static int
tcl_cpucount(ClientData clientData, Tcl_Interp *interp, int argc, char *argv[])
{
ya_result count = sys_get_cpu_count();
if(ISOK(count))
{
fprintf(stdout, "Detected cpu count : %i\n", count);
}
else
{
fprintf(stdout, "Assumed cpu count : %i\n", DEFAULT_ASSUMED_CPU_COUNT);
}
fflush(stdout);
return TCL_OK;
}
static ya_result
config_main_section_postprocess(struct config_section_descriptor_s *csd)
{
u32 port = 0;
u32 cpu_per_core = (sys_has_hyperthreading())?2:1;
int ret;
char tmp[PATH_MAX];
if(FAIL(parse_u32_check_range(g_config->server_port, &port, 1, MAX_U16, 10)))
{
port = DNS_DEFAULT_PORT;
ttylog_err("config: main: wrong dns port set in main '%s', defaulted to %d", g_config->server_port, port);
}
if(g_config->hostname_chaos == NULL)
{
#if _BSD_SOURCE || _XOPEN_SOURCE >= 500 || /* Since glibc 2.12: */ _POSIX_C_SOURCE >= 200112L
if(gethostname(tmp, sizeof(tmp)) == 0)
{
g_config->hostname_chaos = strdup(tmp);
}
else
{
osformatln(termerr,"config: main: unable to get hostname: %r", ERRNO_ERROR);
g_config->hostname_chaos = strdup("not disclosed");
}
#else
g_config->hostname_chaos = strdup("not disclosed");
#endif
}
if(g_config->thread_affinity_multiplier == 0)
{
g_config->thread_affinity_multiplier = cpu_per_core;
}
class_ch_set_hostname(g_config->hostname_chaos);
class_ch_set_id_server(g_config->serverid_chaos);
class_ch_set_version(g_config->version_chaos);
host_set_default_port_value(g_config->listen, ntohs(port));
if(g_config->server_flags & SERVER_FL_CHROOT)
{
uid_t euid = geteuid();
if(euid != 0)
{
ttylog_err("config: main: chroot has been enabled but euid is not root (%i != 0)", (int)euid);
return INVALID_STATE_ERROR;
}
}
else // disables the base-path/chroot-path feature
{
if(strcmp(g_config->chroot_path, "/") != 0)
{
free(g_config->chroot_path);
g_config->chroot_path = strdup("/");
chroot_set_path(g_config->chroot_path);
}
}
message_edns0_setmaxsize(g_config->edns0_max_size);
g_config->total_interfaces = host_address_count(g_config->listen);
if(g_config->total_interfaces > MAX_INTERFACES)
{
ttylog_err("error: more than %d listening addresses defined.", MAX_INTERFACES);
return CONFIG_TOO_MANY_HOSTS;
}
#ifndef SO_REUSEPORT
if(g_config->network_model == 1)
{
ttylog_err("error: network-model 1 requires features not available on this system (SO_REUSEPORT)");
return FEATURE_NOT_SUPPORTED;
}
#endif
g_config->axfr_retry_jitter = BOUND(AXFR_RETRY_JITTER_MIN, g_config->axfr_retry_jitter, g_config->axfr_retry_delay);
g_config->dnssec_thread_count = BOUND(1, g_config->dnssec_thread_count, sys_get_cpu_count());
if(g_config->cpu_count_override > 0)
{
sys_set_cpu_count(g_config->cpu_count_override);
}
if(g_config->thread_count_by_address == 0)
{
ttylog_err("config: single thread engine has been removed, thread-count-by-address set to 1");
g_config->thread_count_by_address = 1;
}
if(g_config->thread_count_by_address < 0)
{
g_config->thread_count_by_address = MAX(sys_get_cpu_count() / cpu_per_core, 1);
}
else if((g_config->thread_count_by_address > sys_get_cpu_count()))
{
g_config->thread_count_by_address = MAX(sys_get_cpu_count() / cpu_per_core, 1);
ttylog_err("config: bounding down thread-count-by-address to the number of physical CPUs (%d)", g_config->thread_count_by_address);
}
g_config->tcp_query_min_rate_us = g_config->tcp_query_min_rate * 0.000001;
#if HAS_DNSSEC_SUPPORT
g_config->dnssec_thread_count = BOUND(1, g_config->dnssec_thread_count, sys_get_cpu_count());
if(!IS_TYPE_PRIVATE(g_config->sig_signing_type))
{
ttylog_err("error: signing type is not in the accepted range: %hx", g_config->sig_signing_type);
return CONFIG_WRONG_SIG_TYPE;
}
if(g_config->sig_validity_interval > SIGNATURE_VALIDITY_INTERVAL_MAX)
{
ttylog_err("error: signature validity interval too high");
return CONFIG_WRONG_SIG_VALIDITY;
}
if(g_config->sig_validity_regeneration * SIGNATURE_VALIDITY_REGENERATION_S * 2 > g_config->sig_validity_interval * SIGNATURE_VALIDITY_INTERVAL_S)
{
ttylog_err("error: default signature regeneration is more than half the interval (%ds * 2 > %ds)",
g_config->sig_validity_regeneration * SIGNATURE_VALIDITY_REGENERATION_S,
g_config->sig_validity_interval * SIGNATURE_VALIDITY_INTERVAL_S);
return CONFIG_WRONG_SIG_REGEN;
}
#endif
/// @note config_main_verify_and_update_directory updates the folder with the base_path
/**
*
* @note All base paths are updated with the chroot variable so it does not
* need to be added all the time.
