summaryrefslogtreecommitdiffstats
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* contrib: list ISC license as such, not as 0BSD licenseHEADmasterDavid Vašek2 days4-4/+4
| | | | These two licenses are different.
* contrib/ucw: clarify source licensesDaniel Salzman3 days4-2/+485
|
* ucw/heap: unify the license headerDaniel Salzman6 days1-14/+7
|
* contrib: remove unused ucw/binsearch.hDaniel Salzman6 days2-51/+0
|
* bugfix/serial modulo: detect uint32 overflowLibor Peltan8 days1-6/+9
|
* kdig: add +[no]zoneversion supportDaniel Salzman9 days4-8/+101
|
* nameserver: add EDNS ZONEVERSION supportDaniel Salzman9 days1-1/+28
|
* libknot: add EDNS ZONEVERSION supportDaniel Salzman9 days4-8/+98
|
* adjust: refactor structure initializations to be more descriptiveDaniel Salzman13 days1-4/+16
|
* sem-checks: fix DNAME at the zone apex check if active NSEC3Daniel Salzman13 days1-2/+2
|
* ctl: improve error detection and send an error message to the clientDaniel Salzman2025-01-083-21/+36
|
* ctl: fix ctl stuck when abort sent to nonexisting conf txn...Libor Peltan2025-01-081-3/+6
| | | | ...this appeared as a regression when implementing concurrent CTL
* xdp: update filter binary using Clang 18Daniel Salzman2025-01-052-763/+943
|
* xdp: add IPv6 extended headers parsing support with some filteringDaniel Salzman2025-01-051-18/+43
| | | | | | - Any packet with more than 3 IPv6 headers is dropped. - Any packet with an IPPROTO_NONE or a reserved header (253 and 253) is dropped. - A DNS-related packet is dropped if it contains any extended header.
* xdp: unify used byte-order conversion functionsDaniel Salzman2025-01-031-6/+6
| | | | | Note that functions like bpf_htons() internally disinguish whether the argument is a constant.
* xdp: drop DNS messages shorter than DNS header lengthDaniel Salzman2025-01-031-0/+7
|
* xdp: add check for IP payload length and udp->len equalityDaniel Salzman2025-01-031-4/+7
|
* xdp: refactor access checks to be uniform with the other checksDaniel Salzman2025-01-031-8/+6
|
* tls: call gnutls_bye() when closing a TLS connectionDaniel Salzman2025-01-031-0/+1
|
* knotd: avoid crash on crafted CTL payloadJan Doskočil2025-01-021-1/+1
| | | | | There was an incorrect assumption in zones_apply() that the next DATA unit carries zonename data.
* libngtcp2: update embedded libngtcp2 to v1.10.0Jan Doskočil2024-12-205-16/+14
|
* RRSIGs/TTL: set rrsig->ttl to zero...Libor Peltan2024-12-202-5/+8
| | | | | ...instead of random relict from the past, anyway should not be used anywhere
* stats: fix duplicate XDP counter names in YAML dumpDaniel Salzman2024-12-191-30/+61
| | | | fixes #947
* max_ttl: in case of RRSIG consider orig_ttl and NOT rrsig->ttlLibor Peltan2024-12-191-3/+18
|
* mod-dnstap: distinguish between AUTH and UPDATE query/responseJan Hák2024-12-181-1/+4
|
* utils: use knsupdate style of output when printing UPDATE messageJan Hák2024-12-181-1/+3
|
* fix: zone hang if last zone-reload oomsolidcc22024-12-181-0/+1
|
* query_module: fix statistics counters cleanup if allocation failsDaniel Salzman2024-12-161-3/+19
|
* modules/cookies: fix usage of new atomic in code (variable secret->variable)Jan Hák2024-12-111-3/+15
|
* libknot/quic: fix usage of new atomic in code (variable cert_creds)Jan Hák2024-12-111-4/+5
|
* libknot/quic: fix usage of new atomic in code (variable obufs_size)Jan Hák2024-12-111-2/+5
|
* kxdpgun: fix usage of new atomic in code (variables stats_trigger and ↵Jan Hák2024-12-111-2/+6
| | | | stats_switch)
* stats: fix usage of new atomic in code (variable stats_vals)Jan Hák2024-12-111-3/+10
|
* modules/probe: fix usage of new atomic in code (variable last_times)Jan Hák2024-12-111-1/+5
|
* modules/cookies: fix usage of new atomic in code (variable badcookie_ctr)Jan Hák2024-12-111-1/+2
|
* dnssec: fix usage of new atomic in code (variable dnssec_expire)Jan Hák2024-12-112-2/+7
|
* backup: fix usage of new atomic in code (variable backup_ctx)Jan Hák2024-12-114-7/+11
|
* catalog: fix usage of new atomic in code (variable catalog_upd_signal)Jan Hák2024-12-114-4/+6
|
* contrib/atomic: remove of KNOT_HAVE_ATOMIC definition because of unusedJan Hák2024-12-112-11/+0
|
* contrib/atomic: use volatile for the fallback implementationDaniel Salzman2024-12-111-7/+10
|
* contrib/atomic: replace a dangerous fallback with a spin-lock protected versionJan Hák2024-12-111-12/+59
|
* handler: fix compilation if XDP not availableDaniel Salzman2024-12-031-9/+9
|
* mod-rrl: increase default limitsDaniel Salzman2024-12-032-6/+6
|
* mod-rrl: add note about limiting of authorized requestsDaniel Salzman2024-12-031-1/+12
|
* server: preserve KNOTD_QUERY_FLAG_AUTHORIZED across handlingDaniel Salzman2024-12-039-10/+55
|
* mod-rrl: add QNAME, if possible, and PROTO to log messagesDaniel Salzman2024-12-033-10/+35
|
* mod-rrl: fix KNOTD_QUERY_FLAG_AUTHORIZED detectionDaniel Salzman2024-12-031-25/+22
|
* tcp-handler: log TLS receive errorsDaniel Salzman2024-12-021-1/+3
|
* dnssec/rollovers: prevent increasing confusion when 2 active ZSKsLibor Peltan2024-12-021-4/+5
|
* mod-rrl: change default log-period to 30 secondsDaniel Salzman2024-11-272-2/+2
|