From 08d04fbbab05f8b70393bc3c9e6ba08a51e74799 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <vladimir.cunat@nic.cz>
Date: Sat, 5 Nov 2022 07:21:43 +0100
Subject: [PATCH] doc nit: tweak the link to dnsflagday.net
As the web is now, combination without www doesn't redirect https
(only http). So let's switch to the final URL; apex is problematic.
---
NEWS | 2 +-
daemon/bindings/net_dns_tweaks.rst | 2 +-
doc/upgrading.rst | 2 +-
lib/defines.h | 2 +-
4 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/NEWS b/NEWS
index f1fa5f3e2..5238331ab 100644
--- a/NEWS
+++ b/NEWS
@@ -241,7 +241,7 @@ Improvements
- doh2: add native C module for DNS-over-HTTPS (#600, !997)
- xdp: add server-side XDP support for higher UDP performance (#533, !1083)
- lower default EDNS buffer size to 1232 bytes (#538, #300, !920);
- see https://dnsflagday.net/2020/
+ see https://www.dnsflagday.net/2020/
- net: split the EDNS buffer size into upstream and downstream (!1026)
- lua-http doh: answer to /dns-query endpoint as well as /doh (!1069)
- improve resiliency against UDP fragmentation attacks (disable PMTUD) (!1061)
diff --git a/daemon/bindings/net_dns_tweaks.rst b/daemon/bindings/net_dns_tweaks.rst
index 4bdc1161b..4cfeba64d 100644
--- a/daemon/bindings/net_dns_tweaks.rst
+++ b/daemon/bindings/net_dns_tweaks.rst
@@ -10,7 +10,7 @@ Default values should not be changed except for very special cases.
Get/set maximum EDNS payload size advertised in DNS packets. Different values can be configured for communication downstream (towards clients) and upstream (towards other DNS servers). Set and also get operations use values in this order.
- Default is 1232 bytes which was chosen to minimize risk of `issues caused by IP fragmentation <https://blog.apnic.net/2019/07/12/its-time-to-consider-avoiding-ip-fragmentation-in-the-dns/>`_. Further details can be found at `DNS Flag Day 2020 <https://dnsflagday.net/2020/>`_ web site.
+ Default is 1232 bytes which was chosen to minimize risk of `issues caused by IP fragmentation <https://blog.apnic.net/2019/07/12/its-time-to-consider-avoiding-ip-fragmentation-in-the-dns/>`_. Further details can be found at `DNS Flag Day 2020 <https://www.dnsflagday.net/2020/>`_ web site.
Minimal value allowed by standard :rfc:`6891` is 512 bytes, which is equal to DNS packet size without Extension Mechanisms for DNS. Value 1220 bytes is minimum size required by DNSSEC standard :rfc:`4035`.
diff --git a/doc/upgrading.rst b/doc/upgrading.rst
index c35fb1b59..56655faff 100644
--- a/doc/upgrading.rst
+++ b/doc/upgrading.rst
@@ -94,7 +94,7 @@ Users
* Users of :ref:`control-sockets` API need to terminate each command sent to resolver with newline
character (ASCII ``\n``). Correct usage: ``cache.stats()\n``.
Newline terminated commands are accepted by all resolver versions >= 1.0.0.
-* `DNS Flag Day 2020 <https://dnsflagday.net/2020/>`_ is now effective and Knot Resolver uses
+* `DNS Flag Day 2020 <https://www.dnsflagday.net/2020/>`_ is now effective and Knot Resolver uses
maximum size of UDP answer to 1232 bytes. Please double-check your firewall,
it has to allow DNS traffic on UDP and **also TCP** port 53.
* Human readable output in interactive mode and from :ref:`control-sockets` was improved and
diff --git a/lib/defines.h b/lib/defines.h
index 226f7216f..156ff6188 100644
--- a/lib/defines.h
+++ b/lib/defines.h
@@ -64,7 +64,7 @@ static inline int KR_COLD kr_error(int x) {
#define KR_DNS_DOH_PORT 443
#define KR_DNS_TLS_PORT 853
#define KR_EDNS_VERSION 0
-#define KR_EDNS_PAYLOAD 1232 /* Default UDP payload; see https://dnsflagday.net/2020/ */
+#define KR_EDNS_PAYLOAD 1232 /* Default UDP payload; see https://www.dnsflagday.net/2020/ */
#define KR_CACHE_DEFAULT_TTL_MIN (5) /* avoid bursts of queries */
#define KR_CACHE_DEFAULT_TTL_MAX (6 * 24 * 3600) /* 6 days, like the root NS TTL */
--
GitLab