Frank Denis
|
d022ff704c
|
Add more static zones
|
2019-12-10 00:22:27 +01:00 |
|
Frank Denis
|
2881cc9207
|
Add more undelegated zones
|
2019-12-09 12:11:24 +01:00 |
|
mibere
|
d0bb7e6ac9
|
enable aggressive-nsec
for detailed description and benefits read https://medium.com/nlnetlabs/aggressive-use-of-the-dnssec-validated-cache-in-unbound-1ab3e315d13f
|
2019-12-06 21:04:12 +01:00 |
|
mibere
|
9fc2cbe4b1
|
Local copy of the DNS root zone (hyperlocal)
Solves #38
|
2019-12-04 19:24:44 +01:00 |
|
Frank Denis
|
93cae8ceb5
|
Bump the encrypted-dns cache up
|
2019-10-26 22:24:37 +02:00 |
|
Frank Denis
|
4ee1aedaec
|
shfmt
|
2019-10-01 19:55:57 +02:00 |
|
Frank Denis
|
399f0a89de
|
If unbound-control-setup fails, this is not the end of the world
|
2019-09-26 01:08:02 +02:00 |
|
Frank Denis
|
a3efabd367
|
Preliminary code to move to the new server
|
2019-09-22 15:38:22 +02:00 |
|
Peter Dave Hello
|
fa7fed55de
|
Format shell scripts with shfmt and test it on CI
|
2019-08-05 22:19:43 +08:00 |
|
Frank Denis
|
0b439b661d
|
Dropping the cache doesn't work inside a container
|
2019-06-29 20:04:07 +02:00 |
|
Frank Denis
|
f5f3bf4017
|
Drop the caches before starting unbound
This reduces memory pressure.
|
2019-06-29 17:55:11 +02:00 |
|
Frank Denis
|
8f1b0f30ec
|
Give qname minimisation a new chance
Fixes #61
|
2019-05-28 00:08:12 +02:00 |
|
Frank Denis
|
40595af59d
|
Bump up the reserved memory size
The default is very low, and makes it difficult to do any other task on the
same host.
|
2019-05-16 17:47:33 +02:00 |
|
Frank Denis
|
156345f0a9
|
Decrease edns-buffer-size to 1220
Ref: https://sk.tl/2PbhxjbN
|
2019-05-12 13:45:04 +02:00 |
|
Peter Dave Hello
|
fc47a319d4
|
Use replace non-standard egrep/fgrep with grep -E/-F
|
2019-05-12 19:19:22 +08:00 |
|
Peter Dave Hello
|
96b9dc9b32
|
Remoe unnecessary $ on arithmetic variables in shell script
|
2019-05-12 19:13:06 +08:00 |
|
Peter Dave Hello
|
3ea7dd925c
|
Quote var/cmd output in shell script to prevent word splitting
|
2019-05-12 19:10:41 +08:00 |
|
Frank Denis
|
6661b87530
|
Add bash and find from findutils in order to avoid surprises from busybox
|
2017-04-27 09:03:55 +02:00 |
|
Frank Denis
|
74fb53de51
|
Switch to Alpine Linux
|
2017-04-19 10:58:16 +02:00 |
|
Frank Denis
|
9051c13aaa
|
There is a .host TLD now. Don't tag it as a local zone.
|
2016-12-27 15:10:36 +01:00 |
|
Frank Denis
|
1814c3c844
|
Enable serve-expired
|
2016-12-16 08:53:46 +01:00 |
|
Jacob Henner
|
996ef48786
|
Removing sed regression which breaks config, fixes #27
|
2016-10-01 22:52:35 -04:00 |
|
Matthew Sojourner Newton
|
fb203db38c
|
Added /opt/unbound/etc/unbound/zones directory and a section in the README discussing how to customize Unbound
|
2016-08-24 15:42:13 -07:00 |
|
Matthew Sojourner Newton
|
4ee775ee64
|
Added unbound directive to search for additional configuration files at /opt/unbound/etc/unbound/zones/*.conf
|
2016-08-24 13:36:21 -07:00 |
|
Frank Denis
|
d49b2e745a
|
Sadly disable query minimization for now
This still occasionally prevents resolution from working properly.
Sample test case: A pop.secureserver.net.
|
2016-06-21 12:38:28 +02:00 |
|
Frank Denis
|
c72fd91c1d
|
Correctly compute availableMemory
|
2016-04-22 11:31:02 +02:00 |
|
Frank Denis
|
27c3b67e4e
|
Use MemTotal if MemAvailable does not exist
|
2016-04-21 10:21:40 +02:00 |
|
Frank Denis
|
9c277f829c
|
Enable qname minimisation for increased privacy
|
2015-12-11 10:29:38 +01:00 |
|
Frank Denis
|
8566959cfc
|
Have unbound listen to port 553 instead of the default port 53
This prevents issues with docker hosts already having a local resolver
|
2015-11-28 13:52:35 +01:00 |
|
Frank Denis
|
850a1e68a6
|
Create certificates for unbound-control
|
2015-11-28 13:19:39 +01:00 |
|
Frank Denis
|
fcf6cecef7
|
Enable stats in the unbound config
|
2015-11-28 12:59:25 +01:00 |
|
Frank Denis
|
f292b9ff14
|
Recommend --net=host
|
2015-08-29 00:17:30 +02:00 |
|
Frank Denis
|
2a82e45376
|
+ ratelimit
|
2015-07-15 20:07:50 +02:00 |
|
Frank Denis
|
8ca4558207
|
Increase the negative cache size
|
2015-07-12 14:54:26 +02:00 |
|
Frank Denis
|
fa9f6254af
|
Have Unbound refuse queries for the provider name
since certificates are served by dnscrypt-wrapper.
|
2015-07-12 14:52:48 +02:00 |
|
Frank Denis
|
b3f33d2b6a
|
Initial import
|
2015-07-06 01:39:54 +02:00 |
|