]>
granicus.if.org Git - pdns/log
bert hubert [Thu, 14 Jun 2018 15:08:13 +0000 (17:08 +0200)]
fix up compilation on rhel6 for dedup speedup in auth
bert hubert [Thu, 14 Jun 2018 10:10:42 +0000 (12:10 +0200)]
Merge pull request #6730 from ahupowerdns/dedup-speedup
Implement a smarter dedup for filling packets in auth
Remi Gacogne [Wed, 13 Jun 2018 12:35:45 +0000 (14:35 +0200)]
Merge pull request #6735 from rgacogne/rpz-ixfr-api-tests-fix
rec: Add full AXFR in the middle of IXFR, API checks in RPZ tests
bert hubert [Wed, 13 Jun 2018 08:47:50 +0000 (10:47 +0200)]
speed up dedup code, use less memory
Remi Gacogne [Wed, 13 Jun 2018 07:24:35 +0000 (09:24 +0200)]
rec: Add full AXFR in the middle of IXFR, API checks in RPZ tests
Remi Gacogne [Tue, 12 Jun 2018 13:49:18 +0000 (15:49 +0200)]
Merge pull request #6722 from rgacogne/rec-rpz-ixfr-tests
rec: Add some regression tests for RPZ over AXFR and IXFR
bert hubert [Tue, 12 Jun 2018 13:30:56 +0000 (15:30 +0200)]
improve comments, clean up code a bit
bert hubert [Tue, 12 Jun 2018 13:18:12 +0000 (15:18 +0200)]
Implement a smarter dedup for filling packets in auth
Remi Gacogne [Tue, 12 Jun 2018 12:00:01 +0000 (14:00 +0200)]
Merge pull request #6715 from rgacogne/dnsdist-console-nokey
dnsdist: Refuse console connection without a proper key set
Remi Gacogne [Tue, 12 Jun 2018 11:51:24 +0000 (13:51 +0200)]
Merge pull request #6729 from rgacogne/packetcache-ttl-test-6578
auth: Increase the packet cache TTL in our unit tests
Remi Gacogne [Thu, 7 Jun 2018 16:57:03 +0000 (18:57 +0200)]
rec: Add some regression tests for RPZ over AXFR and IXFR
Remi Gacogne [Mon, 11 Jun 2018 15:36:36 +0000 (17:36 +0200)]
auth: Increase the packet cache TTL in our unit tests
Hopefully this will lower the risks of failure on slow hosts, like
our pi builder.
Remi Gacogne [Mon, 11 Jun 2018 13:36:00 +0000 (15:36 +0200)]
dnsdist: Mention earlier that libsodium is required for console encryption
Remi Gacogne [Mon, 11 Jun 2018 13:31:19 +0000 (15:31 +0200)]
dnsdist: Fix a typo in one of the console error messages
Remi Gacogne [Mon, 11 Jun 2018 13:02:31 +0000 (15:02 +0200)]
Merge pull request #6718 from rgacogne/dnsdist-web-decimals
dnsdist: Limit QPS and latency to two decimals in the web view
Remi Gacogne [Mon, 11 Jun 2018 07:37:51 +0000 (09:37 +0200)]
Merge pull request #6627 from rgacogne/rec-truncated-queries
rec: Drop queries truncated because they were larger than our buffer
Remi Gacogne [Fri, 8 Jun 2018 07:24:25 +0000 (09:24 +0200)]
Merge pull request #6563 from pieterlexis/dnsdist-droprate-in-API
dnsdist: show droprate in API output
bert hubert [Fri, 8 Jun 2018 06:44:15 +0000 (08:44 +0200)]
Merge pull request #6724 from setharnold/patch-7
add missing word 'impact' to the documentation
Remi Gacogne [Fri, 1 Jun 2018 10:07:11 +0000 (12:07 +0200)]
rec: Resize the incoming query buffer to 512 after each query
Remi Gacogne [Fri, 1 Jun 2018 10:05:15 +0000 (12:05 +0200)]
rec: Use a 512-byte buffer for incoming queries instead of 1500
Remi Gacogne [Fri, 18 May 2018 13:57:06 +0000 (15:57 +0200)]
rec: Drop queries truncated because they were larger than our buffer
