From: Josh Soref <2119212+jsoref@users.noreply.github.com> Date: Tue, 20 May 2025 13:35:22 +0000 (-0400) Subject: spelling: https X-Git-Tag: rec-5.3.0-alpha2~16^2~19 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=df5b7fd23b93e221c671bd7bf3c01dd085e240e4;p=thirdparty%2Fpdns.git spelling: https Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com> --- diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 641dfd2934..695fc1d6ec 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -69,7 +69,7 @@ plus various other directories with `regression-tests.*` names. ## Commit Guidelines * Tell why the change does what it does, not how it does it. * The first line should be short (preferably less than 50 characters) -* The rest of the commit body should be wrapped at 72 characters (see [this](http://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html) for more info) +* The rest of the commit body should be wrapped at 72 characters (see [this](https://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html) for more info) * If this commit fixes an issue, put "Closes #XXXX" in the message * Do not put whitespace fixes/cleanup and functionality changes in the same commit diff --git a/Docker-README.md b/Docker-README.md index 7bd94ad429..065703b238 100644 --- a/Docker-README.md +++ b/Docker-README.md @@ -78,4 +78,4 @@ args: ``` In the above example `/path/to/supervisord.conf` is the path where a configmap containing your supervisord configuration is mounted. -Further details about `supervisord` and how to configure it can be found here: http://supervisord.org/configuration.html +Further details about `supervisord` and how to configure it can be found here: https://supervisord.org/configuration.html diff --git a/README.md b/README.md index 5594817e99..0f4053de37 100644 --- a/README.md +++ b/README.md @@ -123,7 +123,7 @@ See [README-dnsdist.md](pdns/README-dnsdist.md) in `pdns/`. Building the HTML documentation ------------------------------- -The HTML documentation (as seen [on the PowerDNS docs site](https://doc.powerdns.com/authoritative/)) is built from ReStructured Text (rst) files located in `docs`. They are compiled into HTML files using [Sphinx](http://www.sphinx-doc.org/en/master/index.html), a documentation generator tool which is built in Python. +The HTML documentation (as seen [on the PowerDNS docs site](https://doc.powerdns.com/authoritative/)) is built from ReStructured Text (rst) files located in `docs`. They are compiled into HTML files using [Sphinx](https://www.sphinx-doc.org/en/master/index.html), a documentation generator tool which is built in Python. Install the dependencies under "COMPILING", and run autoreconf if you haven't already: diff --git a/build-scripts/docker/repo-test/README.md b/build-scripts/docker/repo-test/README.md index bf1d5a7893..ab11ee2e13 100644 --- a/build-scripts/docker/repo-test/README.md +++ b/build-scripts/docker/repo-test/README.md @@ -78,7 +78,7 @@ show the output from running the container even when `--verbose` is off - make error codes we get for building and running containers readable if we can find a lib for this; otherwise, it requires too much maintenance - - `errno` http://joeyh.name/code/moreutils/ + - `errno` https://joeyh.name/code/moreutils/ - parameter to test all the things! (this can currently easily done by a shell script / command) - `for RELEASE in auth-42 auth-43 auth-44 auth-master rec-42 rec-43 rec-44 rec-45 rec-master dnsdist-15 dnsdist-16 dnsdist-master; do ./generate-repo-files.py --test $RELEASE; done` diff --git a/docs/appendices/compiling.rst b/docs/appendices/compiling.rst index 02fb5de1a7..9d6e7fa0be 100644 --- a/docs/appendices/compiling.rst +++ b/docs/appendices/compiling.rst @@ -42,12 +42,12 @@ Furthermore, the Makefiles require GNU make, not BSD make. By default, the PowerDNS Authoritative Server requires the following libraries and headers: -* `Boost `_ 1.54 or newer +* `Boost `_ 1.54 or newer * `OpenSSL `_ To build from a Git repository clone, the following dependencies