Commit Graph

613 Commits

Author SHA1 Message Date
Evan Hunt
9183f4d5fe [v9_9] better reporting of xml/json unavailability
- error if "configure --with-libxml2" but the library isn't available
2015-08-12 22:00:17 -07:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 23:00:58 -07:00
Mukund Sivaraman
eb2c433d1f Add prereq.sh check for --enable-newstats 2015-06-30 14:45:27 +05:30
Mukund Sivaraman
fc0797977d Fix a bug printing zone names with '/' character in XML and JSON stats (#39873)
(cherry picked from commit 08f0129732)

Conflicts:
	bin/tests/system/statistics/clean.sh

(cherry picked from commit f69f188b90)

Conflicts:
	bin/named/statschannel.c
	bin/tests/system/statistics/clean.sh
	bin/tests/system/statistics/ns1/named.conf
	bin/tests/system/statistics/tests.sh

Conflicts:
	CHANGES
2015-06-30 14:45:13 +05:30
Mark Andrews
fcac756e85 all of NEED*PRINT are needed if %z is not supported
(cherry picked from commit 7507c1826f)
2015-05-22 22:14:07 +10:00
Mark Andrews
03e0f9f78c add print.o/print.c forn ISC_PLATFORM_NEEDPRINTF abd ISC_PLATFORM_NEEDFPRINTF
(cherry picked from commit 83a938d0f9)
2015-05-22 13:32:59 +10:00
Evan Hunt
c65022d938 [v9_9] add %z format options to printf
4123.	[port]		Added %z (size_t) format options to the portable
			internal printf/sprintf implementation. [RT #39586]

(cherry picked from commit cadf8d687b)
2015-05-21 14:56:40 -07:00
Evan Hunt
3f050b6930 [v9_9] improve readline support
4106.	[port]		Improve readline support. [RT #38938]
2015-04-17 15:32:58 -07:00
Francis Dupont
88460e9cfc fixed test == bugs for PYTHON 2015-04-17 05:04:05 +02:00
Mark Andrews
61f5aaa50e 4099. [port] clang: make unknown commandline options hard errors
when determining what options are supported.
                        [RT #39273]

(cherry picked from commit e840f92bfb)
2015-04-15 12:40:26 +10:00
Mark Andrews
fa4e26234c 4095. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
[RT #38828]

(cherry picked from commit 77b179cbbe)
2015-03-09 23:07:55 +11:00
Mukund Sivaraman
5d9f7fcf62 Update win32 configure for --enable-querytrace (#37520)
Also enable querytrace when --enable-developer is specified.

(cherry picked from commit 84f95ddb25)
(cherry picked from commit 5ec24730f9)

Conflicts:
	config.h.win32
	win32utils/Configure
2015-03-02 13:01:19 +05:30
Evan Hunt
9fc649c969 [v9_9] include dso.h when testing DSO_METHOD_dlfcn 2015-02-27 09:06:36 -08:00
Mukund Sivaraman
e62afa3177 Add a --enable-querytrace configure switch for very verbose query tracelogging (#37520)
(cherry picked from commit 1783676a64)
(cherry picked from commit b83c20df65)

Conflicts:
	CHANGES
	config.h.in
	configure
	configure.in
2015-02-26 17:04:18 +05:30
Evan Hunt
57f015bd2a [v9_9] clean up gcc -Wshadow warnings
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
2015-01-20 14:55:41 -08:00
Evan Hunt
7b1767cc76 [v9_9] backport gperftools
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
2015-01-10 00:19:19 -08:00
Evan Hunt
265ad0d3e4 [v9_9] clean up release note stylesheets 2015-01-07 17:29:37 -08:00
Mark Andrews
6e140f9d04 4025. [port] bsdi: failed to build. [RT #38047]
(cherry picked from commit 00bb9b88cecf7e2c365c9f008c049da3802ac415)
2014-12-19 12:04:41 +11:00
Francis Dupont
cb5b973a9e Hardened OpenSSL digest/HMAC calls [RT #37944] 2014-12-02 12:58:05 +01:00
Evan Hunt
26ab7458b5 [v9_9] [rt37398] version string in ARM page footers
3986.	[doc]		Add the BIND version number to page footers
			in the ARM. [RT #37398]

(cherry picked from commit dd66b77417)
2014-10-20 23:35:35 -07:00
Evan Hunt
2e64bae120 [v9_9] include relnotes in doc
3982.	[doc]		Include release notes in product documentation.
			[RT #37272]

(cherry picked from commit 90e0af6bc6)
2014-10-20 12:50:58 -07:00
Evan Hunt
ea4e9ef83b [v9_9] update contact info in README and confiure --help 2014-09-16 12:27:20 -07:00
Evan Hunt
38398c590a [v9_9] [rt36786] use INSTALL_PROGRAM for shared libs
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]

(cherry picked from commit f687e639f0)
2014-09-05 10:28:57 -07:00
Evan Hunt
be52ed7a85 [v9_9] improve python probing
3946.	[cleanup]	Improved "configure" search for a python interpreter.
			[RT #36992]

(cherry picked from commit 523f3d6302)
2014-09-05 10:20:58 -07:00
Evan Hunt
039e58e905 [v9_9] [rt37057] server-id tests
3944.	[test]		Added a regression test for "server-id". [RT #37057]

