262                 if (s->possible_feature_level == level)  in dns_server_packet_received()
266                         if (s->possible_feature_level == level)  in dns_server_packet_received()
269                         if (s->possible_feature_level == level)  in dns_server_packet_received()
297         if (s->possible_feature_level != level)  in dns_server_packet_lost()
315         if (s->possible_feature_level != level)  in dns_server_packet_truncated()
357         if (s->possible_feature_level > level) {  in dns_server_packet_rcode_downgrade()
358                 s->possible_feature_level = level;  in dns_server_packet_rcode_downgrade()
369         if (s->possible_feature_level != level)  in dns_server_packet_invalid()
380         if (s->possible_feature_level != level)  in dns_server_packet_do_off()
436         if (s->possible_feature_level > best)  in dns_server_possible_feature_level()
437                 s->possible_feature_level = best;  in dns_server_possible_feature_level()
439         if (s->possible_feature_level < best && dns_server_grace_period_expired(s)) {  in dns_server_possible_feature_level()
441                 s->possible_feature_level = best;  in dns_server_possible_feature_level()
449                          dns_server_feature_level_to_string(s->possible_feature_level),  in dns_server_possible_feature_level()
454         } else if (s->possible_feature_level <= s->verified_feature_level)  in dns_server_possible_feature_level()
455                 s->possible_feature_level = s->verified_feature_level;  in dns_server_possible_feature_level()
457                 DnsServerFeatureLevel p = s->possible_feature_level;  in dns_server_possible_feature_level()
461                     s->possible_feature_level == DNS_SERVER_FEATURE_LEVEL_TCP) {  in dns_server_possible_feature_level()
466                         s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_UDP;  in dns_server_possible_feature_level()
469                            DNS_SERVER_FEATURE_LEVEL_IS_TLS(s->possible_feature_level) &&  in dns_server_possible_feature_level()
476                         s->possible_feature_level--;  in dns_server_possible_feature_level()
479                            s->possible_feature_level > DNS_SERVER_FEATURE_LEVEL_UDP &&  in dns_server_possible_feature_level()
480                            s->possible_feature_level != DNS_SERVER_FEATURE_LEVEL_TLS_PLAIN) {  in dns_server_possible_feature_level()
488                         s->possible_feature_level =  in dns_server_possible_feature_level()
489 …s->possible_feature_level == DNS_SERVER_FEATURE_LEVEL_TLS_DO  ? DNS_SERVER_FEATURE_LEVEL_TLS_PLAIN…  in dns_server_possible_feature_level()
490 …   DNS_SERVER_FEATURE_LEVEL_IS_DNSSEC(s->possible_feature_level) ? DNS_SERVER_FEATURE_LEVEL_EDNS0 :  in dns_server_possible_feature_level()
494                            DNS_SERVER_FEATURE_LEVEL_IS_EDNS0(s->possible_feature_level) &&  in dns_server_possible_feature_level()
509                         s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_UDP;  in dns_server_possible_feature_level()
516                            DNS_SERVER_FEATURE_LEVEL_IS_DNSSEC(s->possible_feature_level) &&  in dns_server_possible_feature_level()
523 …s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_IS_TLS(s->possible_feature_level) ? DNS_SERVE…  in dns_server_possible_feature_level()
527                            DNS_SERVER_FEATURE_LEVEL_IS_DNSSEC(s->possible_feature_level) &&  in dns_server_possible_feature_level()
538 …s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_IS_TLS(s->possible_feature_level) ? DNS_SERVE…  in dns_server_possible_feature_level()
542                            DNS_SERVER_FEATURE_LEVEL_IS_UDP(s->possible_feature_level) &&  in dns_server_possible_feature_level()
543 …((s->possible_feature_level != DNS_SERVER_FEATURE_LEVEL_DO) || dns_server_get_dnssec_mode(s) != DN…  in dns_server_possible_feature_level()
554 …            if (s->possible_feature_level == DNS_SERVER_FEATURE_LEVEL_DO) /* skip over TLS_PLAIN */  in dns_server_possible_feature_level()
555                                 s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_EDNS0;  in dns_server_possible_feature_level()
557                                 s->possible_feature_level--;  in dns_server_possible_feature_level()
561                            s->possible_feature_level > DNS_SERVER_FEATURE_LEVEL_UDP &&  in dns_server_possible_feature_level()
562                            DNS_SERVER_FEATURE_LEVEL_IS_UDP(s->possible_feature_level) &&  in dns_server_possible_feature_level()
563 …(!DNS_SERVER_FEATURE_LEVEL_IS_DNSSEC(s->possible_feature_level) || dns_server_get_dnssec_mode(s) !…  in dns_server_possible_feature_level()
574                         if (DNS_SERVER_FEATURE_LEVEL_IS_DNSSEC(s->possible_feature_level))  in dns_server_possible_feature_level()
575 …                s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_EDNS0; /* Go DNSSEC → EDNS0 */  in dns_server_possible_feature_level()
577 …                     s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_UDP; /* Go EDNS0 → UDP */  in dns_server_possible_feature_level()
580                 if (p != s->possible_feature_level) {  in dns_server_possible_feature_level()
586                                  dns_server_feature_level_to_string(s->possible_feature_level),  in dns_server_possible_feature_level()
591         return s->possible_feature_level;  in dns_server_possible_feature_level()
702         if (!DNS_SERVER_FEATURE_LEVEL_IS_DNSSEC(server->possible_feature_level))  in dns_server_dnssec_supported()
732 …"DNS_SERVER_FEATURE_LEVEL=%s", dns_server_feature_level_to_string(server->possible_feature_level));  in dns_server_warn_downgrade()
975         s->possible_feature_level = DNS_SERVER_FEATURE_LEVEL_BEST;  in dns_server_reset_features()
1023         fputs(strna(dns_server_feature_level_to_string(s->possible_feature_level)), f);  in dns_server_dump()