Commit Graph

119 Commits (c7fa097ffdebc439ed8567a688c3ba4f17ed90d2)

Author SHA1 Message Date
Frank Denis 58b8d6f5f0 Continue on TCP accept errors 4 years ago
Frank Denis da00ac2194 Add some extra checks 4 years ago
Frank Denis 1c63906795 Refuse long labels 4 years ago
Frank Denis af22d59ce8 Add an option to disable DNSCrypt, and do only TLS and relaying 4 years ago
Frank Denis e9e5c700f0 Add ignore_unqualified_hostnames 5 years ago
Frank Denis f3fe2fa123 up 5 years ago
Frank Denis 3864de1951 Add the ability to return synthetic response for undelegated TLDs 5 years ago
Frank Denis 3d3a96a6f9 More statistics; keep track of NXDOMAIN responses 5 years ago
Frank Denis 3cc28670cb Prometheus: use int counters and gauges 5 years ago
Frank Denis bf5f0b3568 Update to tokio 0.2 5 years ago
Frank Denis 5e0f4a6223 Blacklist: use FxHashMap 5 years ago
Frank Denis df26dddb86 Revert "Allow serve_stale to be disabled"
This reverts commit 3b2301dcbf.
5 years ago
Frank Denis 3b2301dcbf Allow serve_stale to be disabled 5 years ago
Frank Denis a6fb79a2b2 Make the project compatible with rust-stable 5 years ago
Frank Denis 48d0588337 Use SystemTime for the certificate's time
Also don't use mem::forget() for the updater, because who knows, Rust
optimizations may be too aggressive.

Maybe
Fixes #13
5 years ago
Frank Denis 4d584d95e6 Move from failure to anyhow 5 years ago
Frank Denis d0c37819e2 Relax size check for certificates 5 years ago
Frank Denis 05d62da515 Explicit lifetime 5 years ago
Frank Denis dbbdf984e9 uninline 5 years ago
Frank Denis f4863ee017 Reintroduce the check for the standard provider name prefix
Only cleanbrowsing and dnsforfamily use a non-standard name.
5 years ago
Frank Denis 0c134b5393 Cache relayed certificates
To make it slightly more difficult for servers to fingerprint users by
rotating certificates too frequently.
5 years ago
Frank Denis dd657faaab Relax cert response check for legacy proxies 5 years ago
Frank Denis bb39f146ae Don't relay anything that would be bigger than the original question 5 years ago
Frank Denis 5848713ffd Forward certificates 5 years ago
Frank Denis 5b77be1ac0 Pick IPv4 or IPv6 wildcard source addresses according to the destination
Fixes #10
5 years ago
Frank Denis 2706b2994d Add a reasonable default set of ports + a new option 5 years ago
Frank Denis e43ad4949b to_tcp_listener() is essentially useless 5 years ago
Frank Denis 6483d3d4d7 Set IPV6_ONLY on IPv6 sockets
Fixes #9
5 years ago
Frank Denis 3fc7387d9f Don't be too restrictive, we still need to serve certificates 5 years ago
Frank Denis 5cea42a397 Bump 5 years ago
Frank Denis 82e73374ab Anonymized DNS is here 5 years ago
Frank Denis 72dfb0628c Prepare a new configuration section for Anonymized DNS 5 years ago
Frank Denis 5437f80bfc Merge branch 'master' of github.com:jedisct1/rust-dnscrypt-server
* 'master' of github.com:jedisct1/rust-dnscrypt-server:
  Return a HINFO record when a query is blocked
5 years ago
Frank Denis 9db26ba20b Preliminary support for Anonymized DNS 5 years ago
Frank Denis c0faa11ac1 Return a HINFO record when a query is blocked
This is extremely useful to understand why a query doesn't return
e.g. IP addresses that resolve from other servers
5 years ago
Frank Denis ca35d6fdc8 Ensure that PK prefixes don't match the Anonymized DNSCrypt query magic 5 years ago
Frank Denis cf41840573 We can use Default::default() instead of tokio's Handle
What kind of magic is that?
5 years ago
Frank Denis 5afc1f1a6a Ignore casing for caching 5 years ago
Frank Denis fbf8a72d4f Remove CIR 5 years ago
Frank Denis 4c07e91b3f Limit the number of concurrent connections to the metrics 5 years ago
Frank Denis 8cbd5bb6b6 futres::prelude::* may not always be needed 5 years ago
Frank Denis 22d84a748c Add process feature to prometheus, and a timeout for clients 5 years ago
Frank Denis a67572f6f2 Add cache hit ratio 5 years ago
Frank Denis 1a53a1906b Silent warning 5 years ago
Frank Denis 86ab29c06a More Prometheus metrics 5 years ago
Frank Denis cd98c5627c More Prometheus metrics 5 years ago
Frank Denis 71699d8476 Some initial metrics 5 years ago
Frank Denis 27e6097dc9 Prometheus metrics 5 years ago
Frank Denis f77a5aed47 Add metrics 5 years ago
Frank Denis e5a42ebfa1 Do not forget to define rcode_refused 5 years ago