Commit graph

419 commits

Author SHA1 Message Date
Daniel Salzman
357706157a redis: add multi-db and/or sentinel support 2025-10-15 17:57:46 +02:00
Daniel Salzman
a34e5a096d doc: add default TLS and QUIC ports to reference 2025-10-15 13:50:17 +02:00
Daniel Salzman
b7ab32fcae redis: add support for hostname listen specification 2025-10-15 13:50:01 +02:00
Jan Hák
bafc3a22d9 dbus: add serial to external_verify event 2025-10-06 09:43:04 +02:00
Libor Peltan
9e30320c7e knotd: implement update-delay 2025-09-16 14:59:43 +02:00
Libor Peltan
cbddb5570e reverse+include-from: allow at slave, forcing ixfr-from-axfr 2025-09-15 14:45:25 +02:00
Libor Peltan
ae514d9e52 doc: add reference for redis-related options 2025-09-12 16:58:52 +02:00
Libor Peltan
6408e6493e zone: implemented including records from subzone(s) 2025-09-12 09:37:57 +02:00
Libor Peltan
3900b8cbd7 external-validation: implemented configurable timeout 2025-08-01 17:31:18 +02:00
Libor Peltan
965f9e1ecf dbus: signal when external validation is requested 2025-08-01 17:31:18 +02:00
Libor Peltan
97f8c41a24 external validation: implemented zone/diff dump 2025-08-01 17:31:18 +02:00
Daniel Salzman
6d79f78d3b doc: improve description of reverse-generate 2025-07-25 13:32:20 +02:00
Daniel Salzman
8c59b46adb conf: rework notify-delay to be more practical and consistent with Bind 2025-07-14 07:53:48 +02:00
Libor Peltan
34cb1aef7c dnssec/multi-keystore: implemented ksk-only keystore...
...so that KSKs and ZSKs can be in distinct keystores
2025-07-01 10:51:18 +02:00
Libor Peltan
415f5bf88e dnssec: implemented multi-keystore option...
...useful e.g. for hsm-to-pem migration
2025-07-01 08:42:04 +02:00
Daniel Salzman
6dce07a796 refresh: establish a new TCP connection for XFR if no-edns is set 2025-06-27 14:29:19 +02:00
Daniel Salzman
342f4466a1 tests-extra: improve stability of quic/xfr under Valgrind 2025-06-24 10:27:41 +02:00
Jan Doskočil
261c378b74 conf: implemented certificate hostname validation 2025-06-23 17:55:14 +02:00
Daniel Salzman
423cbe075f zonemd: emit 'dnssec-invalid' dbus event when validation fails 2025-05-30 13:50:19 +02:00
Jan Doskočil
b753ba3ca5 conf: implement notify-delay option 2025-05-22 08:16:44 +02:00
Libor Peltan
8f06214d68 doc: zone/reverse: some more description 2025-05-06 15:35:49 +02:00
Libor Peltan
6be870f0bf implemented multi-socket CTL...
...with each socket handled by a thread
2025-04-14 18:07:52 +02:00
Jan Doskočil
929aa4325d doc/knot.conf: cert-key doesnt rule out TLS 2025-04-14 12:25:09 +02:00
Libor Peltan
6ccf2243cf auto-reverse zones: implemented support for multiple...
...forward zones to be reversed
2025-04-04 20:41:27 +02:00
Daniel Salzman
59e67d4e39 knotd: don't use SO_REUSEPORT on a listening UNIX socket
As it fails with kernels ~6.11.0-21. It doesn't make sense anyway.
2025-04-03 10:19:36 +02:00
Daniel Salzman
4d36046987 conf: set 'hmac-sha256' as the default TSIG key algorithm 2025-03-31 12:30:03 +02:00
Daniel Salzman
a4da7526eb doc: update links to samples 2025-03-25 11:44:35 +01:00
Daniel Salzman
d3beffbd73 doc: add missing value list in cds-digest-type reference 2025-03-25 11:36:44 +01:00
Libor Peltan
f8472acb5f implemented zonefile-skip option 2025-03-12 08:43:36 +01:00
Libor Peltan
f66c2b7c74 doc: serial modulo/shift enhancements 2025-02-08 13:57:56 +01:00
Daniel Salzman
edcb6b09f7 conf: change default salt length to 0 2024-11-05 15:12:49 +01:00
Jan Hák
6055b7c9f6 acl: add protocol option to the configuration 2024-09-27 12:41:36 +02:00
Daniel Salzman
e5ef44ce7c doc: update the acl.deny item description 2024-09-04 14:01:02 +02:00
Daniel Salzman
86ecefafdf doc: fix typos 2024-09-03 19:33:47 +02:00
Jan Doskočil
fad9ce9f34 yparser: new time unit specifiers
w = week
M = month
y = year
2024-08-24 15:17:53 +02:00
Daniel Salzman
14a7ba8ab3 conf: add 'zone.default-ttl` configuration option 2024-07-19 16:53:55 +02:00
Jan Hák
ad5b7871a1 knotd: add support for DDNS DoT 2024-07-15 22:12:04 +02:00
David Vašek
4a735a2c29 doc: for ACL, use 'action' as the only synonymum for request type
In Reference, explicitly mention that normal DNS queries are allowed by default.
2024-05-18 21:09:44 +02:00
Daniel Salzman
4784c4c601 conf: allow empty value for some zone items (references to remotes)
This allows overriding of corresponding non-empty template items.
2024-05-16 16:57:54 +02:00
Libor Peltan
ae1289a8d0 implemented keytag-modulo option 2024-05-14 15:44:55 +02:00
Jan Hák
0b09e5a0ac knotd: update TLS credentials on server reload 2024-05-07 07:52:30 +02:00
Libor Peltan
fdad47e267 implemented DoT for queries and XFR 2024-05-07 07:52:29 +02:00
David Vašek
3dd6702b3e doc/reference: where suitable, specify time units explicitly
Also, fix some additional errors and typos in reference.rst.
2024-04-29 18:55:05 +02:00
Daniel Salzman
1e9fbcb8d1 conf: add control.backlog configuration option 2024-04-19 14:21:21 +02:00
Daniel Salzman
f6c1a557d7 conf: add options for XDP preferred busy polling 2024-04-04 10:05:39 +02:00
Daniel Salzman
7d4b53a231 conf: add xdp.ring-size configuration option 2024-04-03 21:40:57 +02:00
Daniel Salzman
f5580a401e conf: allow catalog role member in a catalog template 2024-03-08 21:17:40 +01:00
Daniel Salzman
66ab02cc13 dnssec/validation: add limit on non-matching keys with a duplicate keytag 2024-02-27 13:04:04 +01:00
Daniel Salzman
e508ce180c doc: extend dbus-event note with libdbus 2024-02-20 17:03:36 +01:00
Libor Peltan
0f9e91b0e6 doc/zsk-lifetime: some more pedantics to description 2024-02-15 09:47:59 +01:00