Evan Hunt
eca0e613de
[v9_9] fix an awk portability issue
2015-08-03 14:22:15 -07:00
Tinderbox User
1c74d995a4
update copyright notice / whitespace
2015-08-02 23:46:06 +00:00
Evan Hunt
f73bed07b5
[v9_9] reduce code duplication
2015-08-02 12:21:14 -07:00
Tinderbox User
835eaef8e3
update copyright notice / whitespace
2015-07-09 23:46:11 +00:00
Evan Hunt
ea36796f82
[v9_9] DDoS mitigation features
...
3938. [func] Added quotas to be used in recursive resolvers
that are under high query load for names in zones
whose authoritative servers are nonresponsive or
are experiencing a denial of service attack.
- "fetches-per-server" limits the number of
simultaneous queries that can be sent to any
single authoritative server. The configured
value is a starting point; it is automatically
adjusted downward if the server is partially or
completely non-responsive. The algorithm used to
adjust the quota can be configured via the
"fetch-quota-params" option.
- "fetches-per-zone" limits the number of
simultaneous queries that can be sent for names
within a single domain. (Note: Unlike
"fetches-per-server", this value is not
self-tuning.)
- New stats counters have been added to count
queries spilled due to these quotas.
These options are not available by default;
use "configure --enable-fetchlimit" (or
--enable-developer) to include them in the build.
See the ARM for details of these options. [RT #37125 ]
2015-07-08 23:00:58 -07:00
Tinderbox User
d23960eb33
update copyright notice / whitespace
2015-07-07 23:46:10 +00:00
Mark Andrews
f5386a21a8
4154. [bug] A OPT record should be included with the FORMERR
...
response when there is a malformed EDNS option.
[RT #39647 ]
4153. [bug] Check that non significant ECS bits are zero on
receipt. [RT #39647 ]
2015-07-06 16:34:48 +10:00
Mark Andrews
d19dfe8793
make test work for both old and new stats
2015-07-01 10:58:59 +10:00
Tinderbox User
2a77c900b6
update copyright notice / whitespace
2015-06-30 23:46:07 +00:00
Mukund Sivaraman
eb2c433d1f
Add prereq.sh check for --enable-newstats
2015-06-30 14:45:27 +05:30
Mukund Sivaraman
fc0797977d
Fix a bug printing zone names with '/' character in XML and JSON stats ( #39873 )
...
(cherry picked from commit 08f0129732 )
Conflicts:
bin/tests/system/statistics/clean.sh
(cherry picked from commit f69f188b90 )
Conflicts:
bin/named/statschannel.c
bin/tests/system/statistics/clean.sh
bin/tests/system/statistics/ns1/named.conf
bin/tests/system/statistics/tests.sh
Conflicts:
CHANGES
2015-06-30 14:45:13 +05:30
Tinderbox User
8780da5841
update copyright notice / whitespace
2015-06-29 23:46:07 +00:00
Mark Andrews
6f02a4e2a6
4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
...
was returning referrals rather than nodata responses
when the AAAA records were filtered. [RT #39843 ]
(cherry picked from commit 4a61eae651 )
2015-06-29 15:49:19 +10:00
Tinderbox User
2f74d016c6
update copyright notice / whitespace
2015-06-23 23:46:05 +00:00
Mukund Sivaraman
22f467116c
Fix parsing of NZFs saved by rndc addzone with view specified ( #39845 )
...
(cherry picked from commit 0439bfedd9 )
Conflicts:
bin/named/server.c
bin/tests/system/addzone/tests.sh
(cherry picked from commit 8134e7662e )
Conflicts:
CHANGES
2015-06-23 15:01:26 +05:30
Tinderbox User
6cd76847a1
update copyright notice / whitespace
2015-06-12 23:46:19 +00:00
Witold Krecicki
ece6e87818
rndc reconfig reports configuration errors the same way rndc reload does [RT #39635 ]
2015-06-12 11:13:36 +02:00
Mark Andrews
0abb12c694
unlock T4_mx
...
(cherry picked from commit b704d25ff3 )
2015-05-30 17:54:59 +10:00
Tinderbox User
2a71b08491
update copyright notice / whitespace
2015-05-28 23:46:13 +00:00
Mark Andrews
263a38f27b
Revert "link against ISC_OPENSSL_LIBS"
...
This is not needed for 9.9.x.
This reverts commit 6035a1c215 .
2015-05-28 13:57:01 +10:00
Mark Andrews
64b34aee39
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
...
(cherry picked from commit e53e202ef3 )
2015-05-28 13:26:19 +10:00
Mark Andrews
6035a1c215
link against ISC_OPENSSL_LIBS
...
