Compare commits

2 Commits
v0.9 ... master

Author SHA1 Message Date
ad5de49d26 Tweaks + adding explicit no log directives 2025-07-17 22:56:28 +02:00
f8b323cbb2 Enabling TCP Fast Open on DoH frontend 2025-07-07 20:32:19 +02:00
2 changed files with 27 additions and 19 deletions

View File

@@ -1,6 +1,6 @@
-- /etc/dnsdist/dnsdist.conf: dndist conf. file for cantal -- /etc/dnsdist/dnsdist.conf: dndist conf. file for cantal
-- --
-- Last edition : 2025-07-06 -- Last edition : 2025-07-07
-- Last editor : @Campanu -- Last editor : @Campanu
-- --
@@ -58,7 +58,8 @@ addDOHLocal(
minTLSVersion = "tls1.2", minTLSVersion = "tls1.2",
ciphers = "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384", ciphers = "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384",
ciphersTLS13 = "TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384", ciphersTLS13 = "TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384",
customResponseHeaders={["link"]="<https://cantal.luc-geo.fr/#dns> rel=\"service-meta\";type=\"text/html\""} customResponseHeaders={["link"]="<https://cantal.luc-geo.fr/#dns> rel=\"service-meta\";type=\"text/html\""},
tcpFastOpenQueueSize = 256
} }
) )

View File

@@ -1,6 +1,6 @@
# /etc/unbound/unbound.conf : unbound conf. file for cantal # /etc/unbound/unbound.conf : unbound conf. file for cantal
# #
# Last edition : 2025-07-06 # Last edition : 2025-07-17
# Last editor : @Campanu # Last editor : @Campanu
# #
@@ -56,6 +56,9 @@ server:
num-threads: 2 num-threads: 2
so-reuseport: yes so-reuseport: yes
so-rcvbuf: 4m
so-sndbuf: 4m
prefetch: yes prefetch: yes
prefetch-key: yes prefetch-key: yes
@@ -69,8 +72,8 @@ server:
neg-cache-size: 4m neg-cache-size: 4m
key-cache-size: 16m key-cache-size: 16m
msg-cache-size: 128m msg-cache-size: 64m
rrset-cache-size: 256m rrset-cache-size: 128m
infra-cache-numhosts: 100000 infra-cache-numhosts: 100000
@@ -82,18 +85,22 @@ server:
ede: yes ede: yes
ede-serve-expired: yes ede-serve-expired: yes
# RFC 8767: Serving Stale Data # RFC 8767: Serving Stale Data
serve-expired: yes serve-expired: yes
serve-expired-ttl: 86400 serve-expired-ttl: 86400
serve-expired-ttl-reset: no serve-expired-ttl-reset: no
serve-expired-reply-ttl: 30 serve-expired-reply-ttl: 30
serve-expired-client-timeout: 1800 serve-expired-client-timeout: 1800
# Logging # Logging
use-syslog: no
logfile: "/var/log/unbound.log" logfile: "/var/log/unbound.log"
verbosity: 1 verbosity: 1
log-time-ascii: yes log-time-ascii: yes
log-queries: no
log-replies: no
log-servfail: no
log-local-actions: no
remote-control: remote-control:
control-enable: no control-enable: no