Commit graph

  • b4c8f9a351
    Merge 18fec256b7 into c5f14dc880 Yorgos Thessalonikefs 2026-04-03 23:50:41 +0000
  • 4bb98d87c7
    Merge d4999d418c into c5f14dc880 Willem Toorop 2026-04-03 20:33:35 +0000
  • b3eaf04d95
    Merge 4436251a0c into c5f14dc880 Andy Warner 2026-04-02 10:07:40 -0600
  • 4436251a0c
    Merge pull request #2 from aww-aww/aww-aww-patch-1 Andy Warner 2026-04-02 10:03:22 -0600
  • 62e17336ab
    Refactor to use local write functions in pp_init Andy Warner 2026-04-02 09:59:43 -0600
  • 4c0384ecd7
    Merge branch 'NLnetLabs:master' into master Andy Warner 2026-04-02 09:40:31 -0600
  • 0b4502a346
    Add atomic operations for write functions in pp_init Andy Warner 2026-04-02 09:40:04 -0600
  • bfaa024d1d
    Merge d42138976d into c5f14dc880 Ryan R Sundberg 2026-04-02 10:54:47 +0000
  • 219fd2ab6a
    Merge c66c86e95a into c5f14dc880 Wouter Wijngaards 2026-04-02 08:41:45 +0000
  • c66c86e95a - add-prometheus-metrics, fix unit test. add-prometheus-metrics W.C.A. Wijngaards 2026-04-02 10:41:33 +0200
  • b2590c2022 - add-prometheus-metrics, set metrics to type 'counter', for number of query metrics, and do not reset the stats. There is a warning when statistics-cumulative has the wrong value. But the stats are not reset from the metrics endpoint regardless. The contrib/metrics.awk script is also updated, and the documentation recommends the cumulative setting. W.C.A. Wijngaards 2026-04-02 10:37:56 +0200
  • 8f5058e53b
    Merge 34d0b93c71 into c5f14dc880 Yorgos Thessalonikefs 2026-03-31 09:23:13 +0000
  • 651890bba6
    Merge feb101bc70 into c5f14dc880 David Gwynne 2026-03-31 08:06:12 +0000
  • f6e77bb816
    Merge bc31a34416 into c5f14dc880 Toria 2026-03-31 07:16:47 +0000
  • 568e4b0adb
    Merge 1aa8519b39 into c5f14dc880 R. Christian McDonald 2026-03-31 03:04:48 +0000
  • 7fa1e5cc8b
    Centralize regional_free_all calls preceeding send_reply and send_reply_rc calls into send_reply_rc Phil Porada 2026-03-30 10:41:51 -0700
  • 286494366c - add-prometheus-metrics, fix shm stats to also use the mem info function. W.C.A. Wijngaards 2026-03-30 16:23:25 +0200
  • 53724c9e7b Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-03-30 16:19:11 +0200
  • c5f14dc880 Changelog comment for #1408 - Merge #1408: Fix shared memory stats with threads. master W.C.A. Wijngaards 2026-03-30 16:15:32 +0200
  • a2ace114de
    Fix shared memory stats with threads (#1408) Wouter Wijngaards 2026-03-30 16:13:11 +0200
  • 3031271efc
    Merge pull request #1427 from NLnetLabs/stats-shm-volley-review stats-shm-volley Yorgos Thessalonikefs 2026-03-30 16:07:55 +0200
  • d709481cf2 - stats-shm-volley review, typos and slightly more detailed text for comments. Yorgos Thessalonikefs 2026-03-30 14:39:44 +0200
  • df9ca81e83
    Merge fd4af23351 into 2e9b880718 zebop117 2026-03-29 01:00:42 +0000
  • d6976de368
    Merge 3212426574 into 2e9b880718 R. Christian McDonald 2026-03-28 12:07:54 +0000
  • 90b5fea1cf
    Merge 2ffc17e826 into 2e9b880718 Willem Toorop 2026-03-28 12:02:01 +0000
  • db1d430a74
    Merge f7c180b4ed into 2e9b880718 J. Dekker 2026-03-28 05:30:18 +0000
  • c372e8d576
    Merge 7e9d9b03a4 into 2e9b880718 Petr Menšík 2026-03-27 21:30:46 +0000
  • d4999d418c
    Apply suggestions from code review Willem Toorop 2026-03-27 16:03:40 +0100
