Evan Hunt
b3e2361dba
[v9_10] fix an awk portability issue
2015-08-03 14:22:01 -07:00
Tinderbox User
1df794dff8
update copyright notice / whitespace
2015-08-02 23:45:49 +00:00
Evan Hunt
559226a147
[v9_10] reduce code duplication
2015-08-02 11:23:29 -07:00
Evan Hunt
f41d4b6eeb
[v9_10] missing 'use' caused test failure
2015-07-21 13:50:23 -07:00
Evan Hunt
30ba2158e2
[v9_10] statschannel test failed when only JSON was available
2015-07-20 19:09:47 -07:00
Evan Hunt
bdbab298fc
[v9_10] portability
2015-07-20 19:01:45 -07:00
Evan Hunt
8272aedccb
[v9_10] add JSON and XML tests
...
4161. [test] Test for consistency between "rndc stats" and the
XML and JSON statistics channel contents. [RT #38700 ]
2015-07-09 21:26:32 -07:00
Tinderbox User
a704920204
update copyright notice / whitespace
2015-07-09 23:45:51 +00:00
Evan Hunt
83d0b1ab69
[v9_10] DDoS mitigation features
...
3938. [func] Added quotas to be used in recursive resolvers
that are under high query load for names in zones
whose authoritative servers are nonresponsive or
are experiencing a denial of service attack.
- "fetches-per-server" limits the number of
simultaneous queries that can be sent to any
single authoritative server. The configured
value is a starting point; it is automatically
adjusted downward if the server is partially or
completely non-responsive. The algorithm used to
adjust the quota can be configured via the
"fetch-quota-params" option.
- "fetches-per-zone" limits the number of
simultaneous queries that can be sent for names
within a single domain. (Note: Unlike
"fetches-per-server", this value is not
self-tuning.)
- New stats counters have been added to count
queries spilled due to these quotas.
These options are not available by default;
use "configure --enable-fetchlimit" (or
--enable-developer) to include them in the build.
See the ARM for details of these options. [RT #37125 ]
2015-07-08 22:55:31 -07:00
Mark Andrews
bb7971417a
4157. [protocol] Update experimental SIT code to use the EDNS COOKIE
...
option code point (10). This is the minimal change
required to use the new code point. [RT #39928 ]
2015-07-07 15:43:04 +10:00
Mark Andrews
a9557c404e
4154. [bug] A OPT record should be included with the FORMERR
...
response when there is a malformed EDNS option.
[RT #39647 ]
4153. [bug] Dig should zero non significant +subnet bits. Check
that non significant ECS bits are zero on receipt.
[RT #39647 ]
(cherry picked from commit 3e33f4198d
2015-07-06 13:47:17 +10:00
Tinderbox User
c838ed659d
update copyright notice / whitespace
2015-06-29 23:45:48 +00:00
Mukund Sivaraman
f69f188b90
Fix a bug printing zone names with '/' character in XML and JSON stats ( #39873 )
...
(cherry picked from commit 08f0129732
2015-06-29 18:46:36 +05:30
Mark Andrews
a6f608404f
4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
...
was returning referrals rather than nodata responses
when the AAAA records were filtered. [RT #39843 ]
(cherry picked from commit 4a61eae651
2015-06-29 15:49:12 +10:00
Tinderbox User
c53e425c7a
update copyright notice / whitespace
2015-06-23 23:45:47 +00:00
Mukund Sivaraman
8134e7662e
Fix parsing of NZFs saved by rndc addzone with view specified ( #39845 )
...
(cherry picked from commit 0439bfedd9
2015-06-23 14:57:20 +05:30
Mukund Sivaraman
17bb17af46
Print unsigned values for serial, etc. in rndc zonestatus output ( #39854 )
...
(cherry picked from commit b4e114e3cd
2015-06-23 14:09:47 +05:30
Tinderbox User
102554f26f
update copyright notice / whitespace
2015-06-12 23:45:59 +00:00
Witold Krecicki
e71cc07e40
rndc reconfig reports configuration errors the same way rndc reload does [RT #39635 ]
2015-06-12 11:08:21 +02:00
Mark Andrews
858eccb37e
unlock T4_mx
...
(cherry picked from commit b704d25ff3
2015-05-30 17:54:52 +10:00
Mark Andrews
a17d59f11e
use sed as tail -n +# is not portable
...
(cherry picked from commit 8c74b6a9a1
2015-05-30 11:06:12 +10:00
Tinderbox User
b3623d80ab
update copyright notice / whitespace
2015-05-28 23:45:50 +00:00
Mark Andrews
c9ca5e3c87
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
...
(cherry picked from commit e53e202ef3
2015-05-28 13:17:24 +10:00
Mark Andrews
ff3e305deb
link against ISC_OPENSSL_LIBS
...
