nitpicks

See merge request !1224

On some platforms in CI, even 8s doesn't seem sufficient enough to
guarantee stability. Hopefully this improves the situation.

.gitignore: add '.cache'

See merge request !1231

modules/policy: add 'domain' filter for equality matching

See merge request !1228

Vladimír Čunát authored 3 years ago and Oto Šťáva committed 3 years ago

Overriding records makes more sense on a particular name
than in a whole sub-tree.

spelling & edns_keepalive fix

See merge request !1229

Josh Soref authored 3 years ago and Tomas Krizek committed 3 years ago

Due to the typo in the EDNS keepalive init funcion name, the module
wouldn't be properly initialized after loading and wouldn't be
functional.

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Josh Soref authored 3 years ago and Tomas Krizek committed 3 years ago

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

nitpicks

See merge request !1220

Vladimír Čunát authored 3 years ago and Tomas Krizek committed 3 years ago

The brackets notation and string quotation are not obvious to everyone.

Vladimír Čunát authored 3 years ago and Tomas Krizek committed 3 years ago

Today it was often failing due to starting too soon.
Nothing depends on this job, so it's cheap to start its check later.

lua log(): make it work again

See merge request !1223

sandbox.lua:72: attempt to call global 'log_notice' (a nil value)
Broken by commit 39dd89db (MR !1208)

various refactoring

See merge request !1221

Vladimír Čunát authored 3 years ago and Tomas Krizek committed 3 years ago

NSEC* params were not being stashed by this function.  For prefilling
it's useful, but doing it on *every* NSEC* record would be quite a waste,
so we introduce a parameter to select this.

Implementation: there were good reasons not to implement this until
needed - it wasn't straightforward at all.

Vladimír Čunát authored 3 years ago and Tomas Krizek committed 3 years ago

It was a bit weird that the API had mempool creation but no deletion.

Vladimír Čunát authored 3 years ago and Tomas Krizek committed 3 years ago

Also be more careful about rounding, overflows and assertions in there.
The implicit internal timer was unused and didn't seem worth keeping.

Vladimír Čunát authored 3 years ago and Tomas Krizek committed 3 years ago

The POSIX APIs using `struct timeval` are deprecated anyway
in favor of clock_gettime() + `struct timespec`.

The function didn't seem well designed anyway, as `long` is just
32-bit on usual 32-bit platforms, which certainly isn't safe.
(roughly one month, on a quick glance)

modules/priming: don't query A/AAAA when IPv4/IPv6 is disabled

See merge request !1222

Štěpán Balážik authored 3 years ago and Tomas Krizek committed 3 years ago

Previously we primed for A/AAAA addresses of root servers even when
the respective IP version was disabled from configuration.

lib/dnssec: refactor some parts

See merge request !1213