Bump library version to libknot8, libdnssec6, libzscanner2, and knotd module

See merge request !914

knot_dname_* API rework

See merge request !915

Vladimír Čunát authored 6 years ago and Daniel Salzman committed 6 years ago

Two of the call points might be slightly more readable with _is_sub(),
but I'm not convinced that justifies keeping the function.

Vladimír Čunát authored 6 years ago and Daniel Salzman committed 6 years ago

... instead of knot_dname_is_sub()

Vladimír Čunát authored 6 years ago and Daniel Salzman committed 6 years ago

And reimplement knot_dname_is_sub() and knot_dname_in() via the new API.

Load diff no serial

See merge request !907

Libor Peltan authored 6 years ago and Daniel Salzman committed 6 years ago

The difference ignores RRSIGs, NSECs, and NSEC3s. This is motivated by users
willing to have zonefile w/o DNSSEC, but signed zone.

If the final update consists only from changed SOA serial and RRSIG-SOA, clear it.
This happens after automatic serial icrement, we avoid increment on simple reload.

fixes #594

Module for response tailoring according to client's subnet or geographic location

Closes #563 and #413

See merge request !910

- DNSSEC RRs forbidden in geo config
- exit processing if query answered by previous module
- use lookup format of dnames in trie
- check the correct "geo" or "net" key in config
- unify log messages
- set AA bit if the query is processed succesfuly
- add geodb avilability check