Commit ba1bfc79 authored by Stephen Morris's avatar Stephen Morris

Merge branch 'master' into trac1605

parents 9e89c763 70778ebe
382. [func] jelte 391. [bug]* vorner
The long time unused configuration options of Xfrout "log_name",
"log_file", "log_severity", "log_version" and "log_max_bytes" were
removed, as they had no effect (Xfrout uses the global logging framework).
However, if you have them set, you need to remove them from the
configuration file or the configuration will be rejected.
(Trac #1090, git ef1eba02e4cf550e48e7318702cff6d67c1ec82e)
bind10-devel-20120301 released on March 1, 2012
390. [bug] vorner
The UDP IPv6 packets are now correctly fragmented for maximum
guaranteed MTU, so they won't get lost because being too large
for some hop.
(Trac #1534, git ff013364643f9bfa736b2d23fec39ac35872d6ad)
389. [func]* vorner
Xfrout now uses the global TSIG keyring, instead of its own. This
means the keys need to be set only once (in tsig_keys/keys).
However, the old configuration of Xfrout/tsig_keys need to be
removed for Xfrout to work.
(Trac #1643, git 5a7953933a49a0ddd4ee1feaddc908cd2285522d)
388. [func] jreed
Use prefix "sockcreator-" for the private temporary directory
used for b10-sockcreator communication.
(git b98523c1260637cb33436964dc18e9763622a242)
387. [build] muks
Accept a --without-werror configure switch so that some builders can
disable the use of -Werror in CFLAGS when building.
(Trac #1671, git 8684a411d7718a71ad9fb616f56b26436c4f03e5)
386. [bug] jelte
Upon initial sqlite3 database creation, the 'diffs' table is now
always created. This already happened most of the time, but there
are a few cases where it was skipped, resulting in potential errors
in xfrout later.
(Trac #1717, git 30d7686cb6e2fa64866c983e0cfb7b8fabedc7a2)
385. [bug] jinmei
libdns++: masterLoad() didn't accept comments placed at the end of
an RR. Due to this the in-memory data source cannot load a master
file for a signed zone even if it's preprocessed with BIND 9's
named-compilezone.
Note: this fix is considered temporary and still only accepts some
limited form of such comments. The main purpose is to allow the
in-memory data source to load any signed or unsigned zone files as
long as they are at least normalized with named-compilezone.
(Trac #1667, git 6f771b28eea25c693fe93a0e2379af924464a562)
384. [func] jinmei, jelte, vorner, haikuo, kevin
b10-auth now supports NSEC3-signed zones in the in-memory data
source.
(Trac #1580, #1581, #1582, #1583, #1584, #1585, #1587, and
other related changes to the in-memory data source)
383. [build] jinmei
Fixed build failure on MacOS 10.7 (Lion) due to the use of
IPV6_PKTINFO; the OS requires a special definition to make it
visible to the compiler.
(Trac #1633, git 19ba70c7cc3da462c70e8c4f74b321b8daad0100)
382. [func] jelte
b10-auth now also experimentally supports statistics counters of b10-auth now also experimentally supports statistics counters of
the rcode reponses it sends. The counters can be shown as the rcode responses it sends. The counters can be shown as
rcode.<code name>, where code name is the lowercase textual rcode.<code name>, where code name is the lowercase textual
representation of the rcode (e.g. "noerror", "formerr", etc.). representation of the rcode (e.g. "noerror", "formerr", etc.).
Same note applies as for opcodes, see changelog entry 364. Same note applies as for opcodes, see changelog entry 364.
...@@ -50,11 +113,11 @@ ...@@ -50,11 +113,11 @@
(Trac #1570, git 2858b2098a10a8cc2d34bf87463ace0629d3670e) (Trac #1570, git 2858b2098a10a8cc2d34bf87463ace0629d3670e)
375. [func] jelte 375. [func] jelte
Modules now inform the system when they are stopping. As a result, they Modules now inform the system when they are stopping. As a result,
are removed from the 'active modules' list in bindctl, which can then they are removed from the 'active modules' list in bindctl, which
inform the user directly when it tries to send them a command or can then inform the user directly when it tries to send them a
configuration update. Previously this would result in a 'not command or configuration update. Previously this would result
responding' error instead of 'not running'. in a 'not responding' error instead of 'not running'.
