From nobody Tue Oct 28 21:23:43 2025 X-Original-To: dev-commits-src-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cx3Jv6mKlz6DW91; Tue, 28 Oct 2025 21:23:43 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cx3Jv4v1Bz3l8V; Tue, 28 Oct 2025 21:23:43 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1761686623; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=65l2z/XpzG/iJmW70TL2OIX7uH3jBn14cFHh9EVpBPA=; b=xNABr3AL5PR3uDVlHLMkvz8LC0q4xDwwpfhYkYzDs2ILyG/mSQ4HBuqCy3tM91nNRSukrM TUkxcRM+KcSqU4OIxxTPkRuop9ZWgPSg2J2zwr2nsf+0ocxiYZMaPS2vEDhWRxpyW8P/OR wK3JJYax5Sseb0uiiiRMbWlLyVtjWP2CxzcKPKdI5AHBjKiA7Cbi7jymZz/yB9ybft2QcC CbaPv605iTrLFmEoLh7021EdqEdiYrZECyTyaSvFMOgVzYkhEz9mlQmpXvBOIdtx7pLUMO lLo6gBwEjrKUWXwfNtpHn4r2bCTkmzFNPWMaAlwOwsSppfjxqibIDojHEW6lmw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1761686623; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=65l2z/XpzG/iJmW70TL2OIX7uH3jBn14cFHh9EVpBPA=; b=CWTou6j0LEm5dbWKTXIwSHa85bQyCNA3UbXzKIWe8bbqYjCSs7pe6qOMfMaZIhf8vsUvDk hXL/g1cCr7lIZ0qLUHuYOu4bS2Wkko1LiUXZl/8IHYU12Jra6J/gSN/jPCNxXxisUFaeFl X1u7iXzAocRWDFK5AT9utkKdPjtqBPwW7qYCjkOrIcc7G7dmQHYEFEqZ2GQKyLE3m0eDmo AjSBOn5k1EFj7xjc9nFOHRSxUDdDnjtctMHU7wULE1Br3zNAs7h9ItDseYU/4OFZEIbryl dU9GwKu2GpsDT332GjMh5ustMjGNQcLVFaCkD0Jq++zVOgH5/TYgyoiyP0XvHA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1761686623; a=rsa-sha256; cv=none; b=amChvbK9eurUWrWK4+7b/PMNRscpcDZMp7MU9Wiao/pQqwrTSzjdwO867TnQcCZYrJ7w2F h4o7Fa+OYxj42Li4XyOWeBuC69f9/0h+iHCAvDw4oRWfzF+MyavWnPdtKOmAmxcnlC/crx 5JTKlu555laBtWPkEJXfXrBffUcJXNjrfSxpMAxL6O2M4mgY+ikTGenaDJBYY9SJ1KJ5s6 EKSZirr+qp4i6mBFITv7cGKULC0/7+VziVDE0WLmL8yJMWZThl9TMzkcNh2XP4u28AmB1A tuc1V1wWE91YXRggUwf4iTZK+zCUGOG02st6ty9bsg4oFhAosPrcGwEySKssPQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4cx3Jv4P43z16HQ; Tue, 28 Oct 2025 21:23:43 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 59SLNhSQ075689; Tue, 28 Oct 2025 21:23:43 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 59SLNh1j075687; Tue, 28 Oct 2025 21:23:43 GMT (envelope-from git) Date: Tue, 28 Oct 2025 21:23:43 GMT Message-Id: <202510282123.59SLNh1j075687@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Colin Percival Subject: git: fef4de6547a7 - releng/15.0 - local-unbound-setup: Set so-sndbuf to 0 List-Id: Commits to the stable branches of the FreeBSD src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-branches@freebsd.org Sender: owner-dev-commits-src-branches@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: cperciva X-Git-Repository: src X-Git-Refname: refs/heads/releng/15.0 X-Git-Reftype: branch X-Git-Commit: fef4de6547a7d74f579a79d3137835fe480bcf14 Auto-Submitted: auto-generated The branch releng/15.0 has been updated by cperciva: URL: https://cgit.FreeBSD.org/src/commit/?id=fef4de6547a7d74f579a79d3137835fe480bcf14 commit fef4de6547a7d74f579a79d3137835fe480bcf14 Author: Dag-Erling Smørgrav AuthorDate: 2025-10-08 16:45:02 +0000 Commit: Colin Percival CommitDate: 2025-10-28 21:23:12 +0000 local-unbound-setup: Set so-sndbuf to 0 Without this setting, Unbound 1.24.0 and newer will attempt to set the socket buffer size to 4 MB to mitigate issues that mostly affect servers with large numbers of clients on local networks, which is not a scenario local-unbound is intended for. This is not only a waste of resources, it can also fail, resulting in a warning message on daemon startup. Approved by: re (cperciva) Fixes: b2efd602aea8 ("unbound: Vendor import 1.24.0") Reviewed by: jlduran, cy Differential Revision: https://reviews.freebsd.org/D52977 (cherry picked from commit de3faa85d8f99d260cbfa6242dd8e4ece693e4f8) (cherry picked from commit 65629acb4a793416b128d932abf5c539315dec4e) --- usr.sbin/unbound/setup/local-unbound-setup.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/usr.sbin/unbound/setup/local-unbound-setup.sh b/usr.sbin/unbound/setup/local-unbound-setup.sh index d57d74952fc7..25cfef48b6f0 100755 --- a/usr.sbin/unbound/setup/local-unbound-setup.sh +++ b/usr.sbin/unbound/setup/local-unbound-setup.sh @@ -261,6 +261,7 @@ gen_unbound_conf() { if [ "${use_tls}" = "yes" ] ; then echo " tls-cert-bundle: /etc/ssl/cert.pem" fi + echo " so-sndbuf: 0" echo "" if [ -f "${forward_conf}" ] ; then echo "include: ${forward_conf}"