ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,477 Commits 589 Branches 805 Tags
v9.9.8b1
Commit Graph

2618 Commits

Author SHA1 Message Date
Tinderbox User
835eaef8e3 update copyright notice / whitespace 2015-07-09 23:46:11 +00:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 23:00:58 -07:00
Mark Andrews
f5386a21a8 4154. [bug] A OPT record should be included with the FORMERR 
response when there is a malformed EDNS option.
                        [RT #39647]

4153.   [bug]           Check that non significant ECS bits are zero on
                        receipt. [RT #39647]
 2015-07-06 16:34:48 +10:00
Mukund Sivaraman
d927c02041 Fix build for configure --enable-newstats 2015-06-30 14:45:26 +05:30
Mukund Sivaraman
fc0797977d Fix a bug printing zone names with '/' character in XML and JSON stats (#39873) 
(cherry picked from commit 08f0129732)

Conflicts:
	bin/tests/system/statistics/clean.sh

(cherry picked from commit f69f188b90)

Conflicts:
	bin/named/statschannel.c
	bin/tests/system/statistics/clean.sh
	bin/tests/system/statistics/ns1/named.conf
	bin/tests/system/statistics/tests.sh

Conflicts:
	CHANGES
 2015-06-30 14:45:13 +05:30
Tinderbox User
6cd76847a1 update copyright notice / whitespace 2015-06-12 23:46:19 +00:00
Witold Krecicki
ece6e87818 rndc reconfig reports configuration errors the same way rndc reload does [RT #39635] 2015-06-12 11:13:36 +02:00
Tinderbox User
2a71b08491 update copyright notice / whitespace 2015-05-28 23:46:13 +00:00
Mark Andrews
64b34aee39 4128. [bug] Address issues raised by Coverity 7.6. [RT #39537] 
(cherry picked from commit e53e202ef3)
 2015-05-28 13:26:19 +10:00
Mark Andrews
f381cb86da 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing 
key as per RFC 7344, Section 4.1. [RT #37215]

(cherry picked from commit 598b502695)
 2015-05-27 15:45:46 +10:00
Francis Dupont
5627414c1e added print.h includes 2015-05-23 15:40:05 +02:00
Mark Andrews
aec5c211a9 4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534. 
(cherry picked from commit 8f20f6c9d7)
 2015-05-15 08:23:43 +10:00
Evan Hunt
a25f1b3cf5 [v9_9] fix root-delegation-only without exclude 
4112.	[bug]		Named failed to load when "root-delegation-only"
			was used without a list of domains to exclude.
			[RT #39380]
 2015-05-04 12:46:11 -07:00
Evan Hunt
7faa1a7221 [v9_9] misc x64 VS 2015 CTP fixes [#39308] 
(cherry picked from commit ab973ec40c)
(cherry picked from commit 0fdcf394cb)
 2015-04-17 15:32:41 -07:00
Tinderbox User
2477b2ba0f update copyright notice / whitespace 2015-03-03 23:46:07 +00:00
Mark Andrews
1c33552240 4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759] 
(cherry picked from commit 29d52c001f)
(cherry picked from commit a55c3151b2)
 2015-03-03 16:52:02 +11:00
Tinderbox User
16fdaa39cc update copyright notice / whitespace 2015-03-01 23:46:02 +00:00
Tinderbox User
194f099f30 regen v9_9 2015-02-28 01:12:33 +00:00
Tinderbox User
5b862e53bf Merge branch 'v9_9' of ssh://repo.isc.org/proj/git/prod/bind9 into v9_9 2015-02-28 01:09:10 +00:00
Mark Andrews
f16ab01da5 4076. [bug] Named could crash on shutdown with outstanding 
reload / reconfig events. [RT #38622]

(cherry picked from commit bb5df338d9)
 2015-02-27 12:36:08 +11:00
Mark Andrews
36b67292b3 4075. [bug] Increase nsupdate's input buffer to accomodate 
very large RRs. [RT #38689]
 2015-02-27 12:26:58 +11:00
Mark Andrews
fc07bc787f 4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708] 
(cherry picked from commit af669cb4fd)

Conflicts:
	bin/named/client.c
	lib/dns/request.c
	lib/dns/view.c

(cherry picked from commit 374fce8495)

Conflicts:
	bin/named/statschannel.c
	lib/dns/rbtdb.c
	lib/dns/request.c
	lib/dns/resolver.c
	lib/isc/unix/file.c
 2015-02-27 11:05:33 +11:00
Tinderbox User
15dce01ef4 update copyright notice / whitespace 2015-02-26 23:46:12 +00:00
Evan Hunt
fa01c77ac6 [v9_9] version cleanup 
4073.	[cleanup]	Add libjson-c version number reporting to
			"named -V"; normalize version number formatting.
			[RT #38056]
 2015-02-26 12:12:31 -08:00
Mukund Sivaraman
e62afa3177 Add a --enable-querytrace configure switch for very verbose query tracelogging (#37520) 
(cherry picked from commit 1783676a64)
(cherry picked from commit b83c20df65)

