148 commits

Author	SHA1	Message	Date
David Vašek	363f9282ba	doc/operation: mention the use of the force option for overwriting failed backup	2024-11-18 15:04:22 +01:00
Daniel Salzman	4433395b2e	doc: add info about DS generation during key rollover	2024-09-12 08:42:42 +02:00
Daniel Salzman	9b6e75516c	doc: update XDP pre-requisites	2024-08-01 08:19:16 +02:00
Daniel Salzman	d6347d6dc7	doc: add and update information about TLS	2024-06-21 16:14:57 +02:00
Libor Peltan	ae1289a8d0	implemented keytag-modulo option	2024-05-14 15:44:55 +02:00
David Vašek	f1ac2c7d3c	doc/operation: add the Logging section, describe log rotation methods	2024-04-12 15:36:30 +02:00
David Vašek	09a76ee1ad	doc/operation: be more verbose about a crash (SIGBUS) caused by improper file manipulations	2024-03-04 13:39:25 +01:00
Daniel Salzman	76060a7d81	doc: add notes to zone file processing mode examples	2024-02-15 11:24:33 +01:00
Daniel Salzman	990cbc86d9	doc: update key rollover examples in operation	2024-02-15 09:47:59 +01:00
David Vašek	6f4c3a0ccf	doc: and some named anchors to sections	2024-02-13 12:16:03 +01:00
Daniel Salzman	8baac1413e	doc: update journal chunk size	2023-12-29 18:55:09 +01:00
Libor Peltan	4d5baff487	doc: highlight potential culrpits of zonefile-load and journal-content	2023-12-08 15:55:41 +01:00
Daniel Salzman	34795e1360	doc: generally change highlighting from console to none	2023-12-01 16:13:04 +01:00
Daniel Salzman	873554f721	doc: add details about simultaneous rollovers ... closes #895	2023-11-14 13:57:30 +01:00
David Vašek	819a7f135a	doc: recommend use of 'zone-freeze' before 'zone-purge' and before 'zone-backup' of catalog zones	2023-11-03 09:58:16 +01:00
Libor Peltan	36d8171794	test+doc: multi-signer supports DNSKEYs at common primary	2023-10-19 11:19:54 +02:00
Libor Peltan	24eeec9b45	keymgr/offlineKSK: bugfix: KSK side not refreshing RRSIGS if unset rrsig-refresh	2023-09-22 12:33:10 +02:00
Libor Peltan	ae23d5ffd4	doc: multi-signer scenarios described	2023-08-10 10:45:35 +02:00
Daniel Salzman	88734ff23c	doc: unify DNSSEC-related section name	2023-08-10 10:45:35 +02:00
Libor Peltan	0547f80b7a	stats/basic-per-zone: doc and test	2023-06-20 08:42:49 +02:00
David Vašek	47d64c3fd4	backup: implement QUIC server key and certificate backup and restore	2023-06-13 11:10:20 +02:00
Daniel Salzman	66976c61fb	doc: add dbus-event info to the key rollovers tip	2023-06-05 10:21:23 +02:00
David Vašek	ec81d99878	doc/operation: describe a failed online backup	2023-05-29 13:48:51 +02:00
Daniel Salzman	0b1c285b44	doc: improve complete example of dynamic configuration	2023-04-21 07:59:10 +02:00
David Vašek	8649d909f1	doc: remove triple grave accents	2023-04-04 09:37:33 +02:00
David Vašek	d21f27d0fa	doc/operation: add a section describing zone expiration	2023-04-04 07:36:48 +02:00
Daniel Salzman	e280f60bd0	doc: add section and utility names highlighting, some improvements	2023-01-19 10:05:30 +01:00
David Vašek	5d0c127df6	doc: update the description of the zone refresh bootstrap	2022-12-08 16:34:16 +01:00
Daniel Salzman	f7aa3f03e9	doc: fix typos in operation/offline-ksk	2022-11-21 11:33:22 +01:00
Daniel Salzman	1221f8d9c1	doc: add info about XDP and VLAN operation	2022-10-28 12:15:01 +02:00
Daniel Salzman	947e570d67	libknot/xdp: process Ethernet frames with VLAN headers	2022-10-07 15:07:13 +02:00
David Vašek	86f1cc1f24	doc/operation: describe how zone bootstrap backoff works	2022-09-15 15:47:15 +02:00
Daniel Salzman	ec18e04d5b	doc: update Offline KSK operation	2022-08-09 17:13:14 +02:00
Daniel Salzman	60267f4203	xdp: fix misaligned access to packet structures	2022-07-24 19:35:00 +02:00
Daniel Salzman	7a1f59f12b	doc: update needed capabilities for XDP mode	2022-06-14 08:42:26 +02:00
Daniel Salzman	fb50f48e1f	doc: simplify secondary mode description	2022-06-02 07:57:01 +02:00
Daniel Salzman	9b620fc8ef	doc: update key log order during key rollovers	2021-12-11 19:32:27 +01:00
Josh Soref	43db89b880	spelling ... Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>	2021-11-24 12:55:47 +01:00
Daniel Salzman	d7d2129ae8	doc: extend offline-ksk operation	2021-10-08 09:21:35 +02:00
Daniel Salzman	2827e802fe	doc: rework offline-ksk prerequisites	2021-10-06 08:52:34 +02:00
Libor Peltan	bdc0c88913	offlineKSK: take DNSKEY TTL from KSR	2021-10-06 08:52:34 +02:00
Libor Peltan	6e83d7a168	dnssec (offlineKSK): RRSIG validation does not count with rrsig-refresh... ... ... this removes the need for equal configuration of offline ksk sides	2021-10-06 08:52:34 +02:00
Daniel Salzman	6bb2d871d3	xdp: don't increase RLIMIT_MEMLOCK on Linux >= 5.11, not needed	2021-09-01 11:04:46 +02:00
David Vašek	1e43a3734c	doc/operation: in Online backup, mention the necessary access rights of the backup directory ... It is a frequently asked question from users.	2021-08-19 15:26:32 +02:00
Daniel Salzman	a987b98d78	doc: extend shared-ksk limitations	2021-07-30 12:43:10 +02:00
David Vašek	58f9e091dc	doc/operation: update the web link to the DER format specs, fix a critical typo ... Update the web link to ITU-T X.690 Recommendation (DER key format), the previous standard revision has been superseded. Fix a critical typo.	2021-07-26 13:15:53 +02:00
Libor Peltan	30a4ff6a25	doc/sharedKSK: discourage changing policy ID	2021-07-15 12:31:59 +02:00
David Vašek	58d2078bd8	backup: print the full network identity in the label file	2021-07-12 19:39:11 +02:00
David Vašek	07394ccd86	backup: modify format of the label file, its name and the name of the lock file	2021-07-12 19:39:11 +02:00
David Vašek	a06face4da	doc/operation: online backup in the blocking mode -- improvement	2021-07-12 19:39:11 +02:00