are also required: -* `ragel `_ +* `ragel `_ * `bison `_ * `flex `_ * `Python `_ 3.6 or newer, with the 'venv' package diff --git a/docs/backends/generic-mysql.rst b/docs/backends/generic-mysql.rst index 40f1487f32..3dfdd8ef62 100644 --- a/docs/backends/generic-mysql.rst +++ b/docs/backends/generic-mysql.rst @@ -61,7 +61,7 @@ To support ``NATIVE`` domains, the ``binlog_format`` for the MySQL/MariaDB replication **must** be set to ``MIXED`` or ``ROW`` to prevent differences in data between replicated servers. See `"Setting The Binary Log -Format" `__ +Format" `__ and `"Binary Log Formats" `__ for more information. diff --git a/docs/backends/generic-odbc.rst b/docs/backends/generic-odbc.rst index 29aabbccd1..1bdcffa045 100644 --- a/docs/backends/generic-odbc.rst +++ b/docs/backends/generic-odbc.rst @@ -21,7 +21,7 @@ Generic ODBC Backend The Generic ODBC Backend (godbc) is a child of the Generic SQL (gsql) backend, similar to the gmysql and gpgsql backends. It uses -`UnixODBC `__ and installed drivers to connect +`UnixODBC `__ and installed drivers to connect to the databases supported by said drivers. .. warning:: @@ -83,7 +83,7 @@ Connecting to Microsoft SQL Server least version 3.2.0 of UnixODBC. FreeDTS has been tested with versions 0.91 and 0.95. -Install the `FreeTDS `__ driver for UnixODBC, +Install the `FreeTDS `__ driver for UnixODBC, either by compiling or getting it from our distribution's repository and configure your ``/etc/odbcinst.ini`` with the driver, e.g.: diff --git a/docs/backends/generic-sqlite3.rst b/docs/backends/generic-sqlite3.rst index 635febf922..0c1f1bc80e 100644 --- a/docs/backends/generic-sqlite3.rst +++ b/docs/backends/generic-sqlite3.rst @@ -27,7 +27,7 @@ Generic SQLite 3 backend This backend retrieves all data from a SQLite database, which is an RDBMS that's embedded into the application itself, so you won't need to be running a separate server process. It also reduces overhead, and -simplifies installation. At `www.sqlite.org `__ +simplifies installation. At `www.sqlite.org `__ you can find more information about SQLite. As this is a generic backend, built on top of the gSql framework, you @@ -122,7 +122,7 @@ Compiling the SQLite backend Before you can begin compiling PowerDNS with the SQLite backend you need to have the SQLite utility and library installed on your system. You can -download these from http://www.sqlite.org/download.html, or you can use +download these from https://www.sqlite.org/download.html, or you can use packages (if your distribution provides those). When you've installed the library you can use: diff --git a/docs/backends/ldap.rst b/docs/backends/ldap.rst index e6859f9cc5..a0e3075296 100644 --- a/docs/backends/ldap.rst +++ b/docs/backends/ldap.rst @@ -489,7 +489,7 @@ Domains for PowerDNS are stored in the attribute "associatedDomain" whereas BIND stores them split in "relativeDomainName" and "zoneName". There is a `migration -script `__ which +script `__ which creates a file in LDIF format with the necessary LDAP updates including the "associatedDomain" and "dc" attributes. The utility is executed on the command line by: @@ -506,7 +506,7 @@ If "binddn" is given, the script will prompt for a password; otherwise, an anonymous bind is executed. The updates in LDIF format are written to stdout and can be redirected to a file. -The `script `__ +The `script `__ requires Perl and the Perl Net::LDAP module. Updating the entries in the LDAP tree requires to make the dnsdomain2 @@ -514,9 +514,9 @@ schema known to the LDAP server. Unfortunately, both schemas (dnsdomain2 and dnszone) share the same record types and use the same OIDs so the LDAP server can't use both schemas at the same time. The solution is to add the `dnsdomain2 -schema `__ and +schema `__ and replace the dnszone schema by the `dnszone-migrate -schema `__. +schema `__. After restarting the LDAP server attributes from both schemas can be used and updating the objects in the LDAP tree using the LDIF file generated from ``bind2pdns-ldap`` will