(Trac #640, git 17e78fa1bb1227340aa9815e91ed5c50d174425d) (Trac #640, git 17e78fa1bb1227340aa9815e91ed5c50d174425d)
374. [func]* stephen 374. [func]* stephen
...@@ -90,10 +153,11 @@ ...@@ -90,10 +153,11 @@
(Trac #1575, git 2c421b58e810028b303d328e4e2f5b74ea124839) (Trac #1575, git 2c421b58e810028b303d328e4e2f5b74ea124839)
369. [func] vorner 369. [func] vorner
The SocketRequestor provides more information about what error happened The SocketRequestor provides more information about what error
when it throws, by using subclasses of the original exception. This way happened when it throws, by using subclasses of the original
a user not interested in the difference can still use the original exception. This way a user not interested in the difference can
exception, while it can be recognized if necessary. still use the original exception, while it can be recognized if
necessary.
(Trac #1542, git 2080e0316a339fa3cadea00e10b1ec4bc322ada0) (Trac #1542, git 2080e0316a339fa3cadea00e10b1ec4bc322ada0)
368. [func]* jinmei 368. [func]* jinmei
...@@ -151,7 +215,8 @@ bind10-devel-20120119 released on January 19, 2012 ...@@ -151,7 +215,8 @@ bind10-devel-20120119 released on January 19, 2012
configuration. If your b10-config.db contains "setuid" for configuration. If your b10-config.db contains "setuid" for
Boss.components, you'll need to remove that entry by hand before Boss.components, you'll need to remove that entry by hand before
starting BIND 10. starting BIND 10.
(Trac #1508-#1510, git edc5b3c12eb45437361484c843794416ad86bb00) (Trac #1508, #1509, #1510,
git edc5b3c12eb45437361484c843794416ad86bb00)
361. [func] vorner,jelte,jinmei 361. [func] vorner,jelte,jinmei
The socket creator is now used to provide sockets. It means you can The socket creator is now used to provide sockets. It means you can
......
...@@ -5,6 +5,7 @@ AC_PREREQ([2.59]) ...@@ -5,6 +5,7 @@ AC_PREREQ([2.59])
AC_INIT(bind10-devel, 20120127, bind10-dev@isc.org) AC_INIT(bind10-devel, 20120127, bind10-dev@isc.org)
AC_CONFIG_SRCDIR(README) AC_CONFIG_SRCDIR(README)
AM_INIT_AUTOMAKE AM_INIT_AUTOMAKE
m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])dnl be backward compatible
AC_CONFIG_HEADERS([config.h]) AC_CONFIG_HEADERS([config.h])
# Checks for programs. # Checks for programs.
...@@ -108,6 +109,10 @@ case "$host" in ...@@ -108,6 +109,10 @@ case "$host" in
LDFLAGS="$LDFLAGS -z now" LDFLAGS="$LDFLAGS -z now"
;; ;;
*-apple-darwin*) *-apple-darwin*)