(cherry picked from commit 52a487f71a )
2015-05-28 11:11:34 +10:00
Mark Andrews
f381cb86da
4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
...
key as per RFC 7344, Section 4.1. [RT #37215 ]
(cherry picked from commit 598b502695 )
2015-05-27 15:45:46 +10:00
Tinderbox User
15203066d1
update copyright notice / whitespace
2015-05-24 23:46:09 +00:00
Mark Andrews
68791000c4
don't include <isc/print.h>
...
(cherry picked from commit cb9b145f39 )
2015-05-24 12:53:48 +10:00
Tinderbox User
a644e40d6c
update copyright notice / whitespace
2015-05-23 23:47:21 +00:00
Mark Andrews
b63d350995
specfiy where libisc is
...
(cherry picked from commit c907e7b512e88b641595d514790e2b41575f149e)
2015-05-24 06:02:53 +10:00
Mark Andrews
29913f5c1a
link against ISCLIBS
...
(cherry picked from commit e6e7de5cda )
2015-05-24 05:43:07 +10:00
Francis Dupont
5627414c1e
added print.h includes
2015-05-23 15:40:05 +02:00
Tinderbox User
b1c33f6dca
update copyright notice / whitespace
2015-05-05 23:46:11 +00:00
Evan Hunt
9f12734de6
[v9_9] Allow some tests to run partially if Net::DNS is unavailable
2015-05-05 08:33:43 -07:00
Tinderbox User
61f5647c9e
update copyright notice / whitespace
2015-05-04 23:46:10 +00:00
Evan Hunt
31584685f2
[v9_9] check for Net::DNS
...
4113. [test] Check for Net::DNS is some system test
prerequisites. [RT #39369 ]
2015-05-04 12:52:44 -07:00
Evan Hunt
a25f1b3cf5
[v9_9] fix root-delegation-only without exclude
...
4112. [bug] Named failed to load when "root-delegation-only"
was used without a list of domains to exclude.
[RT #39380 ]
2015-05-04 12:46:11 -07:00
Tinderbox User
9bd61f393f
update copyright notice / whitespace
2015-04-28 23:46:12 +00:00
Mark Andrews
fdb83d87d6
4110. [bug] Address memory leaks / null pointer dereferences
...
on out of memory. [RT #39310 ]
(cherry picked from commit b292230ab8 )
2015-04-29 03:37:25 +10:00
Mark Andrews
8ad183c694
use awk for line count rather that wc -l which may space pad
...
(cherry picked from commit e834b30f7c )
2015-04-16 12:18:22 +10:00
Mark Andrews
0251c08693
4100. [bug] Inherited owernames on the line immediately following
...
a $INCLUDE were not working. [RT #39268 ]
(cherry picked from commit c855e7170a )
2015-04-15 12:52:43 +10:00
Tinderbox User
645e5b2460
update copyright notice / whitespace
2015-04-14 23:46:08 +00:00
Mukund Sivaraman
182a53d7dd
Add additional logging about xfrin transfer status ( #39170 )
...
(cherry picked from commit ac31adc3b7 )
(cherry picked from commit 6065cb0858 )
2015-04-14 12:24:14 +05:30
Tinderbox User
eb2c19a22e
update copyright notice / whitespace
2015-03-27 23:46:09 +00:00
Mukund Sivaraman
c04823752a
Fix a crash while parsing malformed CAA RRs in presentation format ( #39003 )
...
(cherry picked from commit f9f81abff0 )
(cherry picked from commit ffc5d17ea8 )
2015-03-27 10:34:50 +05:30
Tinderbox User
124e64db5e
update copyright notice / whitespace
2015-03-04 23:46:08 +00:00
Mark Andrews
263413c7a7
4082. [bug] Incrementally sign large inline zone deltas.
...
[RT #37927 ]
(cherry picked from commit 1b05d22789 )
2015-03-05 10:08:11 +11:00
Mark Andrews
006fd71e36
use unique query names
2015-03-04 17:12:47 +11:00
Tinderbox User
2477b2ba0f
update copyright notice / whitespace
2015-03-03 23:46:07 +00:00
Mark Andrews
1c33552240
4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759 ]
...
(cherry picked from commit 29d52c001f )
(cherry picked from commit a55c3151b2 )
2015-03-03 16:52:02 +11:00
Tinderbox User
f7b9f247b3
update copyright notice / whitespace
2015-03-02 23:46:08 +00:00
Mark Andrews
7578e855f0
add copyright
2015-03-03 10:11:24 +11:00
Mukund Sivaraman
02d78b09a0
Add support for Valgrind's helgrind tool ( #38706 )
...
Also fix one locking issue that helgrind found: Maintain stats->lock
while stats->reference is used.
(cherry picked from commit 10dd5f62f2 )
2015-03-02 13:45:01 +05:30