(cherry picked from commit c9e976dc43)
(cherry picked from commit 9f6a6d24dc)
2014-09-05 10:12:28 -07:00
Mark Andrews
4014adc78b 3923. [bug] Sanity check the xml2-config output. [RT #22246]
(cherry picked from commit 53f91cbd80)
2014-08-22 16:11:55 +10:00
Mark Andrews
91ae28a075 [rt36039]
3902.   bug]            liblwres wasn't handling link-local addresses in
                        nameserver clauses in resolv.conf. [RT #36039]

(cherry picked from commit 70be388974)
2014-07-30 23:33:58 +10:00
Mark Andrews
d4616282ad error -> warn_error 2014-07-08 16:00:40 +10:00
Mark Andrews
8506cbe54d allow -Werror to be enabled; turn on -Werror by default with --enable-developer
(cherry picked from commit 2be0f12aaf)
2014-07-08 15:51:58 +10:00
Mark Andrews
72397ede08 3889. [port] hurd: configure fixes as per:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540

(cherry picked from commit 89119e3caf)
2014-06-26 11:48:05 +10:00
Mark Andrews
f15c252583 3858. [bug] Disable GCC 4.9 "delete null pointer check".
[RT #35968]

(cherry picked from commit 603a787083)
2014-05-23 11:26:36 +10:00
Evan Hunt
216efa25a3 [v9_9] report unrecognized configure options
3854.	[cleanup]	Report unrecognized options, if any, in the final
                        configure summary. [RT #36014]
2014-05-20 15:31:42 -07:00
Mark Andrews
6fc2166a29 3847. [bug] 'configure --with-dlz-postgres' failed to fail when
there is not support available.

(cherry picked from commit 61fbd791fbd817301dcac27c05e1e742c37b10ab)
2014-05-14 17:17:49 +10:00
Evan Hunt
a3b3557f6f [v9_9] check for arc4random_addrandom()
3840.	[port]		Check for arc4random_addrandom() before using it;
			it's been removed from OpenBSD 5.5. [RT #35907]

(cherry picked from commit 1ea6e09c37)
2014-05-07 08:58:54 -07:00
Evan Hunt
ef7867ce9c [v9_9] customize configure --help 2014-04-11 17:37:52 -07:00
Mark Andrews
f36d3eb488 only look for gsskrb5_register_acceptor_identity if gssapi_krb5.h exists
(cherry picked from commit 0277def3cf)
2014-04-05 08:44:27 +11:00
Mark Andrews
18d619a19b use discovered gssapi include path when linking
(cherry picked from commit 9328f6002790ddd0623f73a3421925195e6e96a4)
2014-04-04 15:01:23 +11:00
Evan Hunt
99d8ef6cd4 [v9_9] fix gssapi probing on freebsd
3801.	[port]		Fix probing for gssapi support on FreeBSD. [RT #35615]

(cherry picked from commit f0e9d6e905)
2014-04-03 19:56:01 -07:00
Mark Andrews
7b7ec78862 restore accidently removed 'else' 2014-02-16 21:13:32 +11:00
Evan Hunt
5c66e4954a [v9_9] fixed some dlz configure options
3740.	[contrib]	Minor fixes to configure --with-dlz-bdb,
			--with-dlz-postgres and --with-dlz-odbc. [RT #35340]

(cherry picked from commit 14bf4702f3)
2014-02-15 21:11:25 -08:00
Mark Andrews
fadd723de0 define and use BACKTRACECFLAGS
(cherry picked from commit 6b66ee9147)
2014-02-12 09:08:32 +11:00
Mark Andrews
8092e43158 hpux: move -Wl,+vnocompatwarnings to STD_CWARNINGS; add +vnocompatwarnings to SO_LDFLAGS
(cherry picked from commit ac49f1c511)
2014-02-11 13:22:49 +11:00
Mark Andrews
9e626dc995 -Wl,+vnocompatwarnings is a compiler flag to pass to the loader not a direct loader flag
(cherry picked from commit 343556ecf9)
2014-02-10 17:54:26 +11:00
Mark Andrews
61eea10d81 3734. [bug] Improve building with libtool. [RT #35314] 2014-02-10 15:23:45 +11:00
Mark Andrews
cefd7fc8ee regen 2014-02-10 15:20:28 +11:00
Mark Andrews
4735ad1cfd back port algorithm detection support from master 2014-02-10 11:47:28 +11:00
Evan Hunt
a9eb392c55 [v9_9] testcrypto.sh in system tests
3714.  [test]          System tests that need to test for cryptography
                       support before running can now use a common
                       "testcrypto.sh" script to do so. [RT #35213]
2014-02-06 16:10:03 -08:00
Evan Hunt
f0f4bda44a [v9_9] correct copyrights and attributions
see RT #35423 for details; highlights:
        - remove license clauses 3 and 4 from NetBSD code
        - remove advertising clause from historical BSD code
2014-01-24 09:51:53 -08:00
Evan Hunt
de6f4dbceb [v9_9] add isc_string_strcasestr for portability
(cherry picked from commit 765ed22a844416f29253f5130548fef77f31881c)
2014-01-09 22:03:44 -08:00
Evan Hunt
6c184eadbd remove unnecessary echo 2013-12-04 09:54:59 -08:00