Lines Matching defs:server
23 #include "resolved-dns-server.h"
99 assert_not_reached("Unknown server type");
104 /* A new DNS server that isn't fallback is added and the one
147 /* This removes the specified server from the linked list of
148 * servers, but any server might still stay around if it has
224 assert_not_reached("Unknown server type");
235 log_debug("Verified we get a response at feature level %s from DNS server %s.",
275 /* Remember the size of the largest UDP packet we received from a server,
307 /* Invoked whenever we get a FORMERR, SERVFAIL or NOTIMP rcode from a server. */
405 log_info("Grace period over, resuming full feature set (%s) for DNS server %s.",
436 /* RRSIG data was missing on a EDNS0 packet with DO bit set. This means the server doesn't
437 * augment responses with DNSSEC RRs. If so, let's better not ask the server for it anymore,
441 log_debug("Detected server responses lack RRSIG records, downgrading feature level...");
448 * packets are lost, maybe the server cannot parse them, hence downgrading sounds like a good
461 log_debug("Got server failure, downgrading feature level...");
483 log_warning("Using degraded feature set (%s) for DNS server %s.",
492 int dns_server_adjust_opt(DnsServer *server, DnsPacket *packet, DnsServerFeatureLevel level) {
497 assert(server);
515 packet_size = server->received_udp_packet_max;
520 const char *dns_server_string(DnsServer *server) {
521 assert(server);
523 if (!server->server_string)
524 (void) in_addr_to_string(server->family, &server->address, &server->server_string);
526 return strna(server->server_string);
529 bool dns_server_dnssec_supported(DnsServer *server) {
530 assert(server);
532 /* Returns whether the server supports DNSSEC according to what we know about it */
534 if (server->possible_feature_level < DNS_SERVER_FEATURE_LEVEL_DO)
537 if (server->packet_bad_opt)
540 if (server->packet_rrsig_missing)
544 if (server->n_failed_tcp >= DNS_SERVER_FEATURE_RETRY_ATTEMPTS)
550 void dns_server_warn_downgrade(DnsServer *server) {
551 assert(server);
553 if (server->warned_downgrade)
558 LOG_MESSAGE("Server %s does not support DNSSEC, downgrading to non-DNSSEC mode.", dns_server_string(server)),
559 "DNS_SERVER=%s", dns_server_string(server),
560 "DNS_SERVER_FEATURE_LEVEL=%s", dns_server_feature_level_to_string(server->possible_feature_level),
563 server->warned_downgrade = true;
658 log_info("Switching to %s DNS server %s.",
678 /* If no DNS server was chosen so far, pick the first one */
706 /* If there's currently no DNS server set, then the next
712 * list only if the server is still linked. */