Package: unbound Severity: wishlist Tags: patch Dear Maintainer,
TCP fast open can save a roundtrip on subsequent TCP connects [1]. Since systemd-resolved supports DNSoverTLS with TFO out of the box [3] and TFO support is included in recent kernels, it might be worth enabling. There are configure switches availble in the build system [2]. Stefan [1]: https://lwn.net/Articles/508865/ [2]: https://gitlab.labs.nic.cz/turris/turris-os-packages/commit/cca5f0fe9f406ff08fe8f9438b5c7647fbb5bc61 [3]: https://github.com/systemd/systemd/pull/8849 https://github.com/systemd/systemd/pull/8849/commits/91ccab1e40a10963764f449ba8309d47e90d6a8a -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (990, 'testing'), (500, 'testing-debug') Architecture: amd64 (x86_64) Kernel: Linux 4.16.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages unbound depends on: ii adduser 3.117 ii dns-root-data 2018013001 ii libc6 2.27-3 ii libevent-2.1-6 2.1.8-stable-4 pn libfstrm0 <none> pn libprotobuf-c1 <none> ii libpython3.6 3.6.6-1 ii libssl1.1 1.1.0h-4 ii libsystemd0 239-5 ii lsb-base 9.20170808 ii openssl 1.1.0h-4 pn unbound-anchor <none> unbound recommends no packages. Versions of packages unbound suggests: ii apparmor 2.12-4+b1