# Starting with OSX 10.7 (Lion) we must choose which IPv6 API to use
# (RFC2292 or RFC3542).
CPPFLAGS="$CPPFLAGS -D__APPLE_USE_RFC_3542"
# libtool doesn't work perfectly with Darwin: libtool embeds the # libtool doesn't work perfectly with Darwin: libtool embeds the
# final install path in dynamic libraries and our loadable python # final install path in dynamic libraries and our loadable python
# modules always refer to that path even if it's loaded within the # modules always refer to that path even if it's loaded within the
...@@ -270,7 +275,7 @@ AC_DEFUN([BIND10_CXX_TRY_FLAG], [ ...@@ -270,7 +275,7 @@ AC_DEFUN([BIND10_CXX_TRY_FLAG], [
bind10_save_CXXFLAGS="$CXXFLAGS" bind10_save_CXXFLAGS="$CXXFLAGS"
CXXFLAGS="$CXXFLAGS $1" CXXFLAGS="$CXXFLAGS $1"
AC_LINK_IFELSE([int main(void){ return 0;} ], AC_LINK_IFELSE([int main(void){ return 0;}],
[bind10_cxx_flag=yes], [bind10_cxx_flag=no]) [bind10_cxx_flag=yes], [bind10_cxx_flag=no])
CXXFLAGS="$bind10_save_CXXFLAGS" CXXFLAGS="$bind10_save_CXXFLAGS"
...@@ -283,8 +288,6 @@ AC_DEFUN([BIND10_CXX_TRY_FLAG], [ ...@@ -283,8 +288,6 @@ AC_DEFUN([BIND10_CXX_TRY_FLAG], [
AC_MSG_RESULT([$bind10_cxx_flag]) AC_MSG_RESULT([$bind10_cxx_flag])
]) ])
werror_ok=0
# SunStudio compiler requires special compiler options for boost # SunStudio compiler requires special compiler options for boost
# (http://blogs.sun.com/sga/entry/boost_mini_howto) # (http://blogs.sun.com/sga/entry/boost_mini_howto)
if test "$SUNCXX" = "yes"; then if test "$SUNCXX" = "yes"; then
...@@ -292,7 +295,7 @@ CXXFLAGS="$CXXFLAGS -library=stlport4 -features=tmplife -features=tmplrefstatic" ...@@ -292,7 +295,7 @@ CXXFLAGS="$CXXFLAGS -library=stlport4 -features=tmplife -features=tmplrefstatic"
MULTITHREADING_FLAG="-mt" MULTITHREADING_FLAG="-mt"
fi fi
BIND10_CXX_TRY_FLAG(-Wno-missing-field-initializers, BIND10_CXX_TRY_FLAG([-Wno-missing-field-initializers],
[WARNING_NO_MISSING_FIELD_INITIALIZERS_CFLAG="-Wno-missing-field-initializers"]) [WARNING_NO_MISSING_FIELD_INITIALIZERS_CFLAG="-Wno-missing-field-initializers"])
AC_SUBST(WARNING_NO_MISSING_FIELD_INITIALIZERS_CFLAG) AC_SUBST(WARNING_NO_MISSING_FIELD_INITIALIZERS_CFLAG)
...@@ -310,19 +313,34 @@ case "$host" in ...@@ -310,19 +313,34 @@ case "$host" in
;; ;;
esac esac
# Don't use -Werror if configured not to
AC_ARG_WITH(werror,
AC_HELP_STRING([--with-werror], [Compile using -Werror (default=yes)]),
[
case "${withval}" in
yes) with_werror=1 ;;
no) with_werror=0 ;;
*) AC_MSG_ERROR(bad value ${withval} for --with-werror) ;;
esac],
[with_werror=1])
werror_ok=0
# Certain versions of gcc (g++) have a bug that incorrectly warns about # Certain versions of gcc (g++) have a bug that incorrectly warns about
# the use of anonymous name spaces even if they're closed in a single # the use of anonymous name spaces even if they're closed in a single
# translation unit. For these versions we have to disable -Werror. # translation unit. For these versions we have to disable -Werror.
