http://hg.omfa.de/prosody-hg/ en-us prosody-hg: net/unbound.lua history net/unbound.lua revision history net.unbound: Simplify conditional http://hg.omfa.de/prosody-hg/log/ce31fdde0ad1/net/unbound.lua Kim Alvefur <zash@zash.se> Sat, 13 Jun 2026 11:35:18 +0200 net.unbound: Respect use_dnssec=false in case of default TA in lua-event http://hg.omfa.de/prosody-hg/log/36aac3343563/net/unbound.lua Kim Alvefur <zash@zash.se> Thu, 11 Jun 2026 22:30:27 +0200 net.unbound: Inherit trust anchors from luaunbound defaults http://hg.omfa.de/prosody-hg/log/37612a03220d/net/unbound.lua
If luaunbound ships with trust anchors set then that's probably good
defaults.]]> Kim Alvefur <zash@zash.se> Thu, 11 Jun 2026 22:19:08 +0200 net.unbound: Enable DNSSEC by default with option for turning off http://hg.omfa.de/prosody-hg/log/2ec517d8d43e/net/unbound.lua
You know what they say about opt-in security.

Enabling DNSSEC in libunbound without a way to turn it off would likely
be a problem for those whose DNS resolvers do not support, or outright
block DNSSEC. The merge algorithm already in place here doesn't have a
way to unset something, so instead a simpler boolean setting is
introduced, similar to some existing ones like use_ipv6/4 and use_dane.]]> Kim Alvefur <zash@zash.se> Sun, 07 Jun 2026 20:32:55 +0200 net.unbound: Briefly explain default override settings http://hg.omfa.de/prosody-hg/log/2719dbb358c8/net/unbound.lua
resolvconf=true is the default in luaunbound, so technically redundant,
but an excuse to remove that comment and add some better ones.]]> Kim Alvefur <zash@zash.se> Sun, 07 Jun 2026 18:23:24 +0200 Merge 13.0->trunk http://hg.omfa.de/prosody-hg/log/41fa97090264/net/unbound.lua Kim Alvefur <zash@zash.se> Sat, 30 May 2026 19:22:51 +0200 net.unbound: Simplify by removing cancel() http://hg.omfa.de/prosody-hg/log/c4aa9b2b4787/net/unbound.lua
Not aware that it is used anywhere. Removes potential "leak" by
forgetting to remove the entry from the now deleted table.]]> Kim Alvefur <zash@zash.se> Sat, 30 May 2026 19:21:08 +0200 net.unbound: Let in-flight queries complete after re-initialization http://hg.omfa.de/prosody-hg/log/9c062f243d3a/net/unbound.lua
This is meant to reduce potential disruption of in-flight queries on
reload.]]> Kim Alvefur <zash@zash.se> Sat, 30 May 2026 19:18:21 +0200 net.unbound: Reset and apply new config on reload http://hg.omfa.de/prosody-hg/log/23f1c71b3d56/net/unbound.lua
Makes new configuration apply, which is otherwise somewhat tricky to do.

Also merges identical conditions into one block.]]> Kim Alvefur <zash@zash.se> Sat, 30 May 2026 00:32:06 +0200 net.unbound: Count number of DNS response records http://hg.omfa.de/prosody-hg/log/350e16e5f9aa/net/unbound.lua
In order to gather stats on how wide-spread various record types are,
and how many records per rrset are common.]]> Kim Alvefur <zash@zash.se> Tue, 07 Oct 2025 23:50:12 +0200 net.adns: Collect DNS lookup timing metrics http://hg.omfa.de/prosody-hg/log/5abdcad8c2e0/net/unbound.lua
Nice to have this in OpenMetricts instead of debug logs]]> Kim Alvefur <zash@zash.se> Fri, 07 Feb 2025 09:22:52 +0100 net.unbound: Show canonical name in textual format (e.g. in shell) http://hg.omfa.de/prosody-hg/log/d1b7edf4e2de/net/unbound.lua
libunbound does not tell us the whole chain of CNAMEs, only the final
canonical name.

This is to aid in debugging since it will only be shown in the shell.]]> Kim Alvefur <zash@zash.se> Sun, 14 Apr 2024 14:06:57 +0200 net: Prefix module imports with prosody namespace http://hg.omfa.de/prosody-hg/log/ba409c67353b/net/unbound.lua Kim Alvefur <zash@zash.se> Fri, 17 Mar 2023 16:23:12 +0100 net.unbound: Merge luaunbound and prosody defaults in absence of user config (fixes #1763) (thanks rgd) http://hg.omfa.de/prosody-hg/log/ee5b061588ea/net/unbound.lua
add_defaults() is supposed to merge 3 tables, the defaults in
luaunbound, the defaults from prosody and any config from the prosody
config file. In the case where no `unbound={}` has been in the config,
it skips over the merge and returns only the prosody built-in defaults.