setharnold [Fri, 8 Jun 2018 01:22:53 +0000 (18:22 -0700)]
add missing word 'impact'
Remi Gacogne [Thu, 7 Jun 2018 14:35:49 +0000 (16:35 +0200)]
Merge pull request #6716 from rgacogne/dnsdist-tcp-vector-size
dnsdist: Don't access the TCP buffer vector past its size
Remi Gacogne [Thu, 7 Jun 2018 13:30:58 +0000 (15:30 +0200)]
Merge pull request #6717 from phonedph1/patch-4
Update timedipsetrule.rst
Remi Gacogne [Wed, 6 Jun 2018 12:53:41 +0000 (14:53 +0200)]
dnsdist: Limit QPS and latency to two decimals in the web view
Remi Gacogne [Wed, 6 Jun 2018 12:32:33 +0000 (14:32 +0200)]
dnsdist: Clarify that local connections to the console should be encrypted too
Remi Gacogne [Wed, 6 Jun 2018 09:51:57 +0000 (11:51 +0200)]
Merge pull request #6711 from chbruyand/dnsdist-connection-close
dnsdist: default set "Connection: close" header for web requests
Remi Gacogne [Wed, 6 Jun 2018 09:51:31 +0000 (11:51 +0200)]
Merge pull request #6710 from rgacogne/dnsdist-dynblocks-duration-test
dnsdist: Test the content of dynamic blocks using the API
Remi Gacogne [Wed, 6 Jun 2018 08:34:44 +0000 (10:34 +0200)]
dnsdist: Remove left-over debug message in the console code
Charles-Henri Bruyand [Wed, 6 Jun 2018 06:49:39 +0000 (08:49 +0200)]
"Connection: close" is not a security header
phonedph1 [Wed, 6 Jun 2018 01:58:37 +0000 (19:58 -0600)]
Update timedipsetrule.rst
I think this makes more sense based on what it does and to match the overall description.
Also fix typo in differently.
Remi Gacogne [Tue, 5 Jun 2018 22:10:13 +0000 (00:10 +0200)]
dnsdist: Don't access the TCP buffer vector past its size
The required memory has been reserve()'d, but we are not allowed to
access it directly, and it breaks when compiled with the following
flag, checking any access to containers as if .at() were used:
-D_GLIBCXX_ASSERTIONS
Remi Gacogne [Tue, 5 Jun 2018 21:28:31 +0000 (23:28 +0200)]
dnsdist: Refuse console connection without a proper key set
Charles-Henri Bruyand [Tue, 5 Jun 2018 15:42:38 +0000 (17:42 +0200)]
dnsdist: default set "Connection: close" header for web requests
Remi Gacogne [Tue, 5 Jun 2018 11:49:07 +0000 (13:49 +0200)]
dnsdist: Test the content of dynamic blocks using the API
Remi Gacogne [Tue, 5 Jun 2018 07:29:32 +0000 (09:29 +0200)]
Merge pull request #6705 from ahupowerdns/recursor-tracelog-improv
slightly improve DNSSEC trace logging
Remi Gacogne [Tue, 5 Jun 2018 07:29:20 +0000 (09:29 +0200)]
Merge pull request #6707 from rgacogne/shadowed-vars
rec: Fix some warnings reported by GCC
Remi Gacogne [Mon, 4 Jun 2018 15:31:37 +0000 (17:31 +0200)]
Merge pull request #6706 from claranet/fix-dynblock-duration
Dynamic blocks were being created with the wrong duration
David Freedman [Mon, 4 Jun 2018 11:59:37 +0000 (12:59 +0100)]
Dynamic blocks were being created with the wrong duration (the detection interval was being used).
bert hubert [Mon, 4 Jun 2018 12:54:43 +0000 (14:54 +0200)]
slightly improve DNSSEC trace logging
Remi Gacogne [Mon, 4 Jun 2018 09:49:50 +0000 (11:49 +0200)]
Fix a GCC warning about strncpy()
We always NULL-terminate the string anyway, but let's make the
compiler happy.
