summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2019-12-08Limit advertised UDP payload size to 1232 bytes to prevent PMTU /Florian Obser
2019-12-08More compact two column format for first section of status display; useOtto Moerbeek
2019-12-08Turn opportunistic DoT into their own strategies.Florian Obser
2019-12-06Log why an answer is bogus.Florian Obser
2019-12-06Use the middle of the histogram bar in the median computationsOtto Moerbeek
2019-12-06Stop fiddling with openlog / closelog in libunbound. unwind handlesFlorian Obser
2019-12-05be less verbose in debug logging; ok florian@Otto Moerbeek
2019-12-05Tell a little bit how "preference" works these days; ok florian@Otto Moerbeek
2019-12-05Remove clause #3 from mrg@NetBSD license.Martin Pieuchot
2019-12-04When we detect that a resolver strategy is not validating because theFlorian Obser
2019-12-04Use NI_MAXHOST like everywhere else instead of a wrong number.Florian Obser
2019-12-04If we see a validated result, we can (must!) assume the resolver isOtto Moerbeek
2019-12-03Cleanup query logging.Florian Obser
2019-12-03Cleanup check_resolver_done() debug logging.Florian Obser
2019-12-03Add one more debug level and enable very detailed libunbound loggingFlorian Obser
2019-12-03No need to store "why_bogus" with the resolver, we are no longerFlorian Obser
2019-12-03Remove useless log_debug() calls.Florian Obser
2019-12-03No more status subcommands; ok florian@Otto Moerbeek
2019-12-03Correctly represent flows as traffic selectors as described in RFC 7296. Thistobhe
2019-12-02Save the computed median to avoid having it to compute it all the time;Otto Moerbeek
2019-12-02Use a unified cache in all libunbound based resolvers.Florian Obser
2019-12-02increment refcount before doing the call to resolve(); ok florian@Otto Moerbeek
2019-12-02Add an "all" mode for status and a much more compact and readable histogramOtto Moerbeek
2019-12-01Add missing space between "accept" and "bogus"kn
2019-12-01Allow forcing specific domains to be resolved by specific resolvers;Otto Moerbeek
2019-12-01Explain how ipcomp can be enabled.tobhe
2019-11-30make sure we only pass normalized timevals for the next resolver interval;Otto Moerbeek
2019-11-30The message sent in config_setmode starts the handshake in the ikev2 processtobhe
2019-11-30Log loaded SPIs and flows.tobhe
2019-11-30Not being able to create a resolver is not a fatal condition in unwind,Florian Obser
2019-11-30ifconfig(8) did silently ignore the netmask parameter for inet6 andAlexander Bluhm
2019-11-29Change the default security level for incoming IPsec flows fromtobhe
2019-11-29Don't hand-roll TAILQ_CONCAT in a slow way.Florian Obser
2019-11-29While we learn how the "decaying" histogram works it's helpful to showFlorian Obser
2019-11-28The happy eyeballs code computes a median to assess how well aOtto Moerbeek
2019-11-28ks_mapblocks is gonePhilip Guenther
2019-11-28Merge host_v{4,6}() into host_ip(), simplify host()kn
2019-11-28Introduce copy_sockaddrtoipa() and set_ipmask() bits from pfctlkn
2019-11-28No more example file; ok florian@Otto Moerbeek
2019-11-28Move Notify and Certreq payload handlers after the parser. Modify SA statetobhe
2019-11-28show median RTT in unwindctl statusFlorian Obser
2019-11-28Track all elements of a forwarder configuration individually:Florian Obser
2019-11-27Fix function name in error message (zap trailing s)kn
2019-11-27use _PATH_ names for unveil if possibleTheo de Raadt
2019-11-27Instead of only considering if a resolving strategy is dead, works orFlorian Obser
2019-11-27Move resolver preference storage to a struct which makes it easier toFlorian Obser
2019-11-27Nuke http captive portal detection; something better is coming.Florian Obser
2019-11-26Improve previouskn
2019-11-26Fail on nonexistent config file iff -c is givenkn
2019-11-25simplify histogram code and cut off at < limit, as the histogram display inOtto Moerbeek