This results in libunbound skipping reading resolv.conf and uses its
default behavior of full recursive resolution.

Prior to #1737 there were only two tables, the luaunbound defaults and
the prosody config, where bypassing the merge and returning the former
did the right thing.]]> Kim Alvefur <zash@zash.se> Sun, 19 Jun 2022 19:49:32 +0200 net.unbound: Adjust log level of error to error to error http://hg.omfa.de/prosody-hg/log/cd3b5912c9a3/net/unbound.lua
This error is an error, therefore it should be at the error level]]> Kim Alvefur <zash@zash.se> Mon, 16 May 2022 14:51:01 +0200 net.unbound: Disable use of hosts file by default (fixes #1737) http://hg.omfa.de/prosody-hg/log/a92e1de62c9e/net/unbound.lua
This mirrors the behaviour with net.dns and avoids the initialization
issue in #1737]]> Kim Alvefur <zash@zash.se> Mon, 16 May 2022 12:45:51 +0200 util.id: Adjust entropy levels, with rationales http://hg.omfa.de/prosody-hg/log/b5b799a2a10c/net/unbound.lua
Modules using ids for logging should not need the now pretty large
medium one.]]> Kim Alvefur <zash@zash.se> Thu, 02 Dec 2021 01:14:55 +0100 net.unbound: Fix to initialize under prosodyctl http://hg.omfa.de/prosody-hg/log/6bb2986783d0/net/unbound.lua
Lazy initialization only worked for async queries, but prosodyctl check
dns uses sync queries.]]> Kim Alvefur <zash@zash.se> Thu, 21 Jan 2021 23:33:59 +0100 net.unbound: Delay loading until server has started or first query http://hg.omfa.de/prosody-hg/log/919e7b962f0b/net/unbound.lua
Shouldn't need a DNS resolver until later anyways. Might even be
sensible to only initialize if a query is actually attempted.]]> Kim Alvefur <zash@zash.se> Tue, 05 Jan 2021 21:40:06 +0100 net.unbound: Move libunbound initialization into a function http://hg.omfa.de/prosody-hg/log/ba335004ca60/net/unbound.lua
Prepare for lazy-loading it.]]> Kim Alvefur <zash@zash.se> Tue, 05 Jan 2021 21:36:04 +0100 net.unbound: Allow tracing individual queries with a logger per query http://hg.omfa.de/prosody-hg/log/d1351683dfe5/net/unbound.lua Kim Alvefur <zash@zash.se> Tue, 05 Jan 2021 20:04:07 +0100 net.unbound: Don't pass error as logger formatting string http://hg.omfa.de/prosody-hg/log/137c44d2714a/net/unbound.lua
This could cause weirdness if the error contains formatting options, but
should be reasonably safe with util.format]]> Kim Alvefur <zash@zash.se> Tue, 05 Jan 2021 20:02:46 +0100 net.unbound: Log net.server interactions http://hg.omfa.de/prosody-hg/log/a1aecd8cf7ee/net/unbound.lua
Noticed the potential need for this thanks to Ge0rG]]> Kim Alvefur <zash@zash.se> Tue, 05 Jan 2021 19:53:40 +0100 net.unbound: Remove compat for missing promises (pre-0.11) http://hg.omfa.de/prosody-hg/log/23ae55cbbeaf/net/unbound.lua
Code existed in a separate project before merged into Prosody, so
util.promise was not always around.]]> Kim Alvefur <zash@zash.se> Thu, 25 Jun 2020 18:20:51 +0200 net.unbound: Strip support for legacy net.server APIs http://hg.omfa.de/prosody-hg/log/67aabf83230b/net/unbound.lua
These are not needed since the watchfd API is provided by all net.server
backends.]]> Kim Alvefur <zash@zash.se> Thu, 25 Jun 2020 17:56:48 +0200 net.unbound: Async DNS resolver library based on libunbound via luaunbound http://hg.omfa.de/prosody-hg/log/92f30e8ecdfc/net/unbound.lua Kim Alvefur <zash@zash.se> Sat, 09 Mar 2019 21:19:24 +0100