Remi Gacogne [Mon, 4 Jun 2018 09:48:59 +0000 (11:48 +0200)]
Fix some shadowed variables reported by GCC with -Wshadow
Remi Gacogne [Fri, 1 Jun 2018 14:49:37 +0000 (16:49 +0200)]
Merge pull request #6701 from rgacogne/nits-cppcheck
Fix minor warnings reported by the compiler or cppcheck
Remi Gacogne [Tue, 29 May 2018 14:14:16 +0000 (16:14 +0200)]
rec: Remove unused lambda capture 'checkOnly' in the rpzMaster()
Remi Gacogne [Tue, 29 May 2018 14:13:44 +0000 (16:13 +0200)]
rec: Pass the remote logger to asyncresolve() by reference
Remi Gacogne [Tue, 29 May 2018 14:12:35 +0000 (16:12 +0200)]
auth: Pass signQName to getRRSIGsForRRSET / addSignature by ref
Remi Gacogne [Tue, 29 May 2018 14:11:57 +0000 (16:11 +0200)]
GeoIP: Fix a struct/class mixup
Remi Gacogne [Tue, 29 May 2018 14:11:04 +0000 (16:11 +0200)]
ixfrdist: Fix a NULL-pointer dereference on a non-existing UID
Reported by cppcheck.
Remi Gacogne [Fri, 1 Jun 2018 07:07:41 +0000 (09:07 +0200)]
Merge pull request #6699 from rgacogne/EDNS0Record-trivial
Revert EDNS0Record to a trivial type
Remi Gacogne [Thu, 31 May 2018 14:26:39 +0000 (16:26 +0200)]
Revert EDNS0Record to a trivial type
Adding brace initializers makes it non-trivial, which does not seem
like a very good idea for a packed structure.
gcc 8.1.0 complains with:
```
warning: ‘void* memcpy(void*, const void*, size_t)’ copying an object of non-trivial type ‘struct EDNS0Record’ from an array of ‘uint32_t’ {aka ‘unsigned int’} [-Wclass-memaccess]
memcpy(&stuff, &ttl, sizeof(stuff));
```
Peter van Dijk [Thu, 31 May 2018 10:54:00 +0000 (12:54 +0200)]
Merge pull request #6691 from zeha/dl-slaverenotify
pdns_control notify: handle slave w/o renotify properly
Remi Gacogne [Wed, 30 May 2018 10:02:22 +0000 (12:02 +0200)]
Merge pull request #6281 from pieterlexis/rec-server-id
Recursor: properly truncate with EDNS, do what `server-id` promises and add NSID support
Pieter Lexis [Fri, 18 May 2018 16:30:49 +0000 (18:30 +0200)]
rec: advertise 512 bytes as max query size
Pieter Lexis [Thu, 19 Apr 2018 09:01:13 +0000 (11:01 +0200)]
EDNS: ensure the NSID fits in the return packet
Pieter Lexis [Thu, 19 Apr 2018 08:49:56 +0000 (10:49 +0200)]
getEDNSOpts: use getRR
Pieter Lexis [Thu, 19 Apr 2018 08:27:00 +0000 (10:27 +0200)]
EDNS: Ensure not query processing happens on EDNS error
Pieter Lexis [Thu, 19 Apr 2018 08:10:07 +0000 (10:10 +0200)]
More EDNS tests
Pieter Lexis [Tue, 17 Apr 2018 16:27:40 +0000 (18:27 +0200)]
rec: initialize variableAnswer with dc->d_variable
Pieter Lexis [Tue, 17 Apr 2018 16:13:17 +0000 (18:13 +0200)]
EDNS trunc test: add <512 bytes test
Pieter Lexis [Tue, 17 Apr 2018 16:10:50 +0000 (18:10 +0200)]
EDNS trunc test: fix table
Pieter Lexis [Tue, 17 Apr 2018 14:40:48 +0000 (16:40 +0200)]
EDNS: rename Z to extFlags, use uints
Also, constlify some EDNS related functions.
