ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,477 Commits 589 Branches 805 Tags
v9.9.8b1
Commit Graph

6639 Commits

Author SHA1 Message Date
Evan Hunt
eca0e613de [v9_9] fix an awk portability issue 2015-08-03 14:22:15 -07:00
Tinderbox User
1c74d995a4 update copyright notice / whitespace 2015-08-02 23:46:06 +00:00
Evan Hunt
f73bed07b5 [v9_9] reduce code duplication 2015-08-02 12:21:14 -07:00
Tinderbox User
aa1535671f regen v9_9 2015-07-10 01:12:20 +00:00
Tinderbox User
835eaef8e3 update copyright notice / whitespace 2015-07-09 23:46:11 +00:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 23:00:58 -07:00
Mark Andrews
1ffb96f3dd add comment about +trace and @server 
(cherry picked from commit 2561b2dd84)
 2015-07-09 12:12:38 +10:00
Mark Andrews
2f01090351 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 09:56:48 +10:00
Tinderbox User
d23960eb33 update copyright notice / whitespace 2015-07-07 23:46:10 +00:00
Mark Andrews
f5386a21a8 4154. [bug] A OPT record should be included with the FORMERR 
response when there is a malformed EDNS option.
                        [RT #39647]

4153.   [bug]           Check that non significant ECS bits are zero on
                        receipt. [RT #39647]
 2015-07-06 16:34:48 +10:00
Mark Andrews
d19dfe8793 make test work for both old and new stats 2015-07-01 10:58:59 +10:00
Tinderbox User
2a77c900b6 update copyright notice / whitespace 2015-06-30 23:46:07 +00:00
Mukund Sivaraman
eb2c433d1f Add prereq.sh check for --enable-newstats 2015-06-30 14:45:27 +05:30
Mukund Sivaraman
d927c02041 Fix build for configure --enable-newstats 2015-06-30 14:45:26 +05:30
Mukund Sivaraman
fc0797977d Fix a bug printing zone names with '/' character in XML and JSON stats (#39873) 
(cherry picked from commit 08f0129732)

Conflicts:
	bin/tests/system/statistics/clean.sh

(cherry picked from commit f69f188b90)

Conflicts:
	bin/named/statschannel.c
	bin/tests/system/statistics/clean.sh
	bin/tests/system/statistics/ns1/named.conf
	bin/tests/system/statistics/tests.sh

Conflicts:
	CHANGES
 2015-06-30 14:45:13 +05:30
Tinderbox User
8780da5841 update copyright notice / whitespace 2015-06-29 23:46:07 +00:00
Mark Andrews
6f02a4e2a6 4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6 
was returning referrals rather than nodata responses
                        when the AAAA records were filtered.  [RT #39843]

(cherry picked from commit 4a61eae651)
 2015-06-29 15:49:19 +10:00
Tinderbox User
2f74d016c6 update copyright notice / whitespace 2015-06-23 23:46:05 +00:00
Mukund Sivaraman
22f467116c Fix parsing of NZFs saved by rndc addzone with view specified (#39845) 
(cherry picked from commit 0439bfedd9)

Conflicts:
	bin/named/server.c
	bin/tests/system/addzone/tests.sh

(cherry picked from commit 8134e7662e)

Conflicts:
	CHANGES
 2015-06-23 15:01:26 +05:30
Tinderbox User
6cd76847a1 update copyright notice / whitespace 2015-06-12 23:46:19 +00:00
Witold Krecicki
ece6e87818 rndc reconfig reports configuration errors the same way rndc reload does [RT #39635] 2015-06-12 11:13:36 +02:00
Tinderbox User
ceed6cbf1a regen v9_9 2015-06-05 01:12:25 +00:00
Evan Hunt
b2d3001654 [v9_9] dig option cleanups 
4132.	[cleanup]	dig: added +rd as a synonym for +recurse,
			added +class as an unabbreviated alternative
			to +cl. [RT #39686]
 2015-06-04 08:56:11 -07:00
Mark Andrews
0abb12c694 unlock T4_mx 
(cherry picked from commit b704d25ff3)
 2015-05-30 17:54:59 +10:00
Tinderbox User
007cc2f36f regen v9_9 2015-05-29 01:12:09 +00:00
Tinderbox User
11884ddefe Merge branch 'v9_9' of ssh://repo.isc.org/proj/git/prod/bind9 into v9_9 2015-05-29 01:08:49 +00:00
Tinderbox User
2a71b08491 update copyright notice / whitespace 2015-05-28 23:46:13 +00:00
Mark Andrews
263a38f27b Revert "link against ISC_OPENSSL_LIBS" 
This is not needed for 9.9.x.