Conflicts:
	CHANGES
	config.h.in
	configure
	configure.in
 2015-02-26 17:04:18 +05:30
Tinderbox User
4d65fd02e6 regen v9_9 2015-02-26 01:11:50 +00:00
Evan Hunt
7e64c7630c [v9_9] reduce rrl logging noise 
4067.	[cleanup]	Reduce noise from RRL when query logging is
			disabled. [RT #38648]

(cherry picked from commit 8378b0c190)
 2015-02-25 16:45:07 -08:00
Evan Hunt
3cad633f0d [v9_9] Add facility to run system test nameds under Valgrind (#38546) 2015-02-25 16:27:50 -08:00
Evan Hunt
ec856a0ed6 [v9_9] add better servfail logging 
3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]

(cherry picked from commit f5c24a7f48)
(cherry picked from commit 09a87d841f)
 2015-02-25 16:05:45 -08:00
Evan Hunt
83f9359dde [v9_9] report library version numbers on win32 2015-02-20 23:30:33 -08:00
Evan Hunt
adf9e1c676 [v9_9] silence RPZ log messages 
4050.	[cleanup]	Silence occasional spurious "duplicate query" log
			messages from RPZ. [RT #38510]
 2015-02-10 15:03:05 -08:00
Evan Hunt
0d6547c706 [v9_9] address valgrind warnings 
4059.	[bug]		Addressed valgrind warnings. [RT #38549]
 2015-02-10 14:04:13 -08:00
Evan Hunt
efe260cc94 [v9_9] 5011 fixes 
4056.	[bug]		Fixed several small bugs in automatic trust anchor
			management, including a memory leak and a possible
			loss of key state information. [RT #38458]
 2015-02-10 13:12:55 -08:00
Mukund Sivaraman
015371d584 Fix a leak of query fetchlock (#38454) 
4052.	[bug]		Fix a leak of query fetchlock. [RT #38454]

Conflicts:
	CHANGES
 2015-02-03 11:54:16 +05:30
Evan Hunt
54ce28a692 [v9_9] fixed library version reporting 
- forgot to include a CHANGES note
- disabled on windows (it fails to link)
 2015-01-22 11:18:55 -08:00
Evan Hunt
1974b7b42d [v9_9] fix 'total use' accounting 
4046.   [bug]           Accounting of "total use" in memory context
                        statistics was not correct. [RT #38370]
 2015-01-22 09:53:44 -08:00
Tinderbox User
ec2d41db1e update copyright notice / whitespace 2015-01-21 23:46:16 +00:00
Tinderbox User
9cbd625449 update copyright notice / whitespace 2015-01-20 23:47:26 +00:00
Evan Hunt
1105bc65fb [v9_9] more windows VS14 compatibility work 
(completes change #3987)
 2015-01-20 15:46:25 -08:00
Evan Hunt
57f015bd2a [v9_9] clean up gcc -Wshadow warnings 
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
 2015-01-20 14:55:41 -08:00
Mukund Sivaraman
ece19205b7 Close FILEs before overwriting NZF file (#38332) 
Based on a patch sent in by Tony Finch <dot@dotat.at>.

(cherry picked from commit 1721fb782c)

Conflicts:
	CHANGES
	bin/named/server.c
 2015-01-16 15:41:15 +05:30
Tinderbox User
f9db30be50 update copyright notice / whitespace 2015-01-10 23:46:13 +00:00
Mark Andrews
15738c0888 4032. [bug] Built-in "empty" zones did not correctly inherit the 
"allow-transfer" ACL from the options or view.
                        [RT #38310]

(cherry picked from commit 7952156995)
 2015-01-10 22:04:32 +11:00
Evan Hunt
7b1767cc76 [v9_9] backport gperftools 
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
 2015-01-10 00:19:19 -08:00
Tinderbox User
7e35cef570 update copyright notice / whitespace 2015-01-08 23:46:12 +00:00
Mark Andrews
94124ad484 4031. [bug] named-checkconf -z failed to report a missing file 
with a hint zone. [RT #38294]

(cherry picked from commit d1f1f13c7f)
 2015-01-08 19:20:31 +11:00
Mark Andrews
f6f0878e11 4018. [bug] Fall back to plain DNS when EDNS queries are being 
dropped was failing. [RT #37965]

4017.   [testing]       Add system test to check lookups to legacy servers
                        with broken DNS behaviour. [RT #37965]
 2014-12-04 07:07:09 +11:00
Mark Andrews
2d21161222 unchecked putnull 2014-11-25 15:24:45 +11:00
Mark Andrews
b7397773f5 4011. [bug] master's list port inheritance was not properly 
implemented. [RT #37792]

(cherry picked from commit d040fa2f1c)
 2014-11-24 11:59:16 +11:00
Evan Hunt
1d47cb124d [v9_9] refactor max-recursion-queries 
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.

(cherry picked from commit 05e448935c)
(cherry picked from commit 6c049c57d9)
 2014-11-19 18:38:52 -08:00