Pieter Lexis [Tue, 17 Apr 2018 13:45:25 +0000 (15:45 +0200)]
dnswriter: use uint for extended rcode
Pieter Lexis [Wed, 11 Apr 2018 16:00:35 +0000 (18:00 +0200)]
Add truncation tests with and without EDNS
Pieter Lexis [Mon, 9 Apr 2018 13:55:00 +0000 (15:55 +0200)]
call getHostname
Pieter Lexis [Wed, 4 Apr 2018 10:42:29 +0000 (12:42 +0200)]
Fix review comments
Pieter Lexis [Thu, 22 Mar 2018 11:48:55 +0000 (12:48 +0100)]
Add tests for NSID and version.bind
Pieter Lexis [Thu, 22 Mar 2018 10:59:07 +0000 (11:59 +0100)]
Fix truncation threshold
Pieter Lexis [Wed, 21 Mar 2018 15:17:54 +0000 (16:17 +0100)]
Leave bitshifting Extended RCode to addOpt
Pieter Lexis [Wed, 21 Mar 2018 14:43:06 +0000 (15:43 +0100)]
Allow running the edns1 test on python 3
Pieter Lexis [Tue, 20 Feb 2018 23:43:38 +0000 (00:43 +0100)]
rec: Add EDNS OPT record to packet when the client sent one
Also, Ensure we reply with BADVERS when the EDNS version is not 0.
Pieter Lexis [Tue, 20 Feb 2018 17:06:46 +0000 (18:06 +0100)]
recursor: Check size when adding the OPT RR
Pieter Lexis [Tue, 20 Feb 2018 09:26:04 +0000 (10:26 +0100)]
auth: guard gethosntame call
Pieter Lexis [Tue, 20 Feb 2018 09:23:30 +0000 (10:23 +0100)]
rec NSID: guard the call to gethostname
Pieter Lexis [Tue, 20 Feb 2018 09:20:13 +0000 (10:20 +0100)]
rec NSID: Fix two nits
Pieter Lexis [Mon, 19 Feb 2018 16:24:40 +0000 (17:24 +0100)]
recursor: Update server-id docs
Pieter Lexis [Mon, 19 Feb 2018 16:19:22 +0000 (17:19 +0100)]
recursor: Allow disabling NSID and id.server
As is the case with the auth.
Pieter Lexis [Mon, 19 Feb 2018 16:15:28 +0000 (17:15 +0100)]
recursor: actually default to hostname for id.server
Pieter Lexis [Mon, 19 Feb 2018 16:07:52 +0000 (17:07 +0100)]
recursor: Add NSID support
Pieter Lexis [Tue, 29 May 2018 13:16:01 +0000 (15:16 +0200)]
Add a changed entry to the Server Object
Pieter Lexis [Tue, 29 May 2018 13:11:43 +0000 (15:11 +0200)]
Add API droprate to tests
Klaus Darilion [Tue, 24 May 2016 13:23:56 +0000 (13:23 +0000)]
pdns_control notify: make sure PDNS is either master, or slave with renotify
(cherry picked from commit
e64b1e21a4090316c06ef9b7112092db6bb4feff )
Remi Gacogne [Tue, 29 May 2018 10:42:38 +0000 (12:42 +0200)]
Merge pull request #6688 from rgacogne/dnsdist-const-ds-remote
dnsdist: Mark the remote member of DownstreamState as const
Pieter Lexis [Tue, 29 May 2018 09:08:17 +0000 (11:08 +0200)]
Merge pull request #6628 from Habbie/camel-diet
implement the EDNS camel diet (draft-spacek-edns-camel-diet)
Pieter Lexis [Tue, 29 May 2018 09:07:57 +0000 (11:07 +0200)]
Merge pull request #6653 from mind04/entsfrom-glue
pdnsutil: occlusion and auth check improvements
Pieter Lexis [Tue, 29 May 2018 09:07:42 +0000 (11:07 +0200)]