CXXFLAGS_SAVED="$CXXFLAGS" if test $with_werror = 1; then
CXXFLAGS="$CXXFLAGS $B10_CXXFLAGS -Werror" CXXFLAGS_SAVED="$CXXFLAGS"
AC_MSG_CHECKING(for in-TU anonymous namespace breakage) CXXFLAGS="$CXXFLAGS $B10_CXXFLAGS -Werror"
AC_TRY_COMPILE([namespace { class Foo {}; } AC_MSG_CHECKING(for in-TU anonymous namespace breakage)
namespace isc {class Bar {Foo foo_;};} ],, AC_TRY_COMPILE([namespace { class Foo {}; }
namespace isc {class Bar {Foo foo_;};} ],,
[AC_MSG_RESULT(no) [AC_MSG_RESULT(no)
werror_ok=1 werror_ok=1
B10_CXXFLAGS="$B10_CXXFLAGS -Werror"], B10_CXXFLAGS="$B10_CXXFLAGS -Werror"],
[AC_MSG_RESULT(yes)]) [AC_MSG_RESULT(yes)])
CXXFLAGS="$CXXFLAGS_SAVED" CXXFLAGS="$CXXFLAGS_SAVED"
fi
# Python 3.2 has an unused parameter in one of its headers. This # Python 3.2 has an unused parameter in one of its headers. This
# has been reported, but not fixed as of yet, so we check if we need # has been reported, but not fixed as of yet, so we check if we need
...@@ -517,21 +535,22 @@ else ...@@ -517,21 +535,22 @@ else
AC_PATH_PROG([BOTAN_CONFIG], [botan-config]) AC_PATH_PROG([BOTAN_CONFIG], [botan-config])
fi fi
fi fi
if test "x${BOTAN_CONFIG}" != "x"
BOTAN_LIBS=`${BOTAN_CONFIG} --libs` then
BOTAN_INCLUDES=`${BOTAN_CONFIG} --cflags` BOTAN_LIBS=`${BOTAN_CONFIG} --libs`
BOTAN_INCLUDES=`${BOTAN_CONFIG} --cflags`
# We expect botan-config --libs to contain -L<path_to_libbotan>, but
# this is not always the case. As a heuristics workaround we add # We expect botan-config --libs to contain -L<path_to_libbotan>, but
# -L`botan-config --prefix/lib` in this case (if not present already). # this is not always the case. As a heuristics workaround we add
# Same for BOTAN_INCLUDES (but using include instead of lib) below. # -L`botan-config --prefix/lib` in this case (if not present already).
if [ $BOTAN_CONFIG --prefix >/dev/null 2>&1 ] ; then # Same for BOTAN_INCLUDES (but using include instead of lib) below.
echo ${BOTAN_LIBS} | grep -- -L > /dev/null || \ if [ ${BOTAN_CONFIG} --prefix >/dev/null 2>&1 ] ; then
BOTAN_LIBS="-L`${BOTAN_CONFIG} --prefix`/lib ${BOTAN_LIBS}" echo ${BOTAN_LIBS} | grep -- -L > /dev/null || \
echo ${BOTAN_INCLUDES} | grep -- -I > /dev/null || \ BOTAN_LIBS="-L`${BOTAN_CONFIG} --prefix`/lib ${BOTAN_LIBS}"
BOTAN_INCLUDES="-I`${BOTAN_CONFIG} --prefix`/include ${BOTAN_INCLUDES}" echo ${BOTAN_INCLUDES} | grep -- -I > /dev/null || \
BOTAN_INCLUDES="-I`${BOTAN_CONFIG} --prefix`/include ${BOTAN_INCLUDES}"
fi
fi fi
# botan-config script (and the way we call pkg-config) returns -L and -l # botan-config script (and the way we call pkg-config) returns -L and -l
# as one string, but we need them in separate values # as one string, but we need them in separate values
BOTAN_LDFLAGS= BOTAN_LDFLAGS=
...@@ -1001,6 +1020,8 @@ AC_CONFIG_FILES([Makefile ...@@ -1001,6 +1020,8 @@ AC_CONFIG_FILES([Makefile
src/lib/python/isc/bind10/tests/Makefile src/lib/python/isc/bind10/tests/Makefile
src/lib/python/isc/xfrin/Makefile src/lib/python/isc/xfrin/Makefile
src/lib/python/isc/xfrin/tests/Makefile src/lib/python/isc/xfrin/tests/Makefile
src/lib/python/isc/server_common/Makefile
src/lib/python/isc/server_common/tests/Makefile
src/lib/config/Makefile src/lib/config/Makefile
src/lib/config/tests/Makefile src/lib/config/tests/Makefile
src/lib/config/tests/testdata/Makefile src/lib/config/tests/testdata/Makefile
......
This diff is collapsed.
