Commit 85ef1524 authored by Petr Špaček's avatar Petr Špaček

policy: load policy module by default

RFC 6761 mandates functionality implemented by policy module, so it is
now loaded by default. Users with special needs can still unload the
module.
parent f6bd6fc1
Pipeline #32139 passed with stages
in 7 minutes and 5 seconds
......@@ -204,6 +204,7 @@ end
-- Load embedded modules
modules.load('ta_signal_query')
modules.load('policy')
modules.load('priming')
modules.load('detect_time_skew')
modules.load('detect_time_jump')
......
......@@ -193,6 +193,9 @@ Most properties (actions, filters) are described above.
policy.todnames({'example.com', 'me.cz'})
{ '\7example\3com\0', '\2me\2cz\0' }
This module is enabled by default because it implements mandatory :rfc:`6761` logic. For debugging purposes you can add ``modules.unload('policy')`` to your config to unload the module.
.. _`Aho-Corasick`: https://en.wikipedia.org/wiki/Aho%E2%80%93Corasick_string_matching_algorithm
.. _`@jgrahamc`: https://github.com/jgrahamc/aho-corasick-lua
.. _RPZ: https://dnsrpz.info/
......
-- setup resolver
modules = { 'policy' }
-- policy module should be loaded by default, do not load it explicitly
-- test for default configuration
local function test_tls_forward()
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment