24 01:14:22 +00:00
Automatic Updater
79cf9524b1 regen HEAD 2011-02-04 01:14:16 +00:00
Automatic Updater
5329b4137e regen HEAD 2011-01-13 05:13:52 +00:00
Automatic Updater
65ad89971e regen HEAD 2011-01-08 01:15:44 +00:00
Evan Hunt
3916872f37 3003. [experimental] Added update-policy match type "external",
enabliing named to defer the decision of whether to
			allow a dynamic update to an external daemon.
			(Contributed by Andrew Tridgell.) [RT #22758]
2011-01-06 23:24:39 +00:00
Automatic Updater
ebabe300b6 regen HEAD 2011-01-04 01:14:09 +00:00
Automatic Updater
517ae3de96 regen HEAD 2010-12-19 01:14:08 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
2010-12-18 01:56:23 +00:00
Automatic Updater
b6f3a9131e regen HEAD 2010-12-17 01:14:04 +00:00
Mark Andrews
e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Automatic Updater
82d13321f4 regen HEAD 2010-08-12 01:14:30 +00:00
Automatic Updater
5d9e1d7500 regen HEAD 2010-07-12 01:14:20 +00:00