This reverts commit 6035a1c215.
 2015-05-28 13:57:01 +10:00
Mark Andrews
64b34aee39 4128. [bug] Address issues raised by Coverity 7.6. [RT #39537] 
(cherry picked from commit e53e202ef3)
 2015-05-28 13:26:19 +10:00
Tinderbox User
baecf74879 regen v9_9 2015-05-28 01:12:04 +00:00
Mark Andrews
6035a1c215 link against ISC_OPENSSL_LIBS 
(cherry picked from commit 52a487f71a)
 2015-05-28 11:11:34 +10:00
Tinderbox User
118ba5c7f3 update copyright notice / whitespace 2015-05-27 23:46:14 +00:00
Mark Andrews
f381cb86da 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing 
key as per RFC 7344, Section 4.1. [RT #37215]

(cherry picked from commit 598b502695)
 2015-05-27 15:45:46 +10:00
Tinderbox User
15203066d1 update copyright notice / whitespace 2015-05-24 23:46:09 +00:00
Mark Andrews
68791000c4 don't include <isc/print.h> 
(cherry picked from commit cb9b145f39)
 2015-05-24 12:53:48 +10:00
Tinderbox User
a644e40d6c update copyright notice / whitespace 2015-05-23 23:47:21 +00:00
Mark Andrews
b63d350995 specfiy where libisc is 
(cherry picked from commit c907e7b512e88b641595d514790e2b41575f149e)
 2015-05-24 06:02:53 +10:00
Mark Andrews
29913f5c1a link against ISCLIBS 
(cherry picked from commit e6e7de5cda)
 2015-05-24 05:43:07 +10:00
Francis Dupont
c97747f92b finished print.h stuff 2015-05-23 16:29:54 +02:00
Francis Dupont
5627414c1e added print.h includes 2015-05-23 15:40:05 +02:00
Mark Andrews
aec5c211a9 4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534. 
(cherry picked from commit 8f20f6c9d7)
 2015-05-15 08:23:43 +10:00
Tinderbox User
b1c33f6dca update copyright notice / whitespace 2015-05-05 23:46:11 +00:00
Evan Hunt
9f12734de6 [v9_9] Allow some tests to run partially if Net::DNS is unavailable 2015-05-05 08:33:43 -07:00
Tinderbox User
985cabe465 regen v9_9 2015-05-05 01:12:43 +00:00
Tinderbox User
61f5647c9e update copyright notice / whitespace 2015-05-04 23:46:10 +00:00
Mark Andrews
d283e45d85 whitespace 2015-05-05 08:30:49 +10:00
Mark Andrews
e2a68a396d 4111. [doc] Alphabetize rndc man page. [RT #39360] 2015-05-05 08:20:49 +10:00
Evan Hunt
31584685f2 [v9_9] check for Net::DNS 
4113.	[test]		Check for Net::DNS is some system test
			prerequisites. [RT #39369]
 2015-05-04 12:52:44 -07:00
Evan Hunt
a25f1b3cf5 [v9_9] fix root-delegation-only without exclude 
4112.	[bug]		Named failed to load when "root-delegation-only"
			was used without a list of domains to exclude.
			[RT #39380]
 2015-05-04 12:46:11 -07:00
Tinderbox User
9bd61f393f update copyright notice / whitespace 2015-04-28 23:46:12 +00:00