- Jun 24, 2015
-
-
Marek Vavruša authored
DNS 0x20 https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 is a way to add more randomness into queries to make spoofing tougher this implementation provides up to 32 bits of randomness to QNAME, which is more than enough for most names (it is possible to add a maximum of 1 bit of entropy per alphanumeric character, so it's not very efficient with shorter names) fixes #27
-
Marek Vavruša authored
-
- Jun 23, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-
- Jun 22, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
libuv doesn't do connected UDP sockets, so we can't get ICMP unreachable otherwise
-
Marek Vavruša authored
-
- Jun 16, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-
- Jun 15, 2015
-
-
Marek Vavruša authored
-
- Jun 13, 2015
-
-
Marek Vavruša authored
before root hints were hardcoded to the resolver, now they are present in form of a cut in the resolution context, and the modules can add/remove/replace them on the fly
-
Marek Vavruša authored
-
- Jun 10, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-
- Jun 09, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-
Marek Vavruša authored
fixes potential cache key oob write
-
Marek Vavruša authored
-
- Jun 07, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-
Marek Vavruša authored
also some cleanup and version bump to Q2
-
Marek Vavruša authored
-
Marek Vavruša authored
previously a CNAME RR could be merged as a queried type RR, leading to failed cache lookups as ‘expired’
-
Marek Vavruša authored
-
Marek Vavruša authored
-
Marek Vavruša authored
previously if NS had no A/AAAA records, they we’re looked up in subrequests, after that a new NS was reelected (possibly preferring another unknown), now it stays true to the NS of choice and changes only if it is unuseable
-
Marek Vavruša authored
-
Marek Vavruša authored
the cache_peek() api was reworked to return an error code instead, from this the caller can tell whether the record is present (but expired) or missing. this save a secondary CNAME lookup in case the original record was just expired
-
- Jun 06, 2015
-
-
Marek Vavruša authored
this LRU-like cache tracks lame nameservers, unresolvable nameservers (to not waste resources in trying to resolve them), and possibly other features (extension support, …)
-
- Jun 05, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-
Marek Vavruša authored
-
Marek Vavruša authored
-
- Jun 04, 2015
-
-
Marek Vavruša authored
if a name server is missing address, it requires launching a recursive query to discover it - starting from root now however it can start from either closest covering zonecut in cache if it isn’t a subdomain of current zone cut, or as a parent of current zone cut
-
Marek Vavruša authored
when a NS is in the TIMEOUT, it can’t be autoselected by default but only probed after a successful dice roll - however in some scenarios we’d like to probe timeouting servers more thoroughly
-
Marek Vavruša authored
-
Marek Vavruša authored
-
Marek Vavruša authored
-
- Jun 03, 2015
-
-
Marek Vavruša authored
-
Marek Vavruša authored
-