-
Notifications
You must be signed in to change notification settings - Fork 4
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[robustness] SIGHUP reloads viper config only; Gconfig/pd.Policy/sources not re-applied (needs restart)
robustnessCrash-resistance, error handling, degradationCrash-resistance, error handling, degradationStatus: Open.[security] downstreamTracker serials map never evicts (unbounded memory from spoofed IXFR/NOTIFY)
concurrencyData races, locking, goroutine coordinationData races, locking, goroutine coordinationsecurityDoS vectors, auth, trust boundaryDoS vectors, auth, trust boundaryStatus: Open.[bug] GenerateRpzAxfr full rebuild bypasses allowlist precedence (path-dependent served zone)
bugSomething isn't workingSomething isn't workingStatus: Open.[perf] Size-aware AXFR/IXFR envelope packing (pack to ~64K, not fixed 500 RRs)
enhancementNew feature or requestNew feature or requestStatus: Open.[bug] Axfr.Data keyed inconsistently (name vs name+ZoneName) between full build and IXFR paths
bugSomething isn't workingSomething isn't workingStatus: Open.[review] Engine channels buffered at 10 — NOTIFY burst couples DNS handler to engine progress
concurrencyData races, locking, goroutine coordinationData races, locking, goroutine coordinationsecurityDoS vectors, auth, trust boundaryDoS vectors, auth, trust boundaryStatus: Open.[review] uint32 serial wraparound unhandled
robustnessCrash-resistance, error handling, degradationCrash-resistance, error handling, degradationStatus: Open.[review] ProcessTapirUpdate proceeds after GenerateRpzIxfr error — silent divergence
bugSomething isn't workingSomething isn't workingrobustnessCrash-resistance, error handling, degradationCrash-resistance, error handling, degradationStatus: Open.[review] MQTT payload SrcName/ListType possibly not bound to signing-key identity (unverified)
securityDoS vectors, auth, trust boundaryDoS vectors, auth, trust boundaryStatus: Open.[review] InsecureSkipVerify=true in bootstrap (and reportedly CLI) TLS
securityDoS vectors, auth, trust boundaryDoS vectors, auth, trust boundaryStatus: Open.[review] /bootstrap exports full lists under single shared key, no per-list authz
securityDoS vectors, auth, trust boundaryDoS vectors, auth, trust boundaryStatus: Open.[review] X-API-Key non-constant-time compare; no request body size limit
securityDoS vectors, auth, trust boundaryDoS vectors, auth, trust boundaryStatus: Open.