Skip to content

Introduce an access control service layer. - #971

Merged
Philip-NLnetLabs merged 6 commits into
mainfrom
improve-tsig-key-store
Sep 3, 2026
Merged

Introduce an access control service layer.#971
Philip-NLnetLabs merged 6 commits into
mainfrom
improve-tsig-key-store

Conversation

@Philip-NLnetLabs

@Philip-NLnetLabs Philip-NLnetLabs commented Aug 24, 2026

Copy link
Copy Markdown
Member

Fixes #763

  • If you are changing Rust code or integration tests (Cargo.*, crates/, etc/, integration-tests/, src/):
    • Did you run the integration tests with act through the act-wrapper (as described in TESTING.md)?

@Philip-NLnetLabs
Philip-NLnetLabs marked this pull request as draft August 24, 2026 15:09
@Philip-NLnetLabs
Philip-NLnetLabs marked this pull request as ready for review August 26, 2026 15:24
@Philip-NLnetLabs
Philip-NLnetLabs requested a review from bal-e August 26, 2026 15:24

@bal-e bal-e left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's a lot of code, but it looks good to me :)

Comment thread src/units/zone_server.rs Outdated
Comment on lines +656 to +657
let zones = &self.center.state.lock().unwrap().zones;
let Some(zone) = zones.get(&qname).map(|z| &z.0) else {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will hold on to a lock of the global state for the duration of this function (but not the full duration of the XFR). To make sure this doesn't silently introduce hangs in the future, could you put the code locking center.state, looking up the zone, and copying out Arc<Zone> in a {} block?

@Philip-NLnetLabs
Philip-NLnetLabs merged commit b29e688 into main Sep 3, 2026
9 checks passed
@Philip-NLnetLabs
Philip-NLnetLabs deleted the improve-tsig-key-store branch September 3, 2026 16:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Manually handle TSIG within the zone server

2 participants