1. 10 Mar, 2014 1 commit
    • Evan Hunt's avatar
      [master] use adaptive locks when available · 8cbf3b6f
      Evan Hunt authored
      3781.	[tuning]	Use adaptive mutex locks when available; this
      			has been found to improve performance under load
      			on many systems. "configure --with-locktype=standard"
      			restores conventional mutex locks. [RT #32576]
      8cbf3b6f
  2. 27 Feb, 2014 1 commit
    • Evan Hunt's avatar
      [master] merge several interdependent fixes · 98922b2b
      Evan Hunt authored
      3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
      			[RT #35433]
      
      3759.   [port]          Enable delve on Windows. [RT #35441]
      
      3758.   [port]          Enable export library APIs on windows. [RT #35382]
      98922b2b
  3. 24 Feb, 2014 1 commit
  4. 20 Feb, 2014 1 commit
  5. 19 Feb, 2014 2 commits
    • Evan Hunt's avatar
      [master] add "--with-tuning=large" option · 6a3fa181
      Evan Hunt authored
      3745.	[func]		"configure --with-tuning=large" adjusts various
      			compiled-in constants and default settings to
      			values suited to large servers with abundant
      			memory. [RT #29538]
      6a3fa181
    • Mark Andrews's avatar
      3744. [experimental] SIT: send and process Source Identity Tokens · b5f6271f
      Mark Andrews authored
                              (which are similar to DNS Cookies by Donald Eastlake)
                              and are designed to help clients detect off path
                              spoofed responses and for servers to detect legitimate
                              clients.
      
                              SIT use a experimental EDNS option code (65001).
      
                              SIT can be enabled via --enable-developer or
                              --enable-sit.  It is on by default in Windows.
      
                              RRL processing as been updated to know about SIT with
                              legitimate clients not being rate limited. [RT #35389]
      b5f6271f
  6. 09 Feb, 2014 1 commit
    • Mark Andrews's avatar
      Add Linux support to: · 850b5e80
      Mark Andrews authored
      3733.   [func]          Improve interface scanning support.  Interface
                              information will be automatically updated if the
                              OS supports routing sockets (MacOS, *BSD, Linux).
                              Use "automatic-interface-scan no;" to disable.
      
                              Add "rndc scan" to trigger a scan. [RT #23027]
      850b5e80
  7. 07 Feb, 2014 1 commit
  8. 18 Jan, 2014 1 commit
  9. 14 Jan, 2014 1 commit
    • Evan Hunt's avatar
      [master] native PKCS#11 support · ba751492
      Evan Hunt authored
      3705.	[func]		"configure --enable-native-pkcs11" enables BIND
      			to use the PKCS#11 API for all cryptographic
      			functions, so that it can drive a hardware service
      			module directly without the need to use a modified
      			OpenSSL as intermediary (so long as the HSM's vendor
      			provides a complete-enough implementation of the
      			PKCS#11 interface). This has been tested successfully
      			with the Thales nShield HSM and with SoftHSMv2 from
      			the OpenDNSSEC project. [RT #29031]
      ba751492
  10. 08 Oct, 2013 1 commit
  11. 11 Jul, 2013 1 commit
  12. 13 Mar, 2013 1 commit
    • Evan Hunt's avatar
      [master] add JSON statistics channel · feb067b2
      Evan Hunt authored
      3524.	[func]		Added an alternate statistics channel in JSON format,
      			when the server is built with the json-c library:
      			http://[address]:[port]/json.  [RT #32630]
      feb067b2
  13. 28 Feb, 2013 1 commit
    • Evan Hunt's avatar
      [master] add geoip support · 501941f0
      Evan Hunt authored
      3504.	[func]		Add support for ACLs based on geographic location,
      			using MaxMind GeoIP databases. Based on code
      			contributed by Ken Brownfield <kb@slide.com>.
      			[RT #30681]
      501941f0
  14. 07 Dec, 2012 1 commit
  15. 28 Nov, 2012 1 commit
  16. 21 Jun, 2012 1 commit
    • Evan Hunt's avatar
      Merge rt28412b · 5506903c
      Evan Hunt authored
      - check for mmap() in configure
      - implement isc_file_mmap() and isc_file_munmap() to do
        malloc()/read() and free() when run on systems that do not
        support mmap().
      5506903c
  17. 14 May, 2012 1 commit
    • Evan Hunt's avatar
      merged filter-aaaa-on-v6 (ATT SoW) · d878b8d8
      Evan Hunt authored
      3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
      			to 'filter-aaaa-on-v4' but applies to IPv6
      			connections.  (Use "configure --enable-filter-aaaa"
      			to enable this option.)  [RT #27308]
      d878b8d8
  18. 02 May, 2012 1 commit
  19. 20 Dec, 2011 1 commit
  20. 16 Dec, 2011 1 commit
  21. 14 Oct, 2011 1 commit
  22. 28 Jul, 2011 1 commit
  23. 10 Mar, 2011 1 commit
  24. 27 Feb, 2011 1 commit
  25. 13 Jan, 2011 2 commits
  26. 23 Dec, 2010 1 commit
  27. 18 Dec, 2010 2 commits
    • Mark Andrews's avatar
      regen · aa5b9779
      Mark Andrews authored
      aa5b9779
    • Evan Hunt's avatar
      2989. [func] Added support for writable DLZ zones. (Contributed · 71bd858d
      Evan Hunt authored
      			by Andrew Tridgell of the Samba project.) [RT #22629]
      
      2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
      			of external DLZ drivers that can be loaded as
      			shared objects at runtime rather than linked with
      			named.  Currently this is switched on via a
      			compile-time option, "configure --with-dlz-dlopen".
      			Note: the syntax for configuring DLZ zones
      			is likely to be refined in future releases.
      			(Contributed by Andrew Tridgell of the Samba
      			project.) [RT #22629]
      
      2987.	[func]		Improve ease of configuring TKEY/GSS updates by
      			adding a "tkey-gssapi-keytab" option.  If set,
      			updates will be allowed with any key matching
      			a principal in the specified keytab file.
      			"tkey-gssapi-credential" is no longer required
      			and is expected to be deprecated.  (Contributed
      			by Andrew Tridgell of the Samba project.)
      			[RT #22629]
      71bd858d
  28. 03 Dec, 2010 1 commit
  29. 03 Jun, 2010 2 commits
  30. 19 May, 2010 1 commit
  31. 12 May, 2010 1 commit
  32. 18 Mar, 2010 1 commit
  33. 27 Oct, 2009 1 commit
  34. 26 Oct, 2009 1 commit
  35. 01 Sep, 2009 2 commits