...@@ -221,18 +221,22 @@ Chapter 1. Introduction ...@@ -221,18 +221,22 @@ Chapter 1. Introduction
processes as needed. The processes started by the bind10 command have processes as needed. The processes started by the bind10 command have
names starting with "b10-", including: names starting with "b10-", including:
o b10-msgq -- Message bus daemon. This process coordinates communication
between all of the other BIND 10 processes.
o b10-auth -- Authoritative DNS server. This process serves DNS o b10-auth -- Authoritative DNS server. This process serves DNS
requests. requests.
o b10-cfgmgr -- Configuration manager. This process maintains all of the o b10-cfgmgr -- Configuration manager. This process maintains all of the
configuration for BIND 10. configuration for BIND 10.
o b10-cmdctl -- Command and control service. This process allows o b10-cmdctl -- Command and control service. This process allows
external control of the BIND 10 system. external control of the BIND 10 system.
o b10-msgq -- Message bus daemon. This process coordinates communication
between all of the other BIND 10 processes.
o b10-resolver -- Recursive name server. This process handles incoming o b10-resolver -- Recursive name server. This process handles incoming
queries. queries.
o b10-sockcreator -- Socket creator daemon. This process creates sockets
used by network-listening BIND 10 processes.
o b10-stats -- Statistics collection daemon. This process collects and o b10-stats -- Statistics collection daemon. This process collects and
reports statistics data. reports statistics data.
o b10-stats-httpd -- HTTP server for statistics reporting. This process
reports statistics data in XML format over HTTP.
o b10-xfrin -- Incoming zone transfer service. This process is used to o b10-xfrin -- Incoming zone transfer service. This process is used to
transfer a new copy of a zone into BIND 10, when acting as a secondary transfer a new copy of a zone into BIND 10, when acting as a secondary
server. server.
...@@ -249,8 +253,9 @@ Chapter 1. Introduction ...@@ -249,8 +253,9 @@ Chapter 1. Introduction
Once BIND 10 is running, a few commands are used to interact directly with Once BIND 10 is running, a few commands are used to interact directly with
the system: the system:
o bindctl -- interactive administration interface. This is a o bindctl -- interactive administration interface. This is a low-level
command-line tool which allows an administrator to control BIND 10. command-line tool which allows a developer or an experienced
administrator to control BIND 10.
o b10-loadzone -- zone file loader. This tool will load standard o b10-loadzone -- zone file loader. This tool will load standard
masterfile-format zone files into BIND 10. masterfile-format zone files into BIND 10.
o b10-cmdctl-usermgr -- user access control. This tool allows an o b10-cmdctl-usermgr -- user access control. This tool allows an
...@@ -491,10 +496,11 @@ Chapter 3. Starting BIND10 with bind10 ...@@ -491,10 +496,11 @@ Chapter 3. Starting BIND10 with bind10
b10-sockcreator will allocate sockets for the rest of the system. b10-sockcreator will allocate sockets for the rest of the system.
In its default configuration, the bind10 master process will also start up In its default configuration, the bind10 master process will also start up
b10-cmdctl for admins to communicate with the system, b10-auth for b10-cmdctl for administration tools to communicate with the system,
authoritative DNS service, b10-stats for statistics collection, b10-xfrin b10-auth for authoritative DNS service, b10-stats for statistics
for inbound DNS zone transfers, b10-xfrout for outbound DNS zone collection, b10-stats-httpd for statistics reporting, b10-xfrin for
transfers, and b10-zonemgr for secondary service. inbound DNS zone transfers, b10-xfrout for outbound DNS zone transfers,
and b10-zonemgr for secondary service.
3.1. Starting BIND 10 3.1. Starting BIND 10
...@@ -600,6 +606,22 @@ Chapter 3. Starting BIND10 with bind10 ...@@ -600,6 +606,22 @@ Chapter 3. Starting BIND10 with bind10
In short, you should think twice before disabling something here. In short, you should think twice before disabling something here.
It is possible to start some components multiple times (currently b10-auth
and b10-resolzer). You might want to do that to gain more performance
(each one uses only single core). Just put multiple entries under
different names, like this, with the same config:
> config add Boss/components b10-resolver-2
> config set Boss/components/b10-resolver-2/special resolver
> config set Boss/components/b10-resolver-2/kind needed
> config commit
However, this is work in progress and the support is not yet complete. For
example, each resolver will have its own cache, each authoritative server
will keep its own copy of in-memory data and there could be problems with
locking the sqlite database, if used. The configuration might be changed
to something more convenient in future.