work without errors. diff --git a/docs/backends/lmdb.rst b/docs/backends/lmdb.rst index 5f9106aedb..df42d7a993 100644 --- a/docs/backends/lmdb.rst +++ b/docs/backends/lmdb.rst @@ -41,7 +41,7 @@ Path to the LMDB file (e.g. */var/lib/powerdns/pdns.lmdb*) .. warning:: On systemd systems, - When running PowerDNS via the provided systemd service file, `ProtectSystem `_ is set to ``full``, this means PowerDNS is unable to write to e.g. ``/etc`` and ``/home``, possibly being unable to write to the LMDB database. + When running PowerDNS via the provided systemd service file, `ProtectSystem `_ is set to ``full``, this means PowerDNS is unable to write to e.g. ``/etc`` and ``/home``, possibly being unable to write to the LMDB database. .. _setting-lmdb-shards: diff --git a/docs/backends/remote.rst b/docs/backends/remote.rst index 38c6b02433..902cad57e8 100644 --- a/docs/backends/remote.rst +++ b/docs/backends/remote.rst @@ -119,7 +119,7 @@ parameters: endpoint, timeout (default 2000ms) remote-connection-string=zeromq:endpoint=ipc:///tmp/tmp.sock 0MQ connector implements a REQ/REP RPC model. Please see -http://zeromq.org/ for more information. +https://zeromq.org/ for more information. .. _remote-api: diff --git a/docs/backends/tinydns.rst b/docs/backends/tinydns.rst index b000f13538..933d58855c 100644 --- a/docs/backends/tinydns.rst +++ b/docs/backends/tinydns.rst @@ -138,13 +138,13 @@ Useful implementation Notes This backend might solve some issues you have with the current tinydns noted on `Jonathan de Boyne -Pollard's `__ +Pollard's `__ `djbdns known problems -page `__. +page `__. The ``data.cdb`` file format support all types of records. They are sometimes difficult to create because you need to specify the actual -content of the rdata. `Tinydns.org `__ provides a +content of the rdata. `Tinydns.org `__ provides a number of links to tools/cgi-scripts that allow you to create records. `Anders Brownworth `__ also provides a number of useful record building scripts on his @@ -163,4 +163,4 @@ suite `__. www.example.com A 198.51.100.1 Compiling the TinyDNS backend requires you to have -`tinycdb `__ version 0.77. +`tinycdb `__ version 0.77. diff --git a/docs/changelog/4.0.rst b/docs/changelog/4.0.rst index 367641e8b4..7685af212a 100644 --- a/docs/changelog/4.0.rst +++ b/docs/changelog/4.0.rst @@ -314,7 +314,7 @@ Released July 29th 2016 This release fixes two small issues and adds a setting to limit AXFR and IXFR sizes, in response to -`CVE-2016-6172 `__. +`CVE-2016-6172 `__. Bug fixes ~~~~~~~~~ @@ -367,7 +367,7 @@ As part of the general cleanup and improvements, we did the following: - Moved to C++ 2011, a cleaner more powerful version of C++ that has allowed us to `improve the quality of - implementation `__ + implementation `__ in many places. - Implemented dedicated infrastructure for dealing with DNS names that is fully "DNS Native" and needs less escaping and unescaping. diff --git a/docs/changelog/pre-4.0.rst b/docs/changelog/pre-4.0.rst index 905b0992c3..ba6f42e8e6 100644 --- a/docs/changelog/pre-4.0.rst +++ b/docs/changelog/pre-4.0.rst @@ -40,7 +40,7 @@ This is a small bugfix release. Additionally, the deb/RPM packages on downloads.powerdns.com (those with -static in the name) for 3.4.8 have been built against Botan 1.10.11 instead of Botan 1.10.3 like previous packages. Please see `the Botan Security -page `__ for more information +page `__ for more information on the fixes in Botan 1.10.11. As a PowerDNS user, these issues only affect you if you ran our -static packages *and* allowed your users to upload private keys to your configuration. @@ -988,7 +988,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ Changes since 3.3 ^^^^^^^^^^^^^^^^^ @@ -1036,7 +1036,7 @@ Changes since 3.3 dfd1b82 `__). - Build fixes for platforms with 'weird' types (like s390/s390x): `commit c669f7c `__ - (`details `__), + (`details `__), `commit 07b904e `__ and `commit 2400764 `__. @@ -1113,7 +1113,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ Changes between RC2 and final ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ @@ -1490,7 +1490,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ - `additional third-party builds `__ @@ -1958,7 +1958,7 @@ Downloads - `Official download page `__ - `CentOS/RHEL 5/6 - RPMs `__ + RPMs `__ kindly provided by Kees Monshouwer. - `Additional packages `__ @@ -2436,11 +2436,11 @@ achieving high levels of security. PowerDNS Authoritative Server 3.0 development has been made possible by the financial and moral support of -- `AFNIC, the French registry `__ +- `AFNIC, the French registry `__ - `IPCom's RcodeZero Anycast DNS `__, a subsidiary of NIC.AT, the Austrian registry -- `SIDN, the Dutch registry `__ +- `SIDN, the Dutch registry `__ This release has received exceptional levels of community support, and we'd like to thank the following people in addition to those mentioned @@ -3105,19 +3105,19 @@ release of the PowerDNS Authoritative Server will be called 3.0. This release would not have been possible without large amounts of help and support from the PowerDNS Community. We specifically want to thank -Massimo Bandinelli of Italy's `Register.it `__, +Massimo Bandinelli of Italy's `Register.it `__, `Dave Aaldering of Aaldering ICT `__, `True -BV `__, `XS4ALL `__, Daniel Bilik -of `Neosystem `__, -`EasyDNS `__, `Heinrich -Ruthensteiner `__ of Siemens, `Augie -Schwer `__, `Mark -Bergsma `__, `Marco +BV `__, `XS4ALL `__, Daniel Bilik +of `Neosystem `__, +`EasyDNS `__, `Heinrich +Ruthensteiner `__ of Siemens, `Augie +Schwer `__, `Mark +Bergsma `__, `Marco Davids `__, `Marcus Rueckert of -OpenSUSE `__, Andre Muraro of -`Locaweb `__, Antony Lesuisse, `Norbert -Sendetzky `__, `Marco -Chiavacci `__, Christoph Haas, Ralf van der Enden +OpenSUSE `__, Andre Muraro of +`Locaweb `__, Antony Lesuisse, `Norbert +Sendetzky `__, `Marco +Chiavacci `__, Christoph Haas, Ralf van der Enden and Ruben Kerkhof. Security issues @@ -3233,12 +3233,12 @@ Bugs Features ^^^^^^^^ -- Thanks to `EasyDNS `__, PowerDNS now supports +- Thanks to `EasyDNS `__, PowerDNS now supports multiple masters per domain. For configuration details, see `Slave operation <../modes-of-operation.rst#slave-operation>`__. Implemented in `commit e5b11b2f2754b3c0c5193f0a692350342381addb `__, `commit 4232a932d733711c74a7e30b28fca755f9722d9f `__. -- Thanks to `EasyDNS `__, PowerDNS now supports +- Thanks to `EasyDNS `__, PowerDNS now supports the KEY record type, as well the SPF record. In `commit 4b5762f1f096b0fdb741ad6d630ccd831910ad35 `__. - Added support for CERT, SSHFP, DNSKEY, DS, NSEC, RRSIG record types, as part of the move to the new DNS parsing/generating code. @@ -3315,11 +3315,11 @@ Released the 15th of March 2006 Besides adding OpenDBX, this release is mostly about fixing problems and speeding up the recursor. This release has been made possible by -`XS4ALL `__ and `True `__. Thanks! +`XS4ALL `__ and `True `__. Thanks! Furthermore, we are very grateful for the help of Andrew Pinski, who hacks on gcc, and of Joaquín M López Muñoz, the author of -`boost::multi\_index\_container `__. +`boost::multi\_index\_container `__. Without their near-realtime help this release would've been delayed a lot. Thanks! @@ -3369,7 +3369,7 @@ Improvements to the recursor - `commit 0bb34eb126cc8512b69099d0c7a525ff64499575 `__ and `commit 90a5cfe2b52e1724dc3b428d2cfc7ef427f6e5a8 `__ work around gcc bug - `24704 `__ if + `24704 `__ if requested, which speeds up the recursor a lot, but involves a dirty hack. Enable with **./configure ^^enable-gcc-skip-locking**. No guarantees! @@ -3393,7 +3393,7 @@ Bugs fixed in the authoritative nameserver 62 `__. - Referrals were subtly broken by recent CNAME/Wildcard improvements, fixed in `commit 95f0df4542f6abf2ffbdc92da9cc3e56bd9e1253 `__. Fix - and other improvements sponsored by `True `__. + and other improvements sponsored by `True `__. - PowerDNS would try to insert records it has no knowledge about in slave zones, which did not work. Reported in `ticket 60 `__, fixed in `commit 02b37061fea43ed29fc972bc24374bf858853a03 `__. A @@ -3434,7 +3434,7 @@ Miscellaneous `commit a0dbd4ce64427e3232e321cbe0f349ccca864d87 `__. - PowerDNS now reports if it is running in 32 or 64 bit mode, useful for bi-arch users that need to know if they are benefiting from - `AMD's great processor `__. `commit 22c012a8251c54e95e8b08aed06eae830ff0a448 `__. + `AMD's great processor `__. `commit 22c012a8251c54e95e8b08aed06eae830ff0a448 `__. - **dnsscope** compiles again, `commit 1a21c2a52be8b787196e7f2532f1c10d28cb973e `__, `commit d5ad413a3069181834c4188e0787d8d14cb7982c `__ (FreeBSD 64-bit time\_t). @@ -3485,7 +3485,7 @@ The code is also shorter. This release fixes a number of embarrassing bugs and is a recommended upgrade. -Thanks are due to `XS4ALL `__ who are supporting +Thanks are due to `XS4ALL `__ who are supporting continuing development of PowerDNS, the fruits of which can be found in this release already. Furthermore, a remarkable number of people have helped report bugs, validate solutions or have submitted entire patches. @@ -3502,7 +3502,7 @@ Improvements recursor deployments have too much traffic for this to be useful. - PowerDNS recursor is now able to read its root-hints from disk, which is useful to operate with alternate roots, like the `Open Root Server - Network `__. See `PowerDNS + Network `__. See `PowerDNS Recursor `__. - PowerDNS can now send out old-fashioned root-referrals when queried for domains for which it is not authoritative. Wastes some bandwidth @@ -3580,13 +3580,13 @@ Released on the 16th of July 2005. The '8 million domains' release, which also marks the battle readiness of the PowerDNS Recursor. The latest improvements have been made possible by financial support and contributions by -`Register.com `__ and -`XS4ALL `__. Thanks! +`Register.com `__ and +`XS4ALL `__. Thanks! This release brings a number of new features (vastly improved recursor, Generic Oracle Support, DNS analysis and replay tools, and more) but also has a new build dependency, the `Boost -library `__ (version 1.31 or higher). +library `__ (version 1.31 or higher). Currently several big ISPs are evaluating the PowerDNS recursor for their resolving needs, some of them have switched already. In the course @@ -4000,7 +4000,7 @@ New features - ^^version command (requested by Mike Benoit) - delegation-only, a Verisign special. -- Generic `SQLite `__ support, by Michel 'Who da +- Generic `SQLite `__ support, by Michel 'Who da man?' Stol. See `Generic SQLite backend <../backends/generic-sqlite3.rst>`__. - init.d script for pdns\_recursor @@ -4787,7 +4787,7 @@ performance switches may appear in ^^help output but you are advised to stay away from these. Developers: this version needs the pdns-2.5.1 development kit, available -on http://downloads.powerdns.com/releases/dev. See also `Backend +on https://downloads.powerdns.com/releases/dev. See also `Backend writers' guide <../appendices/backend-writers-guide.rst>`__. Performance @@ -4837,7 +4837,7 @@ bag `__ release fixing a huge memory leak in the new Query Cache. Developers: this version needs the new pdns-2.5.1 development kit, -available on http://downloads.powerdns.com/releases/dev. See also +available on https://downloads.powerdns.com/releases/dev. See also `Backend writers' guide <../appendices/backend-writers-guide.rst>`__. And some small changes @@ -4952,7 +4952,7 @@ Version 2.4 ----------- Developers: this version is compatible with the pdns-2.1 development -kit, available on http://downloads.powerdns.com/releases/dev. See also +kit, available on https://downloads.powerdns.com/releases/dev. See also `*Backend writers' guide* <../appendices/backend-writers-guide.rst>`__. This version fixes some stability issues with malformed or malcrafted @@ -4999,7 +4999,7 @@ Version 2.3 ----------- Developers: this version is compatible with the pdns-2.1 development -kit, available on http://downloads.powerdns.com/releases/dev. See also +kit, available on https://downloads.powerdns.com/releases/dev. See also `Backend writers' guide <../appendices/backend-writers-guide.rst>`__ This release adds the Generic MySQL backend which allows full @@ -5041,7 +5041,7 @@ Version 2.2 ----------- Developers: this version is compatible with the pdns-2.1 development -kit, available on http://downloads.powerdns.com/releases/dev. See also +kit, available on https://downloads.powerdns.com/releases/dev. See also `Backend writers' guide <../appendices/backend-writers-guide.rst>`__ Again a big release. PowerDNS is seeing some larger deployments in more @@ -5101,7 +5101,7 @@ recursing backend under most circumstances. Old behaviour can be restored by turning **lazy-recursion** off. Developers: this version has a new pdns-2.1 development kit, available -on http://downloads.powerdns.com/releases/dev. See also `Backend +on https://downloads.powerdns.com/releases/dev. See also `Backend writers' guide <../appendices/backend-writers-guide.rst>`__. **Warning**: Most users will run a static version of PowerDNS which has diff --git a/docs/dnssec/profile.rst b/docs/dnssec/profile.rst index dbe94322ec..31038e4518 100644 --- a/docs/dnssec/profile.rst +++ b/docs/dnssec/profile.rst @@ -20,7 +20,7 @@ Supported Algorithms -------------------- Supported Algorithms (See the `IANA -website `__ +website `__ for more information): - RSASHA1 (algorithm 5, algorithm 7) @@ -31,7 +31,7 @@ for more information): - ed448 (algorithm 16) For the DS records, these `digest -types `__ +types `__ are supported: - SHA-1 (algorithm 1) diff --git a/docs/domainmetadata.rst b/docs/domainmetadata.rst index 5a54ba0962..98af7cf0bd 100644 --- a/docs/domainmetadata.rst +++ b/docs/domainmetadata.rst @@ -179,7 +179,7 @@ To publish CDNSKEY records of the KSKs for the zone, set To publish CDS records for the KSKs in the zone, set ``PUBLISH-CDS`` to a comma- separated list of `signature algorithm -numbers `__. +numbers `__. This metadata can also be set using the :doc:`pdnsutil ` commands ``set-publish-cdnskey`` diff --git a/docs/guides/recursion.rst b/docs/guides/recursion.rst index a12fc958f1..8f747fd1f5 100644 --- a/docs/guides/recursion.rst +++ b/docs/guides/recursion.rst @@ -103,7 +103,7 @@ Scenario 2: Authoritative Server as Recursor for clients and serving public doma The best way to "migrate" in this scenario is to separate the recursive service fully from the Authoritative Server. See `Dan Bernstein's -article `__ on this topic. +article `__ on this topic. If this is not possible, this migration guide will maintain the functionality of the existing installation while allowing to upgrade. diff --git a/docs/installation.rst b/docs/installation.rst index 9f8bc4b182..b584303be3 100644 --- a/docs/installation.rst +++ b/docs/installation.rst @@ -55,7 +55,7 @@ FreeBSD ~~~~~~~ PowerDNS Authoritative Server is available through the -`ports `__ system: +`ports `__ system: For the package: diff --git a/docs/modes-of-operation.rst b/docs/modes-of-operation.rst index 3b4b350eb4..cbf013dc90 100644 --- a/docs/modes-of-operation.rst +++ b/docs/modes-of-operation.rst @@ -147,7 +147,7 @@ respective domain to allow immediate freshness checks for this domain. .. note:: When running PowerDNS via the provided systemd service file, - `ProtectSystem `_ + `ProtectSystem `_ is set to ``full``, this means PowerDNS is unable to write to e.g. ``/etc`` and ``/home``, possibly being unable to write AXFR'd zones. diff --git a/docs/security-advisories/powerdns-advisory-2012-01.rst b/docs/security-advisories/powerdns-advisory-2012-01.rst index ef913e89d2..069ff614b8 100644 --- a/docs/security-advisories/powerdns-advisory-2012-01.rst +++ b/docs/security-advisories/powerdns-advisory-2012-01.rst @@ -50,7 +50,7 @@ available for your system. Tarballs and new static builds (32/64bit, RPM/DEB) of 2.9.22.5 and 3.0.1 have been uploaded to `our download site `__. Kees Monshouwer has provided updated CentOS/RHEL packages in `his -repository `__. Debian, +repository `__. Debian, Fedora and SuSE should have packages available shortly after this announcement. diff --git a/docs/security-advisories/powerdns-advisory-2015-01.rst