Merge pull request #6655 from chbruyand/auth-cds-cdnskey-rrsig
auth: sign CDS/CDNSKEY RRsets with the KSK
Pieter Lexis [Tue, 29 May 2018 09:07:27 +0000 (11:07 +0200)]
Merge pull request #6658 from chbruyand/luawrapper-stdexception
luawrapper: report caught std::exception as lua_error
Pieter Lexis [Tue, 29 May 2018 09:07:08 +0000 (11:07 +0200)]
Merge pull request #6672 from rgacogne/dnsdist-reconnect-health
dnsdist: Fix reconnection handling
Pieter Lexis [Tue, 29 May 2018 09:06:53 +0000 (11:06 +0200)]
Merge pull request #6674 from rgacogne/dnsdist-clean-maxqpsip
dnsdist: Remove 'expired' states from MaxQPSIPRule
Pieter Lexis [Tue, 29 May 2018 09:06:30 +0000 (11:06 +0200)]
Merge pull request #6680 from ossobv/docs-configure-fix
docs: Fix ./configure example, add --disable-lua-records
Pieter Lexis [Tue, 29 May 2018 09:06:20 +0000 (11:06 +0200)]
Merge pull request #6681 from ossobv/docs-recursordist-settings-rst-warn
docs: Add extra LF to settings.rst to squash sphinx warning
Pieter Lexis [Tue, 29 May 2018 09:06:10 +0000 (11:06 +0200)]
Merge pull request #6684 from zeha/dnsdist-tostring
dnsdist: Expose toString of various objects to Lua
Pieter Lexis [Tue, 29 May 2018 09:05:39 +0000 (11:05 +0200)]
Merge pull request #6686 from zeha/missing-qtypes
Initialize some missed qtypes
Pieter Lexis [Tue, 29 May 2018 09:05:26 +0000 (11:05 +0200)]
Merge pull request #6687 from rgacogne/travis-sanitizers
Enable Address (dnsdist, rec) and Undefined Behavior (dnsdist) Sanitizers in Travis
Remi Gacogne [Mon, 28 May 2018 21:11:22 +0000 (23:11 +0200)]
dnsdist: Constify more members of TCPClientCollection, DownstreamState
Remi Gacogne [Mon, 28 May 2018 16:29:58 +0000 (18:29 +0200)]
dnsdist: Mark the remote member of DownstreamState as const
Remi Gacogne [Mon, 28 May 2018 16:10:05 +0000 (18:10 +0200)]
rec: Fix a typo in one comment of the negative cache unit tests
Remi Gacogne [Mon, 28 May 2018 16:05:52 +0000 (18:05 +0200)]
rec: Fix a memory leak in the negative cache unit tests
Remi Gacogne [Mon, 28 May 2018 09:30:50 +0000 (11:30 +0200)]
Travis: The default clang is now recent enough, don't force it
Travis switched to 5.0.0 while we were still forcing it to 3.6 for
the recursor, since the previous default was 3.5 which was too old.
Remi Gacogne [Mon, 28 May 2018 07:57:14 +0000 (09:57 +0200)]
Enable Address (dnsdist, rec) and Undefined Behavior (dnsdist) Sanitizers
Enabling UBSAN for the rec triggers a weird linking error in Travis:
> clang-5.0: error: linker command failed with exit code 1 (use -v to see invocation)
I haven't been able to reproduce it, it might just be an OOM.
Chris Hofstaedtler [Mon, 28 May 2018 14:51:03 +0000 (16:51 +0200)]
Initialize some missed qtypes