knsec3hash: alternative params synopsis...

See merge request knot/knot-dns!1415

...better matching NSEC3 presentation format

namserver/compression: avoid pointing directly at pointer

Closes #765

See merge request knot/knot-dns!1388

Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago

This reverts commit 4e385878.

Nsec3 resalt refactor

See merge request knot/knot-dns!1413

journal: compute serialized changeset directly from bi-nodes...

See merge request knot/knot-dns!1412

Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago

...for DDNS, DNSSEC and IXFR

refresh: use exponential retry backoff with base 2 rather than 3

See merge request !1411

By using the cumulative time since the zone expiration (instead of the last
time interval) we achieve an approximation of exponential retry backoff with
base 2 (rather than with base 3, as it was until now). Now, with every retry attempt,
the interval between refreshes only doubles (with up to 30 second jitter).

This change helps avoid excessive waiting for a refresh when a few early attempts
fail.

Knot DNS cookies for TCP

See merge request !1410

kdig: allow trailing data in XFR and preserve dname letter case in XFR

See merge request !1409

kzonesign: implemented zone verify

See merge request !1199

Geoip checks

Closes #778

See merge request !1407