  • 2e9b880718 - Fix defense in depth for service callback with empty packet. W.C.A. Wijngaards 2026-03-27 15:42:45 +0100
  • a0ec6cd946 - Fix test code to allow empty hex answer packets from testbound. W.C.A. Wijngaards 2026-03-27 15:39:27 +0100
  • ef8184cfe4
    Merge e3263636d3 into ea36979c40 DavidKorczynski 2026-03-27 14:03:59 +0000
  • ea36979c40 - Fix to allow the control-interface config to use ip@port notation. W.C.A. Wijngaards 2026-03-27 14:29:15 +0100
  • 9a01a32176 - add-prometheus-metrics, fix clang analyzer warning about allocation size. W.C.A. Wijngaards 2026-03-27 14:05:14 +0100
  • da1758ae82
    Merge b43a7c86e0 into 315077b9e6 jeepingben 2026-03-27 12:34:14 +0000
  • 08e4560065 Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-03-27 11:48:16 +0100
  • 86d4414a22 - add-prometheus-metrics, allow interface names, and ip@port notation. add documentation in man page, and in the example config file. W.C.A. Wijngaards 2026-03-27 11:47:20 +0100
  • 6eab2fb040
    Merge 2805bfd250 into 315077b9e6 Russell McConnachie 2026-03-27 06:34:38 +0000
  • 027af3b0d3 enforce linux line endings for Docker Support zakski 2026-03-25 22:43:00 +0000
  • 99e77cf2cb
    Merge 4b8686f1f1 into 315077b9e6 TomasKorbar 2026-03-25 17:20:46 +0800
  • 315077b9e6 - Fix to check for invalid http content length and chunk size, and to check the RR rdata field lengths when decompressing and inserting RRs from an authority zone transfer. This stops large memory use and heap buffer-overflow read errors. Thanks to Haruto Kimura (Stella) for the report. W.C.A. Wijngaards 2026-03-24 08:45:52 +0100
  • 9e00cbcd47
    Merge f2a2d9c1e9 into 535d899bef Paul Menzel 2026-03-22 10:34:03 +0800
  • 535d899bef - Fix for testcode pktview to check buffer size and log errors. W.C.A. Wijngaards 2026-03-20 15:57:46 +0100
  • 7994365385 Send along ETag with auth zone xfrs over http Willem Toorop 2026-03-14 16:28:31 +0800
  • 8656cfd4c8 - Fix to add tls-service-key to memory printout for fast_reload. W.C.A. Wijngaards 2026-03-13 16:49:34 +0100
  • 8f44ddb7de - Fix detection of http listening port in fast_reload. W.C.A. Wijngaards 2026-03-13 16:37:41 +0100
  • 4484dc3954 - For #278: fast_reload can reload tls-service-key, tls-service-pem and tls-cert-bundle changes. It checks the modification time of the tls-service-key and tls-service-pem files for update. W.C.A. Wijngaards 2026-03-13 16:25:42 +0100
  • eb3bba0724 - iana portlist updated. W.C.A. Wijngaards 2026-03-13 12:05:33 +0100
  • 2eff1d8ab5 - Fix #278: DoT: complete unbound restart required on certificate renew. Fix so that a reload checks if the files have changed, and if so, reload the contexts. Also for DoH, DoQ and outgoing DoT. W.C.A. Wijngaards 2026-03-13 11:42:34 +0100
  • 4672fa5b53 - Fix to ignore out-of-zone DNAME records for CNAME synthesis. Thanks to Yuxiao Wu, Yiyi Wang, Zhang Chao, Baojun Liu, and Haixin Duan from Tsinghua University. Yorgos Thessalonikefs 2026-03-13 11:28:32 +0100
  • 14e08c481e
    Merge 7ee8ba3794 into 18029fc44f WolverinDEV 2026-03-13 07:40:51 +0000
  • e5dd708a44
    Merge 98b0e6f80a into 18029fc44f 张欣接 2026-03-13 07:01:24 +0000
  • 94679ce6fa
    Merge da001489be into 18029fc44f Yorgos Thessalonikefs 2026-03-10 03:42:58 +0100
  • 18029fc44f Changelog comment for #1418 - Merge #1418: Apply cache TTL policy to DNAME and synthesized CNAME on wire path. W.C.A. Wijngaards 2026-03-09 13:54:37 +0100
