xdp-tcp: ignore SYN+ACK pkts in knotd (only for kxdpgun)

See merge request !1685

Libor Peltan authored 8 months ago and Daniel Salzman committed 8 months ago

...being used by other tool as outgoing

Add support for WALLET rrtype

See merge request !1684

Add dohpath and ohttp SVCB parameters

See merge request !1683

Remove another omitted NSEC for existing nonauthoritative node

See merge request !1681

load: dont skip dnssec+zonemd even when nothing to load

See merge request !1680

dnssec/NSEC: remove empty node's NSEC even when nonauth

See merge request !1678

Fix journal corruption when SOA serial matches some metadata name

See merge request !1677

mark the CPU architecture in the backup, in restore, make sure that the data is compatible

See merge request !1675

Notes about the tests: many tests still relies on 64LE architecture.
This currently applies also to:
   zone/backup_lock
   dnssec/keytag_conflict
   dnssec/no_resign
   modules/geoip.
The 64BE-architecture backup is simulated by a modified 64LE backup in the test zone/backup_lock.
Test of restore of QUIC keys from incompatible architecture should be added to zone/backup_lock too.

refresh: log remote zone serials immediately after incoming transfers are received

See merge request !1676

forced zone-backup to overwrite already existing backup

See merge request !1674

David Vasek authored 10 months ago and Daniel Salzman committed 9 months ago

The error string should be different from KNOT_EACCES, but it already uses
the same string.

knotd: remove assert that doesnt hold in specific circmstances

See merge request !1673

rcu: protect also zonefile flush and XFRout against simultaneous zone CTL update

See merge request !1671