Commit graph

229 commits

Author SHA1 Message Date
Daniel Salzman
01cda38a5b doc/conf: unify section items order 2020-08-27 15:31:57 +02:00
Daniel Salzman
b790ab7926 doc: sort sections in the reference to be the same as in the program 2020-08-27 15:00:28 +02:00
Libor Peltan
7803589738 dnssec: implemented DSA deterministic signing 2020-08-26 10:48:47 +02:00
Libor Peltan
9173bc89e7 dnssec validation: only take signing-threads from config policy 2020-08-21 12:16:17 +02:00
Libor Peltan
bc0e5b25f1 catalog: add catalog-role option to distinguish 'generate' and 'member' roles in the future 2020-08-11 13:50:34 +02:00
Libor Peltan
b8fe253f62 implemented dnssec validation of updates 2020-08-03 16:08:28 +02:00
Libor Peltan
d533f3ee6b catalog zones implemented 2020-07-13 20:07:09 +02:00
Libor Peltan
9adc992cd7 conf: allow configuring acl with a remote 2020-06-03 09:22:37 +02:00
Libor Peltan
8dc81831ef implemented parallel adjusting 2020-05-26 19:28:13 +02:00
Libor Peltan
197314d451 ANY: when UDP, always answer with one RRSet 2020-05-01 20:14:03 +02:00
Daniel Salzman
a8ae110b1b doc: update XDP-related information 2020-04-21 19:04:32 +02:00
Libor Peltan
14655e4e3a xdp: listen on configured ifaces with workers=RXqueues 2020-04-21 18:43:10 +02:00
Libor Peltan
36317a7c51 xdp: documentation (initial) 2020-04-21 18:43:10 +02:00
Libor Peltan
dad31c66c3 onlinesign: allow explicit single-type-signing:off 2020-04-20 19:51:26 +02:00
Daniel Salzman
362d856e5d conf: decrease 'journal-db-max-size' default value to 512 MiB on 32-bit systems 2020-03-02 10:05:02 +01:00
Daniel Salzman
4c75309ecc conf: increase server.tcp-io-timeout default value to 500 ms 2020-02-13 14:54:44 +01:00
Daniel Salzman
a4b403e9e3 knot: add configuration option for algorithm Ed448 2020-02-04 12:52:47 +01:00
Libor Peltan
53c5a32596 notify: option to suppres notify resulting from XFR from some masters 2020-01-30 14:19:35 +01:00
David Vašek
4fcb4dc037 doc: document changes to 'update-owner-name' in configuration
(Plus improve the "address" option description in the same section.)
2020-01-13 09:40:42 +01:00
Daniel Salzman
e55d25493b doc: extend description of ds-push 2019-11-14 16:05:10 +01:00
Daniel Salzman
b7cb8a19a2 conf: rename max_*/min_* zone items 2019-10-08 14:28:48 +02:00
Daniel Salzman
efbaae2d6f conf: rename 'max*_udp_payload' 'udp_max*_payload' 2019-10-08 14:28:48 +02:00
Daniel Salzman
25b0eca9d2 conf: rename 'server.max-tcp-clients' 'server.tcp-max-clients' 2019-10-08 14:04:32 +02:00
Daniel Salzman
e9fd1e28e3 conf: disable tcp-reuseport by default 2019-10-06 12:22:08 +02:00
David Vašek
36efeb62b5 doc: document the use of the server.tcp-reuseport option 2019-10-04 18:47:32 +02:00
Libor Peltan
1b11c3281f doc: better describe references and defaults 2019-10-03 16:43:50 +02:00
David Vašek
72fff507ba doc: improve the description of tcp-remote-io-timeout and display new default value 2019-10-03 09:42:41 +02:00
Daniel Salzman
f485beea6f doc: fix typos
Reported by Jan-Piet MENS @jpmens on Twitter.
2019-09-28 16:56:51 +02:00
David Vašek
ac408c7437 doc: modify wording for setting zero/empty values 2019-09-24 21:30:21 +02:00
Daniel Salzman
73174b723a conf: replace tcp-[query|reply]-timeout and tcp-[io|remote-io]-timeout + improved doc 2019-09-24 21:30:21 +02:00
Daniel Salzman
9606546630 doc: improve description of the ds-push feature 2019-09-23 19:33:17 +02:00
Libor Peltan
37c2c4c5c9 doc: clearer desc of zone-max-ttl 2019-09-23 10:08:57 +02:00
Daniel Salzman
c7b303fd46 conf: move *-db* items from 'template' to new 'database' section 2019-09-20 19:55:04 +02:00
David Vašek
aa3c1066d7 conf: set default max-udp-payload to 1232 (and its ipv4 and ipv6 variants to the same)
As per https://github.com/dns-violations/dnsflagday/issues/125
2019-09-18 20:21:49 +02:00
Libor Peltan
48c5d23c0c doc: describe precisely not trying other addrs if NOTAUTH 2019-09-18 11:30:56 +02:00
Daniel Salzman
459a1d30bd conf: remove request-edns-option option 2019-09-12 14:18:18 +02:00
Daniel Salzman
70cdc27515 doc: add missing rrsig-pre-refresh to policy overview 2019-09-05 11:32:58 +02:00
Libor Peltan
cff77d2428 dnssec: implemented pushing updated DS to parent 2019-09-05 09:00:00 +02:00
Daniel Salzman
e5f5855038 Revert unintentionally squashed "dnssec: implemented pushing updated DS to parent"
This reverts commit 2dbb39d29a.
2019-09-05 08:59:29 +02:00
Libor Peltan
2dbb39d29a dnssec: implemented pushing updated DS to parent 2019-09-04 15:15:28 +00:00
David Vašek
b924d23283 conf: postpone effect of unsupported dynamic conf changes ({udp,tcp,background}-workers part)
Warn about each parameter once only.
Code which isn't effectively used is kept so far (in reset_handler(), reconfigure_threads() etc.)
2019-08-23 09:47:41 +02:00
Libor Peltan
44d12f83d7 dnssec: implemented RRSIG pre-refresh to avoid freqent sign events 2019-08-19 16:55:57 +02:00
Jan Hák
322917486c conf: add option for setting TCP query timeout
fixes #474
2019-07-22 15:13:54 +02:00
Daniel Salzman
95b0546913 doc: improve some dnssec-related descriptions 2019-07-15 21:59:57 +02:00
Libor Peltan
540a7b86dc doc: better exact description of zsk-lifetime 2019-07-12 17:46:46 +02:00
David Vašek
1248e550ed conf: change default tcp-workers, adjust docs for {udp,tcp,background}-workers 2019-07-12 13:24:01 +02:00
David Vašek
f867ac17b3 conf: auto-configure max-tcp-clients 2019-07-12 11:27:33 +02:00
Daniel Salzman
7ad0ea2fbb conf: remove deprecated tcp-handshake-timeout 2019-07-12 10:03:10 +02:00
David Vašek
56206d7e3b doc: describe logging via systemd, plus improved wording 2019-07-04 16:45:43 +02:00
David Vašek
f27b50a162 doc: improvements and fixes 2019-07-04 15:24:49 +02:00