(cherry picked from commit 52a487f71a
2015-05-28 11:10:45 +10:00
Mark Andrews
d8161b8756
4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
...
key as per RFC 7344, Section 4.1. [RT #37215 ]
(cherry picked from commit 598b502695
2015-05-27 15:36:55 +10:00
Evan Hunt
a6a15bb069
[v9_10] address regression
...
4126. [bug] Addressed a regression introduced in change #4121 .
[RT #39611 ]
2015-05-26 19:11:54 -07:00
Tinderbox User
ecd3e9bc2b
update copyright notice / whitespace
2015-05-24 23:45:47 +00:00
Evan Hunt
07858b945b
[v9_10] +ednsneg needs to be specified in 9.10
2015-05-23 23:39:10 -07:00
Mark Andrews
bacb1197f5
don't include <isc/print.h>
...
(cherry picked from commit cb9b145f39
2015-05-24 13:02:19 +10:00
Tinderbox User
83a64013b1
update copyright notice / whitespace
2015-05-23 23:46:59 +00:00
Mark Andrews
8b7a1fe06c
specfiy where libisc is
...
(cherry picked from commit c907e7b512e88b641595d514790e2b41575f149e)
2015-05-24 06:02:59 +10:00
Mark Andrews
66a3ccec36
link against ISCLIBS
...
(cherry picked from commit e6e7de5cda
2015-05-24 05:43:03 +10:00
Francis Dupont
1db36edf82
added print.h includes
2015-05-23 14:46:47 +02:00
Tinderbox User
3f319600ef
update copyright notice / whitespace
2015-05-22 23:45:52 +00:00
Tinderbox User
1b9f989cae
update copyright notice / whitespace
2015-05-21 23:45:59 +00:00
Mukund Sivaraman
765bcb44ac
Fix RPZ radix tree search() for CLIENT-IP triggers ( #39481 )
...
(cherry picked from commit 705cea35a8
2015-05-21 11:17:58 +05:30
Mark Andrews
105720bad6
3993. [func] Dig now supports EDNS negotiation by default.
...
(dig +[no]ednsnegotiation). [RT #37604 ]
(cherry picked from commit 0f5144163c
2015-05-21 11:45:56 +10:00
Mark Andrews
449b5bdc99
3951. [func] Add the ability to set yet-to-be-defined EDNS flags
...
to dig (+ednsflags=#). [RT #37142 ]
(cherry picked from commit 3867312e4c
2015-05-21 11:22:36 +10:00
Evan Hunt
04defaf799
[v9_10] address a possible policy update race
...
4120. [bug] A bug in RPZ could cause the server to crash if
policy zones were updated while recursion was
pending for RPZ processing of an active query.
[RT #39415 ]
(cherry picked from commit 7e6cf6fc6e
2015-05-19 15:56:40 -07:00
Mark Andrews
68e9ae1885
4119. [func] Allow dig to set the message opcode. [RT #39550 ]
...
(cherry picked from commit c7463967db
2015-05-19 12:53:02 +10:00
Tinderbox User
dddddd0c10
update copyright notice / whitespace
2015-05-08 23:45:50 +00:00
Mukund Sivaraman
5cbd509a3d
Fix a bug in RPZ that could cause unwanted recursion ( #39229 )
...
Conflicts:
doc/arm/notes.xml
(cherry picked from commit b947e1a521
2015-05-07 08:36:49 +05:30
Tinderbox User
54fce5ab13
update copyright notice / whitespace
2015-05-05 23:45:51 +00:00
Evan Hunt
61de7bcf87
[v9_10] Allow some tests to run partially if Net::DNS is unavailable
2015-05-05 08:33:38 -07:00
Tinderbox User
66ed5cbc11
update copyright notice / whitespace
2015-05-04 23:45:49 +00:00
Evan Hunt
dbfb3a18c8
[v9_10] check for Net::DNS
...
4113. [test] Check for Net::DNS is some system test
prerequisites. [RT #39369 ]
2015-05-04 12:52:28 -07:00
Evan Hunt
e6e24d37ea
[v9_10] fix root-delegation-only without exclude
...
4112. [bug] Named failed to load when "root-delegation-only"
was used without a list of domains to exclude.
[RT #39380 ]
2015-05-04 12:45:33 -07:00
Tinderbox User
08ebb2c56c
update copyright notice / whitespace
2015-04-28 23:45:51 +00:00
Mark Andrews
2865753e29
4110. [bug] Address memory leaks / null pointer dereferences
...
on out of memory. [RT #39310 ]
(cherry picked from commit b292230ab8
2015-04-29 03:18:04 +10:00
Mark Andrews
39ad068359
use awk for line count rather that wc -l which may space pad
...
(cherry picked from commit e834b30f7c
2015-04-16 12:18:15 +10:00
