Frank Denis
|
561ebd07f4
|
client_ttl_jitter -> client_ttl_holdon
|
4 years ago |
|
Frank Denis
|
04fdf73046
|
Use specific lengths for big arrays
|
4 years ago |
|
Frank Denis
|
dd1b550ef9
|
Add decreasing TTLs with jitter when a TTL becomes low
Fixes #33
|
4 years ago |
|
Frank Denis
|
75166216b9
|
Add my_ip feature
|
4 years ago |
|
Frank Denis
|
2a96c5f985
|
dafuq
|
4 years ago |
|
Frank Denis
|
792f82fa35
|
Print something when access control is enabled
|
4 years ago |
|
Frank Denis
|
b9361a8711
|
Fail open if the tokens list is empty
|
4 years ago |
|
Frank Denis
|
5ebd393981
|
Clippify
|
4 years ago |
|
Frank Denis
|
d5b06a6653
|
Implement access control
|
4 years ago |
|
Frank Denis
|
ccfd7b4184
|
Use the full timeout if we don't have a cached response
|
4 years ago |
|
Frank Denis
|
9b464fe135
|
Clarify
|
4 years ago |
|
Frank Denis
|
58b8d6f5f0
|
Continue on TCP accept errors
|
4 years ago |
|
Frank Denis
|
da00ac2194
|
Add some extra checks
|
5 years ago |
|
Frank Denis
|
1c63906795
|
Refuse long labels
|
5 years ago |
|
Frank Denis
|
af22d59ce8
|
Add an option to disable DNSCrypt, and do only TLS and relaying
|
5 years ago |
|
Frank Denis
|
e9e5c700f0
|
Add ignore_unqualified_hostnames
|
5 years ago |
|
Frank Denis
|
f3fe2fa123
|
up
|
5 years ago |
|
Frank Denis
|
3864de1951
|
Add the ability to return synthetic response for undelegated TLDs
|
5 years ago |
|
Frank Denis
|
3d3a96a6f9
|
More statistics; keep track of NXDOMAIN responses
|
5 years ago |
|
Frank Denis
|
3cc28670cb
|
Prometheus: use int counters and gauges
|
5 years ago |
|
Frank Denis
|
bf5f0b3568
|
Update to tokio 0.2
|
5 years ago |
|
Frank Denis
|
5e0f4a6223
|
Blacklist: use FxHashMap
|
5 years ago |
|
Frank Denis
|
df26dddb86
|
Revert "Allow serve_stale to be disabled"
This reverts commit 3b2301dcbf.
|
5 years ago |
|
Frank Denis
|
3b2301dcbf
|
Allow serve_stale to be disabled
|
5 years ago |
|
Frank Denis
|
a6fb79a2b2
|
Make the project compatible with rust-stable
|
5 years ago |
|
Frank Denis
|
48d0588337
|
Use SystemTime for the certificate's time
Also don't use mem::forget() for the updater, because who knows, Rust
optimizations may be too aggressive.
Maybe
Fixes #13
|
5 years ago |
|
Frank Denis
|
4d584d95e6
|
Move from failure to anyhow
|
5 years ago |
|
Frank Denis
|
d0c37819e2
|
Relax size check for certificates
|
5 years ago |
|
Frank Denis
|
05d62da515
|
Explicit lifetime
|
5 years ago |
|
Frank Denis
|
dbbdf984e9
|
uninline
|
5 years ago |
|
Frank Denis
|
f4863ee017
|
Reintroduce the check for the standard provider name prefix
Only cleanbrowsing and dnsforfamily use a non-standard name.
|
5 years ago |
|
Frank Denis
|
0c134b5393
|
Cache relayed certificates
To make it slightly more difficult for servers to fingerprint users by
rotating certificates too frequently.
|
5 years ago |
|
Frank Denis
|
dd657faaab
|
Relax cert response check for legacy proxies
|
5 years ago |
|
Frank Denis
|
bb39f146ae
|
Don't relay anything that would be bigger than the original question
|
5 years ago |
|
Frank Denis
|
5848713ffd
|
Forward certificates
|
5 years ago |
|
Frank Denis
|
5b77be1ac0
|
Pick IPv4 or IPv6 wildcard source addresses according to the destination
Fixes #10
|
5 years ago |
|
Frank Denis
|
2706b2994d
|
Add a reasonable default set of ports + a new option
|
5 years ago |
|
Frank Denis
|
e43ad4949b
|
to_tcp_listener() is essentially useless
|
5 years ago |
|
Frank Denis
|
6483d3d4d7
|
Set IPV6_ONLY on IPv6 sockets
Fixes #9
|
5 years ago |
|
Frank Denis
|
3fc7387d9f
|
Don't be too restrictive, we still need to serve certificates
|
5 years ago |
|
Frank Denis
|
5cea42a397
|
Bump
|
5 years ago |
|
Frank Denis
|
82e73374ab
|
Anonymized DNS is here
|
5 years ago |
|
Frank Denis
|
72dfb0628c
|
Prepare a new configuration section for Anonymized DNS
|
5 years ago |
|
Frank Denis
|
5437f80bfc
|
Merge branch 'master' of github.com:jedisct1/rust-dnscrypt-server
* 'master' of github.com:jedisct1/rust-dnscrypt-server:
Return a HINFO record when a query is blocked
|
5 years ago |
|
Frank Denis
|
9db26ba20b
|
Preliminary support for Anonymized DNS
|
5 years ago |
|
Frank Denis
|
c0faa11ac1
|
Return a HINFO record when a query is blocked
This is extremely useful to understand why a query doesn't return
e.g. IP addresses that resolve from other servers
|
5 years ago |
|
Frank Denis
|
ca35d6fdc8
|
Ensure that PK prefixes don't match the Anonymized DNSCrypt query magic
|
5 years ago |
|
Frank Denis
|
cf41840573
|
We can use Default::default() instead of tokio's Handle
What kind of magic is that?
|
5 years ago |
|
Frank Denis
|
5afc1f1a6a
|
Ignore casing for caching
|
5 years ago |
|
Frank Denis
|
fbf8a72d4f
|
Remove CIR
|
5 years ago |