1. 10 Nov, 2017 2 commits
  2. 17 Oct, 2017 1 commit
    • Vladimír Čunát's avatar
      . · 595f4a14
      Vladimír Čunát authored
      Positive caching seems usable now. (No xNAME, wildcards, etc.)
      Problem around zone cuts:
       - clear cache
       - kdig fubar
       - kdig DNSKEY cz
      595f4a14
  3. 13 Oct, 2017 1 commit
  4. 21 Sep, 2017 1 commit
  5. 07 Sep, 2017 1 commit
  6. 01 Sep, 2017 1 commit
    • Vladimír Čunát's avatar
      cache: rework reusing transactions (LMDB) · e2621d92
      Vladimír Čunát authored
      Previously a read transaction could be held open by each fork
      indefinitely.  That was done for better speed, but it had a downside
      of keeping old pages alive and potentially reading only old data,
      until some writes were attempted by that fork.
      
      Now kr_cache_ provides explicit API for suitable points where to break
      transactions, reusing the _sync command.  On LMDB side the read-only
      transaction is only reset and later renewed, supposedly giving better
      performance than aborting (see LMDB docs on reset+renew).
      
      Performance: preliminary testing with two forks, resperf on comcast
      query-set shows no noticeable difference in peak QPS.
      e2621d92
  7. 01 Aug, 2017 1 commit
    • Vladimír Čunát's avatar
      qflags: WIP refactor - regex replacements · 57d48522
      Vladimír Čunát authored
      sed -e 's/flags |= QUERY_\([A-Z0-9_]*\);/flags.\1 = true;/g' \
              -e 's/flags &= ~QUERY_\([A-Z0-9_]*\);/flags.\1 = false;/g' \
              -e 's/\(flags\|options\|opts\) & QUERY_\([A-Z0-9_]*\)\()\| ||\)/\1.\2\3/g' \
              -i $(git grep -l QUERY_)
      57d48522
  8. 12 Jul, 2017 1 commit
  9. 07 Apr, 2017 1 commit
    • Vladimír Čunát's avatar
      kr_rank: improve the API to manipulate ranks · 416aec46
      Vladimír Čunát authored
      _SECURE and _INSECURE weren't real flags, as their setting was
      logically exclusive of the "values".  That made changing ranks rather
      cumbersome.
      
      Tests: val_cname_to_unsigned_fake_rrsig gets broken, but I hope this
      change just uncovered a hidden bug.
      416aec46
  10. 03 Apr, 2017 2 commits
  11. 30 Mar, 2017 1 commit
  12. 25 Jan, 2017 1 commit
  13. 29 Nov, 2016 1 commit
    • Vladimír Čunát's avatar
      hints: allow removing hints · 4080d6d5
      Vladimír Čunát authored
      Fixes #111.
      
      Compatibility: it needs a new libkres.so function.  If a wrong version
      combination is attempted, the module just cleanly fails to load, though
      it writes a slightly confusing message "no such file or directory".
      4080d6d5
  14. 02 Nov, 2016 2 commits
  15. 24 Oct, 2016 1 commit
  16. 17 Aug, 2016 3 commits
  17. 16 Jul, 2016 1 commit
  18. 12 Jul, 2016 1 commit
  19. 29 May, 2016 1 commit
  20. 20 May, 2016 1 commit
    • Marek Vavrusa's avatar
      lib: cache api v2, removed dep on libknot db.h · e68c3a0a
      Marek Vavrusa authored
      this change introduces new API for cache backends,
      that is a subset of knot_db_api_t from libknot
      with several cache-specific operations
      
      major changes are:
      * merged 'cachectl' module into 'cache' as it is
        99% default-on and it simplifies things
      * not transaction oriented, transactions may be
        reused and cached for higher performance
      * scatter/gather API, this is important for
        latency and performance of non-local backends
        like Redis
      * faster and reliable cache clearing
      * cache-specific operations (prefix scan, ...) in
        the API not hacked in
      * simpler code for both backends and caller
      e68c3a0a
  21. 03 May, 2016 1 commit
    • Marek Vavrusa's avatar
      daemon: out-of-order processing for TCP · c23edd06
      Marek Vavrusa authored
      * daemon now processes messages over TCP stream
      out-of-order and concurrently
      * support for TCP_DEFER_ACCEPT
      * support for TCP Fast-Open
      * there are now deadlines for TCP for idle/slow
      streams (to prevent slowloris; pruning)
      * there is now per-request limit on timeouts
      (each request is allowed 4 timeouts before bailing)
      * faster request closing, unified retry/timeout timers
      * rare race condition in timer closing fixed
      c23edd06
  22. 14 Apr, 2016 1 commit
  23. 17 Dec, 2015 1 commit
  24. 10 Dec, 2015 1 commit
  25. 09 Dec, 2015 1 commit
  26. 03 Dec, 2015 1 commit
    • Marek Vavruša's avatar
      lib/zonecut: do not fetch DS/DNSKEY for cached insecure delegations · b2838cc1
      Marek Vavruša authored
      when a delegation is provably insecure, it is flagged as INSECURE in
      cache (this is different from "unchecked"), when the next query finds
      the same zone cut, this information is retrieved and if it was proved to
      be insecure before, this status is reused
      
      this prevents refetching of NS/DNSKEY in some situations
      b2838cc1
  27. 18 Nov, 2015 2 commits
  28. 23 Oct, 2015 1 commit
  29. 10 Oct, 2015 1 commit
  30. 07 Oct, 2015 2 commits
  31. 06 Oct, 2015 1 commit
  32. 03 Oct, 2015 1 commit
  33. 02 Oct, 2015 1 commit