colin/hickory-dns
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

expose security-aware setting in named.toml

Browse Source
This commit is contained in:
Jorge Aparicio 2024-05-08 18:37:36 +02:00 committed by Benjamin Fry
parent 36258a8a03
commit 97e1f43456
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
crates/server/src/store/recursor/authority.rs
View File

@ -73,9 +73,13 @@ impl RecursiveAuthority {
});
}
let recursor = Recursor::new()
let mut recursor = Recursor::new();
recursor
.ns_cache_size(config.ns_cache_size)
.record_cache_size(config.record_cache_size)
.record_cache_size(config.record_cache_size);
#[cfg(feature = "dnssec")]
recursor.security_aware(config.security_aware);
let recursor = recursor
.build(roots)
.map_err(|e| format!("failed to initialize recursor: {e}"))?;

6
crates/server/src/store/recursor/config.rs
View File

@ -24,6 +24,7 @@ use crate::resolver::Name;
/// Configuration for file based zones
#[derive(Clone, Deserialize, Eq, PartialEq, Debug)]
#[serde(deny_unknown_fields)]
pub struct RecursiveConfig {
/// File with roots, aka hints
pub roots: PathBuf,
@ -35,6 +36,11 @@ pub struct RecursiveConfig {
/// Maximum DNS record cache size
#[serde(default = "record_cache_size_default")]
pub record_cache_size: usize,
/// Whether the recursor is security-aware (RFC4035 section 3.2)
#[cfg(feature = "dnssec")]
#[serde(default)]
pub security_aware: bool,
}
impl RecursiveConfig {