Info on aggressive-nsec in stats and unbound-control

[Roland van Rijswijk-Deij]

Hi folks,

We deployed Unbound 1.7.0 on one of our production servers yesterday,
and I have two questions regarding the aggressive-nsec feature:

1. It seems that unbound-control cannot tell me whether the option is
enabled (we enabled it explicitly in the configuration):

# unbound-control get_option aggressive-nsec
error unknown option

Am I doing something wrong, or is this something that might need fixing?

2. It would be nice to have a metric in the extended statistics that
tallies how many times aggressive-nsec was used to produce an NXDOMAIN
response, is that possible?

Cheers,

Roland

-- 
-- Roland M. van Rijswijk-Deij
-- SURFnet bv
-- w: https://www.surf.nl/en/about-surf/subsidiaries/surfnet
-- e: roland.vanrijswijk at surfnet.nl