regen v9_11

regen v9_11

Set a LMDB mapsize and also provide a config option to control it (#44954) (cherry picked from commit 241b49e6119eb37eebe2de98f0e8bde436074cb3)

Add doc function for cfg_type_querysource4 and cfg_type_querysource6 (#43768) (cherry picked from commit 5c843b384d7a22b7b6ff287bd581b18bb1bd5083)

regen v9_11

regen v9_11

regen v9_11

regen v9_11

regen v9_11

regen master

regen master

regen master

4356. [func] Add the ability to specify whether to wait for nameserver addresses to be looked up or not to rpz with a new modifying directive 'nsip-wait-recurse'. [RT #35009]

regen master

Use optimal message sizes to improve compression in AXFRs (#40996)

Allow non-destructive control channel access using a "read-only" clause (#40498)

4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726]

regen master

regen master

regen master

4223. [func] Add support for setting max-cache-size to percentage of available physical memory, set default to 90%. [RT #38442]

4222. [func] Bias IPv6 servers when selecting the next server to query. [RT #40836]

regen master

4196. [doc] Improve how "enum + other" types are documented. [RT #40608] 4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]

regen master

regen master

regen master

Allow RPZ rewrite logging to be configured on a per-zone basis (#39754)

regen master

regen master

regen master

regen master

[master] add TCP pipelining support 4040. [func] Added server-side support for pipelined TCP queries. TCP connections are no longer closed after the first query received from a client. (The new "keep-response-order" option allows clients to be specified for which the old behavior will still be used.) [RT #37821]

regen master

Add a TCP only option to server/peer

regen master

regen master

regen master

regen master

regen master

regen master

regen master

regen master

remove duplicate request-ixfr rt36878 (cherry picked from commit 0a484c39fc85752925bb3231b1b566420437a1e3)

regen master

regen master

regen master

regen master

regen master

add CFG_CLAUSEFLAG_NOTCONFIGURED flag

regen master

3744. [experimental] SIT: send and process Source Identity Tokens (which are similar to DNS Cookies by Donald Eastlake) and are designed to help clients detect off path spoofed responses and for servers to detect legitimate clients. SIT use a experimental EDNS option code (65001). SIT can be enabled via --enable-developer or --enable-sit. It is on by default in Windows. RRL processing as been updated to know about SIT with legitimate clients not being rate limited. [RT #35389]

regen master

regen master

3703. [func] Prefetch about to expire records if they are queried for, see prefetch option for details. [RT #35041]

regen master

regen master

regen master

regen master

regen master

regen master

[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]

regen master

regen master

regen master

regen master

regen master

3387. [func] Support for a DS digest can be disabled at runtime with disable-ds-digests. [RT #21581]

regen master

regen master

regen master

regen master

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

3003. [experimental] Added update-policy match type "external", enabliing named to defer the decision of whether to allow a dynamic update to an external daemon. (Contributed by Andrew Tridgell.) [RT #22758]

regen HEAD

regen HEAD

2989. [func] Added support for writable DLZ zones. (Contributed by Andrew Tridgell of the Samba project.) [RT #22629] 2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation of external DLZ drivers that can be loaded as shared objects at runtime rather than linked with named. Currently this is switched on via a compile-time option, "configure --with-dlz-dlopen". Note: the syntax for configuring DLZ zones is likely to be refined in future releases. (Contributed by Andrew Tridgell of the Samba project.) [RT #22629] 2987. [func] Improve ease of configuring TKEY/GSS updates by adding a "tkey-gssapi-keytab" option. If set, updates will be allowed with any key matching a principal in the specified keytab file. "tkey-gssapi-credential" is no longer required and is expected to be deprecated. (Contributed by Andrew Tridgell of the Samba project.) [RT #22629]

regen HEAD

2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen HEAD

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

2448. [func] Add NSEC3 support. [RT #15452]

regen

regen

regen

regen

regen

regen

regen

regen

regen

commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

regen

1817. [func] add support for additional zone file formats for improving loading performance. The masterfile-format option in named.conf can be used to specify a non-default format. A new separate command named-compilezone was provided to generate zone files in a new format.

