Commit Graph

105 Commits (ttl)

Author SHA1 Message Date
Frank Denis f87ddb344f Log TTLs 5 years ago
Frank Denis 4d584d95e6 Move from failure to anyhow 5 years ago
Frank Denis d0c37819e2 Relax size check for certificates 5 years ago
Frank Denis 05d62da515 Explicit lifetime 5 years ago
Frank Denis dbbdf984e9 uninline 5 years ago
Frank Denis f4863ee017 Reintroduce the check for the standard provider name prefix
Only cleanbrowsing and dnsforfamily use a non-standard name.
5 years ago
Frank Denis 0c134b5393 Cache relayed certificates
To make it slightly more difficult for servers to fingerprint users by
rotating certificates too frequently.
5 years ago
Frank Denis dd657faaab Relax cert response check for legacy proxies 5 years ago
Frank Denis bb39f146ae Don't relay anything that would be bigger than the original question 5 years ago
Frank Denis 5848713ffd Forward certificates 5 years ago
Frank Denis 5b77be1ac0 Pick IPv4 or IPv6 wildcard source addresses according to the destination
Fixes #10
5 years ago
Frank Denis 2706b2994d Add a reasonable default set of ports + a new option 5 years ago
Frank Denis e43ad4949b to_tcp_listener() is essentially useless 5 years ago
Frank Denis 6483d3d4d7 Set IPV6_ONLY on IPv6 sockets
Fixes #9
5 years ago
Frank Denis 3fc7387d9f Don't be too restrictive, we still need to serve certificates 5 years ago
Frank Denis 5cea42a397 Bump 5 years ago
Frank Denis 82e73374ab Anonymized DNS is here 5 years ago
Frank Denis 72dfb0628c Prepare a new configuration section for Anonymized DNS 5 years ago
Frank Denis 5437f80bfc Merge branch 'master' of github.com:jedisct1/rust-dnscrypt-server
* 'master' of github.com:jedisct1/rust-dnscrypt-server:
  Return a HINFO record when a query is blocked
5 years ago
Frank Denis 9db26ba20b Preliminary support for Anonymized DNS 5 years ago
Frank Denis c0faa11ac1 Return a HINFO record when a query is blocked
This is extremely useful to understand why a query doesn't return
e.g. IP addresses that resolve from other servers
5 years ago
Frank Denis ca35d6fdc8 Ensure that PK prefixes don't match the Anonymized DNSCrypt query magic 5 years ago
Frank Denis cf41840573 We can use Default::default() instead of tokio's Handle
What kind of magic is that?
5 years ago
Frank Denis 5afc1f1a6a Ignore casing for caching 5 years ago
Frank Denis fbf8a72d4f Remove CIR 5 years ago
Frank Denis 4c07e91b3f Limit the number of concurrent connections to the metrics 5 years ago
Frank Denis 8cbd5bb6b6 futres::prelude::* may not always be needed 5 years ago
Frank Denis 22d84a748c Add process feature to prometheus, and a timeout for clients 5 years ago
Frank Denis a67572f6f2 Add cache hit ratio 5 years ago
Frank Denis 1a53a1906b Silent warning 5 years ago
Frank Denis 86ab29c06a More Prometheus metrics 5 years ago
Frank Denis cd98c5627c More Prometheus metrics 5 years ago
Frank Denis 71699d8476 Some initial metrics 5 years ago
Frank Denis 27e6097dc9 Prometheus metrics 5 years ago
Frank Denis f77a5aed47 Add metrics 5 years ago
Frank Denis e5a42ebfa1 Do not forget to define rcode_refused 5 years ago
Frank Denis 4bc939977e Serve stale on REFUSED, too 5 years ago
Frank Denis 7ab967e163 Refactor the resolver part a little bit 5 years ago
Frank Denis 6fa13f825d Revert direct usage of FutureExt 5 years ago
Frank Denis 7ebcc7287e Tokio update, that makes things more complicated 5 years ago
Frank Denis 18fe23471d Nits 5 years ago
Frank Denis e4df83410f Keep DNS_FLAGS_CD and DNS_FLAGS_RD 5 years ago
Frank Denis 1e33f82887 Clear answer count on synthetic responses 5 years ago
Frank Denis 6f99d404d6 Typo 5 years ago
Frank Denis 518f0ce17d Implement support for server-side blacklists 5 years ago
Frank Denis cc53be8cf8 Better error messages 5 years ago
Frank Denis 3d07f98f90 Block on the updater 5 years ago
Frank Denis f343802fd0 Revert "Nits"
This reverts commit 0f63c5e594.
5 years ago
Frank Denis 0f63c5e594 Nits 5 years ago
Frank Denis 653c4e1de7 Better error handling 5 years ago