*
*/
const char *base_path = g_config->chroot_path;
if(FAIL(ret = config_main_verify_and_update_directory(base_path, &g_config->data_path)))
{
return ret;
}
if(FAIL(ret = config_main_verify_and_update_directory(base_path, &g_config->keys_path)))
{
return ret;
}
if(FAIL(ret = config_main_verify_and_update_directory(base_path, &g_config->log_path)))
{
return ret;
}
#if 0 /* fix */
#else
if(FAIL(ret = config_main_verify_and_update_file(base_path, &g_config->pid_file)))
{
return ret;
}
#endif
g_config->reloadable = TRUE;
if((g_config->server_flags & SERVER_FL_CHROOT) != 0)
{
if(FAIL(chroot_manage_path(&g_config->config_file, g_config->config_file, FALSE)))
{
log_warn("config file '%s' will not be accessible within the chroot jail '%s' : config reload will not work", g_config->config_file, base_path);
g_config->reloadable = FALSE;
}
}
if(FAIL(ret = config_main_verify_and_update_directory(base_path, &g_config->xfr_path)))
{
return ret;
}
#if ZDB_HAS_DNSSEC_SUPPORT
dnssec_keystore_setpath(g_config->keys_path);
dnssec_set_xfr_path(g_config->xfr_path);
journal_set_xfr_path(g_config->xfr_path);
#endif
if((logger_get_uid() != g_config->uid) || (logger_get_gid() != g_config->gid))
{
logger_set_uid(g_config->uid);
logger_set_gid(g_config->gid);
logger_reopen();
}
return SUCCESS;
}
void
zdb_init()
{
if(zdb_init_done)
{
return;
}
/* DO or DIE */
if(dnscore_getfingerprint() != (dnsdb_getfingerprint() & dnscore_fingerprint_mask()))
{
osformatln(termerr, "Mismatched fingerprints: %08x != (%08x = %08x & %08x)",
dnscore_getfingerprint(),
dnsdb_getfingerprint() & dnscore_fingerprint_mask(),
dnsdb_getfingerprint() , dnscore_fingerprint_mask());
flusherr();
exit(-1);
}
zdb_init_done = TRUE;
/* Init the dns core */
dnscore_init();
/* Init the error table */
zdb_register_errors();
/* Init the hash tables */
hash_init();
#if ZDB_OPENSSL_SUPPORT!=0
/* Init openssl */
ENGINE_load_openssl();
ENGINE_load_builtin_engines();
ssl_mutex_count = CRYPTO_num_locks();
MALLOC_OR_DIE(pthread_mutex_t*, ssl_mutex, ssl_mutex_count * sizeof (pthread_mutex_t), ZDB_SSLMUTEX_TAG);
int i;
for(i = 0; i < ssl_mutex_count; i++)
{
pthread_mutex_init(&ssl_mutex[i], NULL);
}
CRYPTO_set_id_callback(ssl_thread_id);
CRYPTO_set_locking_callback(ssl_lock);
#endif
#if ZDB_USE_THREADPOOL != 0
/*
* The default value for the database.
* This initialization will do nothing if it has already been done.
*
* The server will have to do it before calling zdb_init();
*
*/
u32 count = sys_get_cpu_count() + 2;
ya_result return_value = thread_pool_init(count);
if(FAIL(return_value))
{
log_crit("unable to initialise the thread pool to %d threads: %r", count, return_value); /* will ultimately lead to the end of the program */
exit(-1);
}
thread_pool_initialized_by_zdb = (return_value == count);
#endif
#if ZDB_USES_ZALLOC != 0
zdb_set_zowner(pthread_self());
#endif
logger_start();
zdb_rdtsc_registations();
}
