216 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
mokhtar	2273fda48d	web: a manual blocklist refresh publishes once, since refreshAll already ends in its own reload	2026-10-23 08:50:01 +02:00
mokhtar	27e1e497ec	platform: the huge pages test skips where the kernel or emulator has no such switch v0.0.25	2026-10-22 20:46:59 +02:00
mokhtar	98283e1569	ci: install the pinned node from its tarball instead of trusting the runner image	2026-10-22 20:43:35 +02:00
mokhtar	f8344184e5	build: bump version to 0.0.25	2026-10-22 20:31:25 +02:00
mokhtar	90b022f53e	changelog: date the 0.0.25 section	2026-10-22 20:29:19 +02:00
mokhtar	91ed5ae774	server: a query that finds every permit taken waits for one instead of failing, the budget is 64, permit and upstream turns wait on a futex with one thread each, the thread pool has no task limit, and transparent huge pages are off for the process	2026-10-22 20:26:25 +02:00
mokhtar	63cc5f8dc3	server: every dns listener shares one budget of 32 queries, stream listeners take 16 connections, the task pool is capped from those bounds, and work it cannot start is counted by site	2026-10-22 15:24:10 +02:00
mokhtar	e4e405f8e9	cache: a byte budget of 256 bytes per entry bounds the cached answers, evicting by clock, and a full or failed copy is counted instead of swallowed	2026-10-22 08:54:59 +02:00
mokhtar	d951d03b7d	querylog: the writer queue defaults to 1024 entries, and a live stream allocates its ring on subscribe instead of at boot	2026-10-21 22:38:53 +02:00
mokhtar	0cafd770c1	filter: a reload builds the snapshot one source at a time, and the startup pass reloads only when a source changed or was not enforced	2026-10-21 21:41:47 +02:00
mokhtar	c2eac8d486	storage: each runtime database connection keeps a page cache sized for its role, read back at open	2026-10-21 21:40:05 +02:00
mokhtar	8f2794533b	ci: time limits on the test, test-aarch64, package and container jobs	2026-10-21 21:32:40 +02:00
mokhtar	5a51e2d6b9	tests: a failed server check fails the test instead of hanging it, and the tls idle tests leave the handshake room	2026-10-21 21:32:40 +02:00
mokhtar	4916b01571	filter: store each blocklist name once, flagged exact and subdomains, instead of in two sets per source	2026-10-21 20:49:55 +02:00
mokhtar	2a06239676	ci: use the runner image's node instead of setup-node, which downloaded it again on every run	2026-10-21 18:53:42 +02:00
mokhtar	7e0664250b	ci: build nxdns.sh and deploy it as a cloudflare worker with static assets	2026-10-21 17:31:06 +02:00
mokhtar	93e2683e71	website: nxdns.sh on astro and starlight, with the docs and 0.0.24 screenshots	2026-10-21 17:03:01 +02:00
mokhtar	c21e5a9542	docs: rewrite for people running nxdns; query-history refusals name their remedy and a refused start gives no wrong hints	2026-10-21 17:03:00 +02:00
mokhtar	fbc8fd7882	specs: memory budget drops the removed performance page and keeps stack_size, a thp artifact explained the 2 mib stacks	2026-10-21 17:02:03 +02:00
mokhtar	77ae1a189d	ci: limit the frontend job to 8 minutes v0.0.24	2026-10-21 13:37:33 +02:00
mokhtar	a0d8af3170	build: bump version to 0.0.24	2026-10-21 11:02:17 +02:00
mokhtar	3e8cd0ea88	changelog: date the 0.0.24 section	2026-10-21 11:00:15 +02:00
mokhtar	f26ee523c2	admin: tables fit a phone, their first cell carrying the hidden columns, and no positioned label widens the page	2026-10-21 10:21:17 +02:00
mokhtar	9a99890aea	build: bump version to 0.0.23 v0.0.23	2026-10-20 15:20:37 +02:00
mokhtar	4ad7ad6c32	changelog: date the 0.0.23 section	2026-10-20 15:18:03 +02:00
mokhtar	b4ef7b8ed1	website: plan records the approved look, three install tabs and phone screenshots	2026-10-20 14:57:27 +02:00
mokhtar	d9d1c1d60d	docs: verify-a-release transcripts elide the signing key's email address	2026-10-20 14:57:27 +02:00
mokhtar	f35146918b	nix: a services.nxdns module that runs the packaged unit in file mode against a configuration the pinned binary accepted	2026-10-20 13:06:43 +02:00
mokhtar	aa8c9e28af	deploy: the compose file names its own release, and the cut moves it with the version	2026-10-20 11:46:13 +02:00
mokhtar	ea9f16a989	admin: the overview's last bucket is drawn as still counting; the query detail names the device as the activity list does	2026-10-20 11:20:16 +02:00
mokhtar	8efe504c51	upstream: an unnamed connect errno fails over, local-resource exchanges are counted, doh faults carry the http status	2026-10-20 10:11:34 +02:00
mokhtar	2697adfa27	website: demo household and the admin screenshots it produced	2026-10-20 09:57:49 +02:00
mokhtar	4ef795a8a9	docs: config examples use cloudflare doh; quad9 doh needs http/2 and answers 505	2026-10-20 09:57:49 +02:00
mokhtar	0385c34ca3	build: bump version to 0.0.22 v0.0.22	2026-10-19 23:10:59 +02:00
mokhtar	36e11ca71d	metrics: peak gauges for in-flight queries, stream connections and the query log queue	2026-10-19 23:08:58 +02:00
mokhtar	9d2511ee58	specs: memory budget, measured owners and the fix order	2026-10-19 22:48:19 +02:00
mokhtar	cab79c75e2	plan: nxdns.sh landing page settled; doq waits on a quic stack, dnscrypt is out	2026-10-19 17:25:44 +02:00
mokhtar	5acfec2bff	docs: the reproducibility gate exists since 0.0.17; a fresh rebuild of v0.0.21 matches	2026-10-19 17:25:44 +02:00
mokhtar	534c620695	docs: the install guides ran against the published v0.0.21, no more no-release notes	2026-10-19 17:25:39 +02:00
mokhtar	f2dd6ad1c7	build: bump version to 0.0.21 v0.0.21	2026-09-12 20:26:58 +02:00
mokhtar	08cdf86ecd	upstream: a diagnostics episode follows health, and a peer fault carries its cause	2026-09-12 20:24:49 +02:00
mokhtar	6e9a36903e	build: bump version to 0.0.20 v0.0.20	2026-09-12 15:10:09 +02:00
mokhtar	f6fa43a8b4	filter: blocklist downloads never reuse a pooled connection, the peer closes it between passes	2026-09-12 15:07:55 +02:00
mokhtar	f4562cac26	filter: skip the read-only directory test as root, ci's runner ignores mode bits v0.0.19	2026-09-12 10:43:02 +02:00
mokhtar	250bdca7e7	build: bump version to 0.0.19	2026-09-12 10:01:19 +02:00
mokhtar	63f4f96a48	changelog: date the 0.0.19 section	2026-09-12 09:59:13 +02:00
mokhtar	52158198cf	filter: a failed blocklist download names its phase, cause, status, bytes and elapsed time	2026-09-12 09:58:59 +02:00
mokhtar	bf79a22584	docs: renovate's nix manager does not bump a tag ref; the regex manager recipe that does	2026-09-12 00:38:45 +02:00
mokhtar	bcd9bce16c	build: bump version to 0.0.18 v0.0.18	2026-09-09 19:25:08 +02:00
mokhtar	2b790c4c3e	changelog: 0.0.18 section	2026-09-09 19:23:07 +02:00