Commit Graph

880 Commits

Author SHA1 Message Date
Mark Andrews
8fc1b0bf4d add closing tag 2015-09-29 08:36:05 +10:00
Witold Krecicki
e6d0a391f5 4223. [func] Add support for setting max-cache-size to percentage
of available physical memory, set default to 90%.
			[RT #38442]
2015-09-28 11:08:50 +02:00
Mark Andrews
98a7f8c7ae 4222. [func] Bias IPv6 servers when selecting the next server to
query. [RT #40836]
2015-09-28 18:57:19 +10:00
Evan Hunt
72c2a84e77 [master] comment no longer needed 2015-09-21 13:17:20 -07:00
Evan Hunt
00b4840c36 [master] named.conf and lwresd man pages missing from ARM 2015-09-21 13:15:07 -07:00
Jeremy C. Reed
5c41d47227 Improve docs for zone-statistics
This is for ticket #36955.
Improve grammar for zone-statistics to list new arguments.
Refer to the docs in the options section.
Clarify about stats may not show view name.
2015-09-21 10:06:15 -05:00
Jeremy C. Reed
f48280a996 Merge branch 'rt39570'
Note I didn't add a changelog entry. The documentation was already
there and only modified a little.
2015-09-21 08:56:07 -05:00
Mark Andrews
f6e45a5c54 4217. [protocol] Add support for CSYNC. [RT #40532] 2015-09-18 23:45:12 +10:00
Mark Andrews
e0a30050c8 4214. [protocol] Add support for TALINK. [RT #40544] 2015-09-18 07:43:43 +10:00
Evan Hunt
9e86fc48e0 [master] some options were in the wrong section of the ARM 2015-09-17 09:33:52 -07:00
Jeremy C. Reed
f07aac8639 fix docbook tag mistake
Fix my mistake in my new branch that I just introduced.
2015-09-16 10:40:02 -05:00
Jeremy C. Reed
205c17fd0d improve the nocookie-udp-size documentation 2015-09-16 11:34:56 -04:00
Jeremy C. Reed
ed15792642 move the nocookie-udp-size from server statement to options 2015-09-16 11:25:21 -04:00
Jeremy C. Reed
7d2c4d1c9f document zone "type" in the ARM
This is for ticket #39577
It only added two sentences so didn't update changelog.
2015-09-16 09:50:29 -05:00
Jeremy C. Reed
456ef30acb remove the only section in the history appendix to workaround dblatex issue
dblatex generated LaTeX that failed with the "id" for link reference
in the sect1 when itr had no <title> to reference.
(A workaround is to set a <title>.)
But since this appendix only had one section
and looked off to have B1 with no title and no B2, just remove the
sect1 tags.
I added the id to the first <para> tag just in case someone uses
it to link.
Note I didn't reformat the content there.

I didn't get this reviewed as was trivial change.
2015-09-16 09:42:08 -05:00
Jeremy C. Reed
6db5cee19c add docbook tag for dns64 suffix value
add missing docbook formatting.
Note the element is standard, but that can be fixed in bulk later.
2015-09-11 13:33:55 -05:00
Jeremy C. Reed
a9695fcdcb add nxdomain-redirect to options grammar
I just used "string" as the value type.
There is no real order here so just put by another "nxdomain" option.
This was not reviewed.
This is for ticket #39384 which also considers other work.
2015-09-11 13:04:06 -05:00
Mark Andrews
5a49f61ca9 4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
[RT #40545] [RT #40547] [RT #40561] [RT #40563]
2015-09-11 17:35:01 +10:00
Mark Andrews
a0ef8211d3 4201. [func] The default preferred-glue is now the address record
type of the transport the query was received
                        over.  [RT #40468]
2015-09-11 13:27:58 +10:00
Mark Andrews
329073f6b8 add NINFO and RKEY 2015-09-11 11:40:44 +10:00
Jeremy C. Reed
4eb29d8984 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-09-10 09:34:37 -05:00
Jeremy C. Reed
c0fc4a1abd add missing space
noticed in manual review of the PDF
minor so wasn't reviewed
2015-09-10 09:32:29 -05:00
Mark Andrews
3dd63ba00f 4199. [protocol] Add support for NINFO, RKEY, TA.
[RT #40545] [RT #40547] [RT #40563]
2015-09-10 17:58:29 +10:00
Mark Andrews
4ca7391e64 4196. [doc] Improve how "enum + other" types are documented.
[RT #40608]

