upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-25 19:04:57 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/doc/arm
History
Artem Boldariev 5ed3a76f9d BIND: Add 'allow-proxy' and 'allow-proxy-on' options 
The main intention of PROXY protocol is to pass endpoints information
to a back-end server (in our case - BIND). That means that it is a
valid way to spoof endpoints information, as the addresses and ports
extracted from PROXYv2 headers, from the point of view of BIND, are
used instead of the real connection addresses.

Of course, an ability to easily spoof endpoints information can be
considered a security issue when used uncontrollably. To resolve that,
we introduce 'allow-proxy' and 'allow-proxy-on' ACL options. These are
the only ACL options in BIND that work with real PROXY connections
addresses, allowing a DNS server operator to specify from what clients
and on which interfaces he or she is willing to accept PROXY
headers. By default, for security reasons we do not allow to accept
them.
2023-12-06 15:15:25 +02:00
..
_ext Support Sphinx 1.6.7 2022-07-21 15:21:21 +02:00
_static ARM style change: render literals in black color 2022-06-02 17:13:19 +02:00
.gitignore Convert the documentation to Sphinx documentation format 2020-05-07 16:02:56 +02:00
advanced.inc.rst Manually hyperlink algorithm, key, options, secret, and server 2022-07-04 15:50:52 +02:00
build.inc.rst Build with liburcu, Userspace RCU 2023-03-10 17:31:28 +01:00
catz.inc.rst Add tag and short description for catalog-zones statement 2022-07-29 18:56:04 +02:00
chapter1.rst Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
chapter2.rst Remove build from chapter 2 and move it to the end of ARM 2022-05-11 10:51:26 +02:00
chapter3.rst Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
chapter4.rst Split Configuration chapter in the ARM into chapters 3 and 4 2022-05-11 10:51:26 +02:00
chapter5.rst Move "DNSSEC" chapter before "Advanced" and "Security" 2022-06-22 13:37:18 +02:00
chapter6.rst Move "DNSSEC" chapter before "Advanced" and "Security" 2022-06-22 13:37:18 +02:00
chapter7.rst further cleanup after removing diffie-hellman TKEY mode 2023-03-08 08:36:25 +01:00
chapter9.rst Restructure includes for chapter 9 Troubleshooting 2022-05-11 10:51:26 +02:00
chapter10.rst Remove build from chapter 2 and move it to the end of ARM 2022-05-11 10:51:26 +02:00
conf.py Add a Sphinx role for linking CVEs to the ISC Knowledgebase 2023-09-21 14:18:02 +02:00
config-auth.inc.rst Deduplicate link anchors in the ARM 2022-10-05 11:36:19 +02:00
config-intro.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00
config-resolve.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00
dlz.inc.rst Add tags and short descriptions for dlz and search statements 2022-07-29 18:56:04 +02:00
dns-ops.inc.rst Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
dns-security-overview.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-security-overview.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-servers.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-servers.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-tree.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-tree.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dnssec-guide.rst Minor DNSSEC guide tweaks 2022-05-11 10:51:26 +02:00
dnssec.inc.rst Remove redundant inline-signing lines from docs 2023-08-01 06:55:48 +00:00
dyndb.inc.rst Add tag and short description for dyndb statement 2022-07-29 18:56:04 +02:00
general.rst Hyperlink program names to their manual pages 2022-03-14 10:46:36 +01:00
history.rst Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
index.rst Add Google Site Verification tag to the TOC page 2023-06-29 18:32:50 +02:00
intro-dns-bind.inc.rst Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
intro-security.inc.rst Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
introduction.inc.rst Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
isc-logo.pdf Update ISC logo 2020-07-08 02:00:11 +00:00
logging-categories.inc.rst Update sample query log excerpt in the ARM 2023-07-06 15:38:48 +02:00
Makefile.am Remove PDF-related bits from the build system 2023-10-12 14:24:42 +02:00
managed-keys.inc.rst Grammar fixes and assorted text edits in the ARM 2022-07-04 15:50:51 +02:00
manpages.rst In the ARM appendix, sort man page sections alphabetically 2022-03-10 20:13:22 +01:00
name-resolution.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
name-resolution.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
notes.rst Merge tag 'v9.19.18' 2023-11-15 14:54:10 +01:00
pkcs11.inc.rst Update PKCS#11 section in the ARM 2023-08-31 15:41:39 +00:00
platforms.inc.rst Drop OpenBSD system test CI job 2023-12-05 16:14:31 +01:00
plugins.inc.rst Add short description for plugin statement 2022-07-29 18:56:04 +02:00
primary-secondary.dia Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
primary-secondary.png Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
recursive-query.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
recursive-query.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
reference.rst BIND: Add 'allow-proxy' and 'allow-proxy-on' options 2023-12-06 15:15:25 +02:00
requirements.inc.rst Deduplicate link anchors in the ARM 2022-10-05 11:36:19 +02:00
requirements.txt Update Sphinx and sphinx_rtd_theme 2023-09-20 17:18:24 +02:00
resolver-forward.dia Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
resolver-forward.png Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
rpz.inc.rst Update RPZ documentation 2022-08-29 14:04:03 +00:00
security.inc.rst Describe BIND threat model 2023-10-13 09:00:43 +02:00
sig0.inc.rst Split chapter Advanced DNS Features in the ARM into chapters 5, 6, 7 2022-05-11 10:51:26 +02:00
troubleshooting.inc.rst Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
tsig.inc.rst further cleanup after removing diffie-hellman TKEY mode 2023-03-08 08:36:25 +01:00
zones.inc.rst Add missing newline in documentation code example 2023-03-27 16:51:10 +02:00