1TODO items. These are interesting todo items. 2o understand synthesized DNAMEs, so those TTL=0 packets are cached properly. 3o NSEC/NSEC3 aggressive negative caching, so that updates to NSEC/NSEC3 4 will result in proper negative responses. 5o (option) where port 53 is used for send and receive, no other ports are used. 6o (option) to not send replies to clients after a timeout of (say 5 secs) has 7 passed, but keep task active for later retries by client. 8o (option) private TTL feature (always report TTL x in answers). 9o (option) pretend-dnssec-unaware, and pretend-edns-unaware modes for workshops. 10o delegpt use rbtree for ns-list, to avoid slowdown for very large NS sets. 11o (option) reprime and refresh oft used data before timeout. 12o (option) retain prime results in a overlaid roothints file. 13o (option) store primed key data in a overlaid keyhints file (sort of like drafttimers). 14o windows version, auto update feature, a query to check for the version. 15o command the server with TSIG inband. get-config, clearcache, 16 get stats, get memstats, get ..., reload, clear one zone from cache 17o NSID rfc 5001 support. 18o timers rfc 5011 support. 19o Treat YXDOMAIN from a DNAME properly, in iterator (not throwaway), validator. 20o make timeout backoffs randomized (a couple percent random) to spread traffic. 21o inspect date on executable, then warn user in log if its more than 1 year. 22o (option) proactively prime root, stubs and trust anchors, feature. 23 early failure, faster on first query, but more traffic. 24o library add convenience functions for A, AAAA, PTR, getaddrinfo, libresolve. 25o library add function to validate input from app that is signed. 26o add dynamic-update requests (making a dynupd request) to libunbound api. 27o SIG(0) and TSIG. 28o support OPT record placement on recv anywhere in the additional section. 29o add local-file: config with authority features. 30o (option) to make local-data answers be secure for libunbound (default=no) 31o (option) to make chroot: copy all needed files into jail (or make jail) 32 perhaps also print reminder to link /dev/random and sysloghack. 33o overhaul outside-network servicedquery to merge with udpwait and tcpwait, 34 to make timers in servicedquery independent of udpwait queues. 35o check into rebinding ports for efficiency, configure time test. 36o EVP hardware crypto support. 37o option to ignore all inception and expiration dates for rrsigs. 38o cleaner code; return and func statements on newline. 39o memcached module that sits before validator module; checks for memcached 40 data (on local lan), stores recursion lookup. Provides one cache for multiple resolver machines, coherent reply content in anycast setup. 41o no openssl_add_all_algorithms, but only the ones necessary, less space. 42o listen to NOTIFY messages for zones and flush the cache for that zone 43 if received. Useful when also having a stub to that auth server. 44 Needs proper protection, TSIG, in place. 45o winevent - do not go more than 64 fds (by polling with select one by 46 one), win95/98 have 100fd limit in the kernel, so this ruins w9x portability. 47 48*** Features features, for later 49* dTLS, TLS, look to need special port numbers, cert storage, recent libssl. 50* aggressive negative caching for NSEC, NSEC3. 51* multiple queries per question, server exploration, server selection. 52* support TSIG on queries, for validating resolver deployment. 53* retry-mode, where a bogus result triggers a retry-mode query, where a list 54 of responses over a time interval is collected, and each is validated. 55 or try in TCP mode. Do not 'try all servers several times', since we must 56 not create packet storms with operator errors. 57o on windows version, implement that OS ancillary data capabilities for 58 interface-automatic. IPPKTINFO, IP6PKTINFO for WSARecvMsg, WSASendMsg. 59o local-zone directive with authority service, full authority server 60 is a non-goal. 61o infra and lame cache: easier size config (in Mb), show usage in graphs. 62- store time of dump in cachedumps, so that on a load the ttls can be 63 compared to the absolute time, and now-expired items can be dealt with. 64 65later 66- selective verbosity; ubcontrol trace example.com 67- cache fork-dump, pre-load 68- for fwds, send queries to N servers in fwd-list, use first reply. 69 document high scalable, high available unbound setup onepager. 70- prefetch DNSKEY when DS in delegation seen (nonCD, underTA). 71- use libevent if available on system by default(?), default outgoing 256to1024 72 73[1] BIND-like query logging to see who's looking up what and when 74[2] more logging about stuff like SERVFAIL and REFUSED responses 75[3] a Makefile that works without gnumake 76 77