Version | Change log |
Dnssec-Trigger 1.21.0 Aug 15, 2024 |
Features: Fix #1071: [FR] Clear both in-memory and cachedb module cache with `unbound-control flush*` commands. Fix #144: Port ipset to BSD pf tables. Add dnstap-sample-rate that logs only 1/N messages, for high volume server environments. Thanks Dan Luther. Add root key 38696 from 2024 for DNSSEC validation. It is added to the default root keys in unbound-anchor. The content can be inspected with `unbound-anchor -l`. Merge #1090: Cookie secret file. Adds `cookie-secret-file: "unbound_cookiesecrets.txt"` option to store cookie secrets for EDNS COOKIE secret rollover. The remote control add_cookie_secret, activate_cookie_secret and drop_cookie_secret commands can be used for rollover, the command print_cookie_secrets shows the values in use. Bug Fixes: Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco Bearzi, Jodok Vieli, and Cagin Tanir from NetSec group, ETH Zurich. Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek, Anat Bremler-Barr, Shoham Danino and Yuval Shavitt (Tel-Aviv University and Reichman University). Merge #1062: Fix potential overflow bug while parsing port in function cfg_mark_ports. Fix for #1062: declaration before statement, avoid print of null, and redundant check for array size. Fix to squelch udp connect errors in the log at low verbosity about invalid argument for IPv6 link local addresses. Fix when the mesh jostle is exceeded that nameserver targets are marked as resolved, so that the lookup is not stuck on the requestlist. Add missing common functions to tdir tests. Merge #1070: Fix rtt assignement for low values of infra-cache-max-rtt. Merge #1069: Fix unbound-control stdin commands for multi-process Unbounds. Fix unbound-control commands that read stdin in multi-process operation (local_zones_remove, local_zones, local_datas_remove, local_datas, view_local_datas_remove, view_local_datas). They will be properly distributed to all processes. dump_cache and load_cache are no longer supported in multi-proc |
Dnssec-Trigger 0.11 May 1, 2013 |