1868. [func] edns-udp-size can now be overridden on a per server basis. [RT #14851]

regen

regen

regen

regen

regen

1794. [func] Named and named-checkzone can now both check for non-terminal wildcard records.

regen

regen

regen

regen

regen

regen

regen

3845: DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format

regen

1648. [func] Update dnssec-lookaside named.conf syntax to support multiple dnssec-lookaside namespaces (not yet implemented).

regen

copyright

regen

regen

1558. [func] New DNSSEC 'disable-algorithms'. Support entry into child zones for which we don't have a supported algorithm. Such child zones are treated as unsigned. 1557. [func] Implement missing DNSSEC tests for * NOQNAME proof with wildcard answers. * NOWILDARD proof with NXDOMAIN. Cache and return NOQNAME with wildcard answers.

regen documentation

1455. [bug] <netaddr> missing from server grammar in doc/misc/options. [RT #5616]

regen

Split off the named.conf grammar into a source module separate from the configuration parser, to facilitate reuse of the latter for parsing non-BIND configuration files

regenerated

regenerated

regenerated

New named.conf option "ixfr-from-differences" [RT #1727]

regenerated

946. [cleanup] doc/misc/options is now machine-generated from the configuration parser syntax tables, and therefore more likely to be correct.

allow-v6-syntheis was missing [RT #1408]; tabified

documented the max-cache-size option

documented the obsolete ixfr-tmp-file option

788. [feature] Add the "match-mapped-addresses" options, which causes IPv6 v4mapped addresses to be treated as IPv4 addresses for the purpose of acl matching.

782. [feature] Implement the serial-query-rate option.

Mark transfer-format as having a new default.

added minimal-responses option

stub zones don't do update forwarding

770. [func] Add the "edns yes_or_no" statement to the server clause. [RT #524]

allow-update-forwarding for slave zones should be Yes

Some options were allowed that should not have been.

transfer-source entries mentioned ip_addr but not port; notify-source was missing

note that stub zonesare only partially supported

Add random-device

copyright update

rndc dumpdb is supported now.

* Removed max-names (as well as DNS_R_ZONETOOLARGE, which was never returned by any function and was presumably cruft related to max-names). * Made allow-notify part of the public source and documented it. * Made master server TSIG keys part of the public source and documented it. * Removed a define of DNS_OPT_NEWCODES supposedly used by GNS, with the approval of Mike. * Made DNS_ZONE_FORCELOAD flag, used by rndc reload, work in the public source. After the NOMINUM_PUBLIC cleanup, I'll fix the rndc reload issues we've been discussing here at IETF. I left in NOMIMUM_PUBLIC around the forward-notify stuff, with the expectation that Michael will give the go-ahead next week to remove it.

treat the use-ixfr option like we do with other obsolete options; in particular, there is no need for the ARM to have a separate section about it

{min,max}-re{try,fresh}-time are implemented as view and zone options, too

{min,max}-{refresh,retry}-time are now implemented

sortlist is implemented in views, too

reclassified check-names as obsolete

stacksize, datasize, coresize and files options are now implemented

statistics-file, sortlist, additional-from-cache, and additional-from-auth are now implemented

Update dialup info.

document "notify explicit"

document the zone{} database option.

fetch-glue is obsolete

Update to reflect current status.

implement lame-ttl.

541. [func] Add bogus server support.

539. [func] Support the blackhole option.

selective forwarding updates

fixed copyright URL

stub zones are implemented

sig-validity-interval and update-policy were missing

new URL for the copyright notice

Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your own CVS tree will help minimize CVS conflicts. Maybe not. Blame Graff for getting me to trim all trailing whitespace.