  • 5c6f56f8f1
    Apply cache TTL policy to DNAME and synthesized CNAME on wire path (#1418) Arunabha Das 2026-03-09 18:23:52 +0530
  • 9af29c3ed1 - Fix compile failure in unbound-checkconf for older gcc compiler. W.C.A. Wijngaards 2026-03-09 09:18:43 +0100
  • 4263cc8eff Apply cache TTL policy to DNAME and synthesized CNAME on wire path Arunabha Das 2026-03-06 18:15:26 +0000
  • 76ef8c5803 - Constrain the explicit macros for remote.c:fr_atomic_copy_cfg(). Yorgos Thessalonikefs 2026-03-06 17:27:21 +0100
  • 94ef1a8fee - Warn for unused 'nodefault' local-zone configuration in unbound-checkconf (related to #1416). Yorgos Thessalonikefs 2026-03-06 17:05:57 +0100
  • 683241a2f5 - Document the suggestion for a higher value for 'outgoing-range'; helps when the request list is full. Yorgos Thessalonikefs 2026-03-06 17:01:41 +0100
  • 92ab54641e Changelog entry for #1415 - Merge #1415: Add lock unlock for view in memory error handling. W.C.A. Wijngaards 2026-03-06 08:58:33 +0100
  • da3812953a
    Add lock unlock for view in memory error handling (#1415) Andy Warner 2026-03-06 00:57:54 -0700
  • a960268ce4
    Add lock unlock for view in memory error handling Andy Warner 2026-03-05 17:10:27 -0700
  • 1bd7c8dfee - Update generated man pages. W.C.A. Wijngaards 2026-03-05 12:15:54 +0100
  • 8f96ae7acf - Fix for DNS Rebinding Bypass via SVCB/HTTPS Records in Unbound. Thanks to Kunta Chu, School of Software, Tsinghua University, Taofei Guo, Peking University, and Jianjun Chen, Institute for Network Sciences and Cyberspace, Tsinghua University for the report. The private-address option is fixed to also elide SVCB and HTTPS records that match the filter. W.C.A. Wijngaards 2026-03-05 09:47:13 +0100
  • 1f6e67e653 Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-03-04 16:41:54 +0100
  • c4f8e60c85 - For #1411: Introduce a failing case in the rpl test so that it only passes with the fix in place. Yorgos Thessalonikefs 2026-03-04 13:22:42 +0100
  • b96d80a5d3 - add-prometheus-metrics, consolidate mem stats. W.C.A. Wijngaards 2026-03-04 10:02:09 +0100
  • 0b42d5ba13 Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-03-03 17:51:03 +0100
  • a296b248b0 - For #1411: Fix that the lookup for DNAME uses flag. Fix assertion in expired calc debug routine. W.C.A. Wijngaards 2026-03-03 17:44:31 +0100
  • efc0c1e990 - add-prometheus-metrics, implement further test checks. W.C.A. Wijngaards 2026-03-03 16:54:48 +0100
  • b0b8a3f144 - add-prometheus-metrics, fix by rcode text. W.C.A. Wijngaards 2026-03-03 16:24:24 +0100
  • 172e4a9edb Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-03-03 16:07:29 +0100
  • 2c5e96f86c - add-prometheus-metrics, print extended statistics. W.C.A. Wijngaards 2026-03-03 16:07:03 +0100
  • 1ef131299a For #1411, fix up doc/Changelog. W.C.A. Wijngaards 2026-03-03 08:55:56 +0100
  • 5b58a872ef
    Allow synthesized DNAME TTL=0 to be served from cache within grace period (#1411) Arunabha Das 2026-03-03 13:21:31 +0530
  • ad97940d39 - Fix #1412: local zone data bypassed during CNAME chain resolution with forwarders. Punith Kumar S 2026-03-02 04:13:11 +0000
  • 253aa25fda Add iter_dname_ttl0.rpl replay test for DNAME TTL=0 Tests signed DNAME with TTL=0 and RRSIG Original TTL=0 (RFC 4034). Verifies end-to-end handling of TTL=0 DNAME responses. arunabha 2026-02-28 07:41:00 +0000
