1. 06 Jul, 2016 1 commit
  2. 23 May, 2016 1 commit
    • Marek Vavrusa's avatar
      daemon: support event.socket(fd, cb) for I/O events · c416877a
      Marek Vavrusa authored
      this allows embedding other event loops or just
      asynchronous events triggered by socket activity.
      this is required for things like cooperative
      HTTP server, monitoring endpoint or remote
      configuration daemon/controller
      c416877a
  3. 20 May, 2016 1 commit
    • Marek Vavrusa's avatar
      lib: cache api v2, removed dep on libknot db.h · e68c3a0a
      Marek Vavrusa authored
      this change introduces new API for cache backends,
      that is a subset of knot_db_api_t from libknot
      with several cache-specific operations
      
      major changes are:
      * merged 'cachectl' module into 'cache' as it is
        99% default-on and it simplifies things
      * not transaction oriented, transactions may be
        reused and cached for higher performance
      * scatter/gather API, this is important for
        latency and performance of non-local backends
        like Redis
      * faster and reliable cache clearing
      * cache-specific operations (prefix scan, ...) in
        the API not hacked in
      * simpler code for both backends and caller
      e68c3a0a
  4. 03 May, 2016 1 commit
    • Marek Vavrusa's avatar
      daemon: out-of-order processing for TCP · c23edd06
      Marek Vavrusa authored
      * daemon now processes messages over TCP stream
      out-of-order and concurrently
      * support for TCP_DEFER_ACCEPT
      * support for TCP Fast-Open
      * there are now deadlines for TCP for idle/slow
      streams (to prevent slowloris; pruning)
      * there is now per-request limit on timeouts
      (each request is allowed 4 timeouts before bailing)
      * faster request closing, unified retry/timeout timers
      * rare race condition in timer closing fixed
      c23edd06
  5. 18 Apr, 2016 1 commit
    • Marek Vavrusa's avatar
      daemon: mode(strict|normal|permissive) · e61c48ef
      Marek Vavrusa authored
      the daemon has now three modes of strictness
      checking from strict to permissive.
      it reflects the tradeoff between resolving the
      query in as few steps as possible and security
      for insecure zones
      e61c48ef
  6. 07 Apr, 2016 1 commit
  7. 06 Apr, 2016 1 commit
    • Marek Vavrusa's avatar
      trust_anchors: added custom timers, limit history · 5e7591f0
      Marek Vavrusa authored
      new trust anchors variables:
      * trust_anchors.hold_down_time = 30 * day
      * trust_anchors.refresh_time = nil
      * trust_anchors.keep_removed = 0
      
      these could be used to control how often should
      root trust anchors be checked and how many removed
      keys should be kept in log (0 by default)
      5e7591f0
  8. 04 Apr, 2016 1 commit
  9. 30 Mar, 2016 1 commit
  10. 29 Mar, 2016 3 commits
  11. 03 Feb, 2016 1 commit
  12. 30 Jan, 2016 2 commits
  13. 22 Jan, 2016 1 commit
  14. 10 Dec, 2015 1 commit
  15. 08 Dec, 2015 1 commit
  16. 05 Dec, 2015 1 commit
    • Marek Vavruša's avatar
      daemon: root trust anchors automatically bootstrapped from IANA · 1af623da
      Marek Vavruša authored
      if the root key file doesn’t exist, it will be populated from root DNSKEY query, which will be validated against root trust anchors retrieved over HTTPS with IANA cert verification against built-in current IANA cert CA. it requires luasocket and luasec for it to work. trust anchors XML file signature is not checked, as there’s no facility for PKCS7 checking yet.
      1af623da
  17. 18 Oct, 2015 1 commit
  18. 08 Oct, 2015 1 commit
  19. 07 Oct, 2015 3 commits
  20. 02 Oct, 2015 1 commit
  21. 01 Oct, 2015 1 commit
  22. 30 Sep, 2015 2 commits
  23. 28 Sep, 2015 2 commits
  24. 27 Sep, 2015 1 commit
  25. 25 Sep, 2015 1 commit
  26. 15 Sep, 2015 1 commit
  27. 19 Jul, 2015 1 commit
  28. 14 Jul, 2015 1 commit
  29. 13 Jul, 2015 1 commit
  30. 06 Jul, 2015 2 commits
  31. 01 Jul, 2015 1 commit
  32. 07 Jun, 2015 1 commit