DNS-over-HTTP support (server side) (!799) · Merge requests · Knot projects / Knot Resolver

Merged Petr Špaček requested to merge doh_experiment into master 5 years ago

Apr 11, 2019
- doh: example how to listen on all addresses · 8566e830
  Petr Špaček authored 5 years ago
  
  Verified
  
  8566e830
- doh: fix error handling around empty POST · fc3f6487
  Petr Špaček authored 5 years ago
  
  Verified
  
  fc3f6487
- fixup! modules/http DoH: allocate req.qsource on req.pool · ec56c815
  Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago
  
  Change handling of the inability to get address; it happens occasionally and the traces were disruptive.
  Verified
  
  ec56c815
- fixup! modules/http DoH: allocate req.qsource on req.pool · 99d66de6
  Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago
  
  Verified
  
  99d66de6
- modules/http DoH: allocate req.qsource on req.pool · 856f9dc6
  Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago
  
  The problem is that C structures are not scanned by lua GC, so we'd have to keep these alive in some other way; therefore it's simpler to just use the mempool.
  Verified
  
  856f9dc6
- lib/utils kr_straddr_socket(): support mempools · 39d1e63b
  Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago
  
  "Unfortunately", for FFI-bound C functions there it doesn't hold that missing parameters would be converted to nil/NULL. Still, this function seems unlikely to have been used outside the repo.
  Verified
  
  39d1e63b
- lua resolve*(): fix a problem with JIT · d1a229ae
  Vladimír Čunát authored 5 years ago and Petr Špaček committed 5 years ago
  
  It caused crashes somewhere inside LuaJIT or the JIT-ed code.
  Verified
  
  d1a229ae
- doh: add docs · 85ff42c2
  Petr Špaček authored 5 years ago
  
  Verified
  
  85ff42c2
- http: print nice error if cert exists but key does not · 0562958d
  Petr Špaček authored 5 years ago
  
  Verified
  
  0562958d
- doh: cleanup, removing unused Lua variables · 5a308fd2
  Petr Špaček authored 5 years ago
  
  Verified
  
  5a308fd2
- doh: limit max query size to 1024 B · 937a3ee0
  Petr Špaček authored 5 years ago
  
  The value is kind of arbitrary, as precaution. 64k value was causing cqueues to close connections with GET requests with "Broken pipe" and it seems to work with 1024 B.
  Verified
  
  937a3ee0
- doh: code cleanup, merging resolve_pkt and resolve · 93df1fe3
  Petr Špaček authored 5 years ago
  
  Verified
  
  93df1fe3
- doh: polish timeouts · edbecf40
  Petr Špaček authored 5 years ago
  
  Verified
  
  edbecf40
- doh: remove devel output · 91d35164
  Petr Špaček authored 5 years ago
  
  Verified
  
  91d35164
- stats: collect stats on inbound transport protocol · d74eb7d1
  Petr Špaček authored 5 years ago
  
  Verified
  
  d74eb7d1
- doh: remember source transport · f784831f
  Petr Špaček authored 5 years ago
  
  Verified
  
  f784831f
- doh: test RFC 8484 section 6 - huge answers · d477626e
  Petr Špaček authored 5 years ago
  
  Verified
  
  d477626e
- doh: make client and server address available to modules · b99df087
  Petr Špaček authored 5 years ago
  
  This will allow modules like view etc. work in the same way with packets received over HTTP.
  Verified
  
  b99df087
- doh: fix memory leaks · 8f1155b8
  Petr Špaček authored 5 years ago
  
  Verified
  
  8f1155b8
- doh: send out HTTP TTL · 161dc335
  Petr Špaček authored 5 years ago
  
  We intentionally compute max-age header as minimum over all RRs, doing so only over ANSWER section does not make sense (and RFC 8484 allows us to do so).
  Verified
  
  161dc335
- doh: GET support, breaks on large payloads · 042d052b
  Petr Špaček authored 5 years ago
  
  This seems to be a limitation in cqueues but we have to confirm this.
  Verified
  
  042d052b
- doh: checks around POST HTTP method · 6a4cd552
  Petr Špaček authored 5 years ago
  
  Verified
  
  6a4cd552
- fixup! WIP: DoH experiment · a99055f0
  Vladimír Čunát authored 6 years ago and Petr Špaček committed 5 years ago
  
  Verified
  
  a99055f0
- cache: fix incorrect TTL of positive packets in cache · eb40d0a0
  Vladimír Čunát authored 6 years ago and Petr Špaček committed 5 years ago
  
  It's a regression of b00ee5fa (v3.0.0). Fortunately, since that version we use cache for positive packets only when they are BOGUS (see `bool want_pkt =`) so that they're available for +cd queries. Therefore the impact was really negligible, until the DoT module.
  Verified
  
  eb40d0a0
- DoH experiment · 53fef489
  Petr Špaček authored 6 years ago
  
  First version which actually works with Firefox DoH in default configuration. Limitations: - does not support HTTP GET method - headers for HTTP cache are not generated - error handling is largely missing - no tests - ACLs will not work, modules do not see source IP address of the HTTP endpoint
  Verified
  
  53fef489

Admin message

DNS-over-HTTP support (server side)

Merge request reports

Activity