  • 9dbc23ac02 Allow synthesized DNAME TTL=0 to be served from cache within grace period arunabha 2026-02-28 05:23:50 +0000
  • d3902c0e70 Merge branch 'master' into add-prometheus-metrics W.C.A. Wijngaards 2026-02-27 17:12:44 +0100
  • 35e3dcb701 - add-prometheus-metrics, print histogram of reply time stats. W.C.A. Wijngaards 2026-02-27 17:12:09 +0100
  • 415a83e9d5 - add-prometheus-metrics, print memory usage stats. W.C.A. Wijngaards 2026-02-27 17:05:44 +0100
  • 94b04d6d46 - Update generated man pages. W.C.A. Wijngaards 2026-02-27 14:33:55 +0100
  • f1a65eb4e8 For #1409: Changelog entry and more text. W.C.A. Wijngaards 2026-02-27 13:55:25 +0100
  • 38e1e3eec3
    Documentation CNAME in redirect-type local-zone (#1409) Daisuke HIGASHI 2026-02-27 21:37:56 +0900
  • bff3d762ff - Fix validator to set unchecked when validation recursion requests are passed. The edns subnet module checks if validation is needed for a cache response, and set the validator to protect the cache with validation for non-subnet lookups. W.C.A. Wijngaards 2026-02-25 10:59:33 +0100
  • fb322f3e87 - Fixed some typos reported in #1395 by rezky_nightky. Yorgos Thessalonikefs 2026-02-23 16:17:40 +0100
  • 2feee13735 - Fix to disallow cache lookup/store in external cachedb when a forwarder/stub forbids it with the no-cache option. Yorgos Thessalonikefs 2026-02-23 14:35:50 +0100
  • 1d36696462 - Fix to make the cachedb_val_expired.crpl succeed. W.C.A. Wijngaards 2026-02-23 12:52:10 +0100
  • aa4e2a9e69 - Fix to have cachedb not return expired bogus data as non-bogus. W.C.A. Wijngaards 2026-02-23 12:45:14 +0100
  • 32146c2968 Documentation CNAME in redirect-type local-zone hdais 2026-02-21 23:20:40 +0900
  • daddd079ef - stats-shm-volley, the array is inited for a new round if one or more threads are not responsive for stat collection. W.C.A. Wijngaards 2026-02-20 12:02:34 +0100
  • fcdec027e1 - stats-shm-volley, the array is inited for a new round if one or more W.C.A. Wijngaards 2026-02-20 12:00:56 +0100
  • 1f24a5b7af - stats-shm-volley, stat totals in separate struct. The first thread zeroes it, and the last thread copies it. W.C.A. Wijngaards 2026-02-20 11:53:55 +0100
  • e4126445f2 - stats-shm-volley, the stat interval is selected with offset. W.C.A. Wijngaards 2026-02-20 10:14:32 +0100
  • 5f16955db0 - stats-shm-volley, with mesh_time_median the additions add up to the correct average that is used. W.C.A. Wijngaards 2026-02-20 09:34:52 +0100
  • 8e04d04949 - For #1405: local-zone always_refuse also blocks queries of type DS. W.C.A. Wijngaards 2026-02-17 15:36:08 +0100
  • c5627dbd52 - Fix to remove unused conditional from cookie timestamp at worker env. W.C.A. Wijngaards 2026-02-17 11:15:15 +0100
  • 014ed9c5ff - Fix that cachedb aggressive negative responses have the RA flag set. W.C.A. Wijngaards 2026-02-16 16:35:37 +0100
  • da001489be
    Review comment for checking out of memory condition features/tls-protocols Yorgos Thessalonikefs 2026-02-16 16:28:58 +0100
  • 16e1e6d375 - Fix #1404: Priming the root key fails after loading ipfire.org RPZ zones. Fixed by including the ZONEMD RRtype in the list of types to ignore for RPZ zones. Analysis and patch provided by ummeegge. Yorgos Thessalonikefs 2026-02-16 13:37:19 +0100