Chapter 4. Command channel Chapter 4. Command channel
The BIND 10 components use the b10-msgq message routing daemon to The BIND 10 components use the b10-msgq message routing daemon to
...@@ -939,26 +961,22 @@ Chapter 10. Outbound Zone Transfers ...@@ -939,26 +961,22 @@ Chapter 10. Outbound Zone Transfers
In the above example the lines for transfer_acl were divided for In the above example the lines for transfer_acl were divided for
readability. In the actual input it must be in a single line. readability. In the actual input it must be in a single line.
If you want to require TSIG in access control, a separate TSIG "key ring" If you want to require TSIG in access control, a system wide TSIG "key
must be configured specifically for b10-xfrout as well as a system wide ring" must be configured. For example, to change the previous example to
key ring, both containing a consistent set of keys. For example, to change allowing requests from 192.0.2.1 signed by a TSIG with a key name of
the previous example to allowing requests from 192.0.2.1 signed by a TSIG "key.example", you'll need to do this:
with a key name of "key.example", you'll need to do this:
> config set tsig_keys/keys ["key.example:<base64-key>"] > config set tsig_keys/keys ["key.example:<base64-key>"]
> config set Xfrout/tsig_keys/keys ["key.example:<base64-key>"]
> config set Xfrout/zone_config[0]/transfer_acl [{"action": "ACCEPT", "from": "192.0.2.1", "key": "key.example"}] > config set Xfrout/zone_config[0]/transfer_acl [{"action": "ACCEPT", "from": "192.0.2.1", "key": "key.example"}]
> config commit > config commit
The first line of configuration defines a system wide key ring. This is Both Xfrout and Auth will use the system wide keyring to check TSIGs in
necessary because the b10-auth server also checks TSIGs and it uses the the incomming messages and to sign responses.
system wide configuration.
Note Note
In a future version, b10-xfrout will also use the system wide TSIG The way to specify zone specific configuration (ACLs, etc) is likely to be
configuration. The way to specify zone specific configuration (ACLs, etc) changed.
is likely to be changed, too.
Chapter 11. Recursive Name Server Chapter 11. Recursive Name Server
......
...@@ -170,15 +170,6 @@ ...@@ -170,15 +170,6 @@
<itemizedlist> <itemizedlist>
<listitem>
<simpara>
<command>b10-msgq</command> &mdash;
Message bus daemon.
This process coordinates communication between all of the other
BIND 10 processes.
</simpara>
</listitem>
<listitem> <listitem>
<simpara> <simpara>
<command>b10-auth</command> &mdash; <command>b10-auth</command> &mdash;
...@@ -203,6 +194,15 @@ ...@@ -203,6 +194,15 @@
</simpara> </simpara>
</listitem> </listitem>
<listitem>
<simpara>
<command>b10-msgq</command> &mdash;
Message bus daemon.
This process coordinates communication between all of the other
BIND 10 processes.
</simpara>
</listitem>
<listitem> <listitem>
<simpara> <simpara>
<command>b10-resolver</command> &mdash; <command>b10-resolver</command> &mdash;
...@@ -212,6 +212,15 @@ ...@@ -212,6 +212,15 @@
</simpara> </simpara>
</listitem> </listitem>
<listitem>
<simpara>
<command>b10-sockcreator</command> &mdash;
Socket creator daemon.
This process creates sockets used by
network-listening BIND 10 processes.
</simpara>
</listitem>
<listitem> <listitem>
<simpara> <simpara>
<command>b10-stats</command> &mdash; <command>b10-stats</command> &mdash;
...@@ -220,6 +229,14 @@ ...@@ -220,6 +229,14 @@
</simpara> </simpara>
</listitem> </listitem>
<listitem>
<simpara>
<command>b10-stats-httpd</command> &mdash;
HTTP server for statistics reporting.
This process reports statistics data in XML format over HTTP.
</simpara>
</listitem>
<listitem> <listitem>
<simpara> <simpara>
<command>b10-xfrin</command> &mdash; <command>b10-xfrin</command> &mdash;
...@@ -269,8 +286,9 @@ ...@@ -269,8 +286,9 @@
<simpara> <simpara>
<command>bindctl</command> &mdash; <command>bindctl</command> &mdash;
interactive administration interface. interactive administration interface.
This is a command-line tool which allows an administrator This is a low-level command-line tool which allows
to control BIND 10. a developer or an experienced administrator to control
BIND 10.
