...same salt, but different iterations count

The check seems obsolete.

Libor Peltan authored 5 years ago and Daniel Salzman committed 4 years ago

...more precisely, if zone has NSEC3 tree, allow any NSEC3 records with different salt
this is useful for checking zones with slow-resalt

xdp gun: completely ignore different incomming traffic

See merge request !1161

xdp gun: parameter for CPU affinity setting

See merge request !1160

xdp gun: use constant trans id to distinguish junk traffic

See merge request !1159

Fixes jpmens

Closes #685

See merge request !1158

catalog: bugfix: save to catalog DB even reconf change

See merge request !1157

nameserver: don't ignore parsing errors, answer FORMERR

See merge request !1155

the trick: decreasing 'parsed' throws FORMERR in process_query_out()

the issue: Knot answered NOERROR on query with 2x OPT

Requestor and other error reporting, XFR failover logic, document needed file descriptors

See merge request !1152

Ksk state revoked

See merge request !1153

Libor Peltan authored 4 years ago and Daniel Salzman committed 4 years ago

...only for manual key management

Also, change the default Knot error (for errnos not in the mapping table) from
KNOT_ERROR (-1000) to a new value KNOT_ERRNO_ERROR (-500). The aim is to distinguish
between DNS logic errors and the underlying OS (syscall and library) errors.