4195.   [bug]           'max-zone-ttl unlimited;' was broken. [RT #40608]
2015-09-09 17:02:11 +10:00
Jeremy C. Reed
176b2c47db fix grammar for keys to use key_id
This is for ticket #23009.
Remove statement about grammar too.
No CHANGES entry done.
2015-09-08 15:15:42 -05:00
Jeremy C. Reed
4de43d2854 improve dnssec-enable and dnssec-validation documentation
This is for #37362
Okayed via jabber
No CHANGES entry
2015-09-08 15:53:58 -04:00
Jeremy C. Reed
1a2469058c mention seconds for max-zone-ttl, max-cache-ttl, min-refresh-time, max-policy-ttl in ARM
This is for ticket 38106.
The initial patch was okayed, but then another commenter mentioned
that max-zone-ttl also allows TTL units so I mention that also
without review.
Note for the ticket, resolver-query-timeout change was
already handled last month in my commit 8789f39b
2015-09-04 14:30:48 -04:00
Jeremy C. Reed
1c2152e58f fix missing space (noticed in April, bug 39228) and fix grammar 2015-09-04 13:59:35 -04:00
Jeremy C. Reed
0d0e6f70ba grammar 2015-08-31 10:21:35 -05:00
Mark Andrews
483f1611fc update list of supported types in the ARM 2015-08-31 15:15:55 +10:00
Jeremy C. Reed
8789f39b12 mention resolver-query-timeout is in "seconds"
I didn't get this reviewed but looked at source where
dns_resolver_settimeout value is called "seconds"
and the comments for the maximum and default macros say "seconds".
2015-08-20 15:36:27 -05:00
Mark Andrews
c631ff56bf Updated CHANGES note to include require-server-cookie:
4152.   [func]          Implement DNS COOKIE option.  This replaces the
                        experimental SIT option of BIND 9.10.  The following
                        named.conf directives are available: send-cookie,
                        cookie-secret, cookie-algorithm, nocookie-udp-size
                        and require-server-cookie.  The following dig options
                        are available: +[no]cookie[=value] and +[no]badcookie.
                        [RT #39928]
2015-08-13 08:26:23 +10:00
Jeremy C. Reed
658b0ec21c fix spelling typo 2015-08-07 12:31:55 -04:00
Mark Andrews
98869e60fa whitespace 2015-07-23 17:56:03 +10:00
Evan Hunt
8a205b4534 [master] remove accidentally duplicated section on clients-per-query 2015-07-20 15:25:28 -07:00
Mark Andrews
84114ec4c7 request-nsid -> request-sit 2015-07-15 08:38:08 +10:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:53:39 -07:00
Evan Hunt
70d987def5 [master] traffic size stats
4156.	[func]		Added statistics counters to track the sizes
			of incoming queries and outgoing responses in
			histogram buckets, as specified in RSSAC002.
			[RT #39049]
2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
2015-07-06 09:44:24 +10:00
Mark Andrews
aa3bffca69 whitespace 2015-07-04 12:50:29 +10:00
Witold Krecicki
f10a67dad2 Add statistics counters for nxdomain redirections. [RT #39790] 2015-06-25 09:21:50 +02:00
Witold Krecicki
6a3249533a fix rpz-client-ip documentation [RT #39783] 2015-06-19 10:23:53 +02:00
Mark Andrews
94f7158d44 update rpz doc as per rt39703 2015-06-05 11:13:02 +10:00
Mukund Sivaraman
b947e1a521 Fix a bug in RPZ that could cause unwanted recursion (#39229)
Conflicts:
	doc/arm/notes.xml
2015-05-07 08:29:36 +05:30
Mark Andrews
c82b378115 4108. [func] A additional nxdomain redirect (nxdomain-redirect)
method is now supported. [RT #37989]
2015-04-23 16:57:15 +10:00
Jeremy C. Reed
2637d30fbd docbook <command> tags around named server references 2015-04-13 11:46:35 -05:00
Mark Andrews
febb020dce 4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
[RT #39173]
2015-04-07 13:21:33 +10:00
Evan Hunt
1e15a048c0 [master] minor doc fixes 2015-04-06 13:48:29 -07:00
Mark Andrews
7b52254bf3 Add warning about configuration inheritence with in-view 2015-03-11 10:42:34 +11:00