</simpara> </simpara>
</listitem> </listitem>
<listitem> <listitem>
...@@ -751,9 +769,11 @@ as a dependency earlier --> ...@@ -751,9 +769,11 @@ as a dependency earlier -->
<para> <para>
In its default configuration, the <command>bind10</command> In its default configuration, the <command>bind10</command>
master process will also start up master process will also start up
<command>b10-cmdctl</command> for admins to communicate with the <command>b10-cmdctl</command> for administration tools to
system, <command>b10-auth</command> for authoritative DNS service, communicate with the system,
<command>b10-auth</command> for authoritative DNS service,
<command>b10-stats</command> for statistics collection, <command>b10-stats</command> for statistics collection,
<command>b10-stats-httpd</command> for statistics reporting,
<command>b10-xfrin</command> for inbound DNS zone transfers, <command>b10-xfrin</command> for inbound DNS zone transfers,
<command>b10-xfrout</command> for outbound DNS zone transfers, <command>b10-xfrout</command> for outbound DNS zone transfers,
and <command>b10-zonemgr</command> for secondary service. and <command>b10-zonemgr</command> for secondary service.
...@@ -889,7 +909,7 @@ address, but the usual ones don't." mean? --> ...@@ -889,7 +909,7 @@ address, but the usual ones don't." mean? -->
This system allows you to start the same component multiple times This system allows you to start the same component multiple times
(by including it in the configuration with different names, but the (by including it in the configuration with different names, but the
same process setting). However, the rest of the system doesn't expect same process setting). However, the rest of the system doesn't expect
such situation, so it would probably not do what you want. Such such a situation, so it would probably not do what you want. Such
support is yet to be implemented. support is yet to be implemented.
</para> </para>
</note> </note>
...@@ -901,10 +921,10 @@ address, but the usual ones don't." mean? --> ...@@ -901,10 +921,10 @@ address, but the usual ones don't." mean? -->
<command>b10-cmdctl</command>, but then you couldn't <command>b10-cmdctl</command>, but then you couldn't
change it back the usual way, as it would require it to change it back the usual way, as it would require it to
be running (you would have to find and edit the configuration be running (you would have to find and edit the configuration
directly). Also, some modules might have dependencies directly). Also, some modules might have dependencies:
-- <command>b10-stats-httpd</command> need <command>b10-stats-httpd</command> needs
<command>b10-stats</command>, <command>b10-xfrout</command> <command>b10-stats</command>, <command>b10-xfrout</command>
needs the <command>b10-auth</command> to be running, etc. needs <command>b10-auth</command> to be running, etc.
<!-- TODO: should we define dependencies? --> <!-- TODO: should we define dependencies? -->
...@@ -999,7 +1019,7 @@ Unix domain sockets ...@@ -999,7 +1019,7 @@ Unix domain sockets
<!-- TODO --> <!-- TODO -->
<note> <note>
<para> <para>
The development prototype release only provides the The development prototype release only provides
<command>bindctl</command> as a user interface to <command>bindctl</command> as a user interface to
<command>b10-cmdctl</command>. <command>b10-cmdctl</command>.
Upcoming releases will provide another interactive command-line Upcoming releases will provide another interactive command-line
...@@ -1190,7 +1210,7 @@ or accounts database --> ...@@ -1190,7 +1210,7 @@ or accounts database -->
The port can be set by using the <option>--port</option> command line option. The port can be set by using the <option>--port</option> command line option.
The address to listen on can be set using the <option>--address</option> command The address to listen on can be set using the <option>--address</option> command
line argument. line argument.
Each HTTPS connection is stateless and timesout in 1200 seconds Each HTTPS connection is stateless and times out in 1200 seconds
by default. This can be by default. This can be
redefined by using the <option>--idle-timeout</option> command line argument. redefined by using the <option>--idle-timeout</option> command line argument.
</para> </para>
...@@ -1629,31 +1649,23 @@ Xfrout/transfer_acl[0] {"action": "ACCEPT"} any (default)</screen> ...@@ -1629,31 +1649,23 @@ Xfrout/transfer_acl[0] {"action": "ACCEPT"} any (default)</screen>
</simpara></note> </simpara></note>
<para> <para>