Prep for rec-4.7.0-beta1

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index ceaddca5992d18ab88be746327da4f566cc85894..914d0b2512e10cbbedc2052544bf70c28081fda1 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -1843,6 +1843,7 @@ webpassword
 webserver
 website
 Webspider
+Wegener
 weightparams
 Weimer
 Welzel

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 027de6580ae66a752693d406e3c0c2ecf1e64e5b..19932069a2fbe5584a99fad51bbf5ac5101c7967 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2022041200 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2022041400 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -311,7 +311,8 @@ recursor-4.6.0-rc1.security-status                      60 IN TXT "3 Unsupported
 recursor-4.6.0.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html"
 recursor-4.6.1.security-status                          60 IN TXT "1 OK"
 recursor-4.6.2.security-status                          60 IN TXT "1 OK"
-recursor-4.7.0-alpha1.security-status                   60 IN TXT "1 Unsupported pre-release (known vulnerabilities)"
+recursor-4.7.0-alpha1.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+recursor-4.7.0-beta1.security-status                    60 IN TXT "1 OK"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/"

diff --git a/pdns/recursordist/docs/changelog/4.7.rst b/pdns/recursordist/docs/changelog/4.7.rst
index 149f8cba6e52b464d685b75e65a89dc68e51da46..862df54ce015ced68c116c61d1cf0bc69371e38e 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.7.rst
+++ b/pdns/recursordist/docs/changelog/4.7.rst
@@ -1,6 +1,89 @@
 Changelogs for 4.7.X
 ====================
 
+.. changelog::
+  :version: 4.7.0-beta1
+  :released: 14th of April 2022
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11487
+
+    Probe authoritative servers for DoT support (experimental).
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 11524
+
+    Update moment.min.js (path traversal fix; we are unaffected).
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11492
+
+    Add deferred mode for retrieving additional records.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11484
+
+    Use boost::mult-index for nsspeed table and make it shared.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 11496
+
+    Prevent segfault with empty allow-from-file and allow-from options (Sven Wegener).
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11312
+
+    Packet cache improvements: do not fill beyond limit and use strict LRU eviction method.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11444
+
+    Use nice format for timestamp printing.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 11471
+
+    In the handler thread, call sd_notify() just before entering the main loop in RecursorThread.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11445
+    :tickets: 11440
+
+    Only log "Unable to send NOD lookup" if log-common-errors is set.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11443
+
+    Remember parent NS set, to be able to fallback to it if needed.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11396, 11507
+
+    Proxy by table: allow a table based mapping of source address.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 11405
+
+    Distinguish between unreachable and timeout for throttling.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 11397
+
+    Use correct task to clean outgoing TCP.
+
 .. changelog::
   :version: 4.7.0-alpha1
   :released: 28th of February 2022

diff --git a/pdns/recursordist/docs/settings.rst b/pdns/recursordist/docs/settings.rst
index 9aa287751b98d1bdabf79593a1a5ec7c5d0a4496..1338d83be191539bef39d1a54a0eea14ca291d55 100644 (file)
--- a/pdns/recursordist/docs/settings.rst
+++ b/pdns/recursordist/docs/settings.rst
@@ -885,7 +885,7 @@ If set, EDNS options in incoming queries are extracted and passed to the :func:`
 -  Path
 -  Default: empty
 
-.. versionchanged:: 4.7.0
+.. versionchanged:: 4.6.2
 
   Introduced the value ``no`` to disable root-hints processing.
 

diff --git a/pdns/recursordist/docs/upgrade.rst b/pdns/recursordist/docs/upgrade.rst
index 1e9c969f645dfc270a0b5d2e4f1bffcb426cb9bf..f43d3f9465a4f3a1a090657c2f8274275c6376d1 100644 (file)
--- a/pdns/recursordist/docs/upgrade.rst
+++ b/pdns/recursordist/docs/upgrade.rst
@@ -14,13 +14,25 @@ be rejected by default, while previously the ``ZONEMD`` records would be ignored
 
 Asynchronous retrieval of ``AAAA`` records for nameservers
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-If IPv6 is enabled for outgoing queries using :ref:`setting-query-local-address`, the Recursor will schedule an asynchronous task to resolve IPv6 addresses of nameservers it did not otherwise learn.
-These addresses will then be used for future queries to authoritative nameservers.
-This has the consequence that authoritative nameservers will be contacted over IPv6 in more case than before.
+If ``IPv6`` is enabled for outgoing queries using :ref:`setting-query-local-address`, the :program:`Recursor` will schedule an asynchronous task to resolve ``IPv6`` addresses of nameservers it did not otherwise learn.
+These addresses will then be used (in addition to ``IPv4`` addresses) for future queries to authoritative nameservers.
+This has the consequence that authoritative nameservers will be contacted over ``IPv6`` in more case than before.
+
+New Lua Configuration Functions
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+- The :func:`addAllowedAdditionalQType` ``Lua`` configuration function was added to make the :program:`Recursor` add additional records to answers for specific query types.
+- The :func:`addProxyMapping` ``Lua`` configuration function was added to map source addresses to alternative addresses.
+
+Post Resolve FFI Function
+^^^^^^^^^^^^^^^^^^^^^^^^^
+A new :func:`postresolve_ffi` Lua callback function has been introduced.
 
 New settings
 ^^^^^^^^^^^^
 - The :ref:`setting-save-parent-ns-set` setting has been introduced, enabling fallback cases if the parent ``NS`` set contains names not in the child ``NS`` set.
+- The :ref:`setting-max-busy-dot-probes` settings has been introduced, enabling the :program:`Recursor` probe for ``DoT`` support of authoritative servers.
+  This is an experimental function, use with care.
+
 
 4.6.1 to 4.6.2
 --------------