Early awareness notification: a new lua module `version`
to periodically check for newer version on server and for CVE.

See merge request !52

Also avoid that extremely long line.

worker: avoid uninitialized pointers

The cookie module could segfault due to the `opt` pointer not being initialized when no EDNS was sent in the incoming request.

See merge request !53

The cookie module could segfault due to the `opt` pointer not being
initialized when no EDNS was sent in the incoming request.

Fix documentation example for using resolve() function.



See merge request !51

Michal Karm Babacek authored 8 years ago and Ondřej Surý committed 8 years ago

Based on [issue 28](https://github.com/CZ-NIC/knot-resolver/issues/28), we were able to boost kresd performance running in a Docker container on DockerCloud by nearly 100% by binding to a single interface:ipaddress. It might be handy for other users to know.

net.listen: make it more flexible

As noted in #94, it feels natural to call it like:
``net.listen({net.lo, '192.168.1.1'})``
Also minor fixes were done in that function and corresponding docs.

See merge request !46

Assortment of unimportant changes that I created during trying to understand how the whole resolution process works. Best read each commit separately.

As noted in #94, it feels natural to call it like:
``net.listen({net.lo, '192.168.1.1'})``
Also, minor fixes were done in that function and corresponding docs.

if the score is known (and not glued), the retry
rate is <avg(rtt), 250ms>

if the NS score is unknown or worse than 250ms,
it is always retried at this rate

all other servers in the list use default rate

maintainer may wish to choose neutral or even
more favoured server selection of IPv6 servers.

-DFAVOUR_IPV6=0 makes neutral server selection
-DFAVOUR_IPV6=40 gives IPv6 40ms better chance

RTT tracking for all targets is also supported,
but no loadbalancing is done based on that yet

Consequently, there's no use for worker_reserve in the header.

Also break overlong lines.

The last hunk: we'd report worker failure even if we didn't
attempt to start it due to previous failures.

We called kr_crypto_init() just before forking and then _reinit() in
all children, but we never did any cryptography in-between - better
initialize after forking.

Note: the function is KR_EXPORT.  It might not be useful anymore, but
its removal would require bumping libkres soname.

Reported: https://gitlab.labs.nic.cz/knot/resolver/issues/92

timeouts over TCP when <n> first nameservers timeout over UDP as
previously the TCP would connect again to the first and only the
first nameserver in task->addrlist.

This would need to be ultimately fixed in TCP Fast Retransmit.