b/docs/security-advisories/powerdns-advisory-2015-01.rst index 190caf4cf1..39ed886d56 100644 --- a/docs/security-advisories/powerdns-advisory-2015-01.rst +++ b/docs/security-advisories/powerdns-advisory-2015-01.rst @@ -54,5 +54,5 @@ original fix was insufficient in some cases. Updated versions of the Authoritative Server and Recursor `were released <../changelog/pre-4.0.rst#powerdns-recursor-364>`__ on the 9th of June. Minimal patches are -`available `__. The +`available `__. The insufficient fix was assigned CVE-2015-5470. diff --git a/pdns/dnsdistdist/docs/advanced/ebpf.rst b/pdns/dnsdistdist/docs/advanced/ebpf.rst index f82eea95f3..5f41a866f2 100644 --- a/pdns/dnsdistdist/docs/advanced/ebpf.rst +++ b/pdns/dnsdistdist/docs/advanced/ebpf.rst @@ -1,7 +1,7 @@ eBPF Socket Filtering ===================== -:program:`dnsdist` can use `eBPF `_ socket filtering on recent Linux kernels (4.1+) built with eBPF support (``CONFIG_BPF``, ``CONFIG_BPF_SYSCALL``, ideally ``CONFIG_BPF_JIT``). It requires dnsdist to have the ``CAP_SYS_ADMIN`` capabilities at startup. +:program:`dnsdist` can use `eBPF `_ socket filtering on recent Linux kernels (4.1+) built with eBPF support (``CONFIG_BPF``, ``CONFIG_BPF_SYSCALL``, ideally ``CONFIG_BPF_JIT``). It requires dnsdist to have the ``CAP_SYS_ADMIN`` capabilities at startup. .. note:: To retain the required capability, ``CAP_SYS_ADMIN``, it is necessary to call :func:`addCapabilitiesToRetain` during startup, as :program:`dnsdist` drops capabilities after startup. diff --git a/pdns/dnsdistdist/docs/guides/dns-over-https.rst b/pdns/dnsdistdist/docs/guides/dns-over-https.rst index 2b8a015b7f..a907552d17 100644 --- a/pdns/dnsdistdist/docs/guides/dns-over-https.rst +++ b/pdns/dnsdistdist/docs/guides/dns-over-https.rst @@ -94,7 +94,7 @@ preferred library for incoming DoH support, because ``h2o`` has unfortunately re does not. This is not an issue for actual DNS over HTTPS clients that support HTTP/2, but might be one in setups running dnsdist behind a reverse-proxy that does not support HTTP/2, like nginx. We do not plan on implementing HTTP/1, and recommend using HTTP/2 between the reverse-proxy and dnsdist for performance reasons. -For nginx in particular, a possible work-around is to use the `grpc_pass `_ directive as suggested in their `bug tracker `_ e.g.:: +For nginx in particular, a possible work-around is to use the `grpc_pass `_ directive as suggested in their `bug tracker `_ e.g.:: location /dns-query { set $upstream_app dnsdist; diff --git a/pdns/dnsdistdist/docs/index.rst b/pdns/dnsdistdist/docs/index.rst index 8bc1eb7410..13ca4a2402 100644 --- a/pdns/dnsdistdist/docs/index.rst +++ b/pdns/dnsdistdist/docs/index.rst @@ -7,7 +7,7 @@ Its goal in life is to route traffic to the best server, delivering top performa :program:`dnsdist` is dynamic, its configuration can be changed at runtime via a :doc:`console-like interface `. It exposes :doc:`metrics ` that can be exported via Carbon, Prometheus, an HTTP API and the console. -Until 2.0.0 the configuration was written in `Lua `_, but it is now possible to write the configuration in :doc:`yaml ` as well. +Until 2.0.0 the configuration was written in `Lua `_, but it is now possible to write the configuration in :doc:`yaml ` as well. A configuration to balance DNS queries to several backend servers: diff --git a/pdns/dnsdistdist/docs/install.rst b/pdns/dnsdistdist/docs/install.rst index 3082a6034a..498c42487e 100644 --- a/pdns/dnsdistdist/docs/install.rst +++ b/pdns/dnsdistdist/docs/install.rst @@ -37,7 +37,7 @@ For Red Hat, CentOS and its derivatives, dnsdist is available in `EPEL `_. +dnsdist is also available in `FreeBSD ports `_. Installing from Source ---------------------- @@ -45,9 +45,9 @@ Installing from Source In order to compile dnsdist, a modern compiler with C++ 2017 support, a Python 3 interpreter with the ``YAML`` module, and either GNU make or ``meson`` with ``ninja`` are required. dnsdist depends on the following libraries: -* `Boost `_ -* `Lua `_ 5.1+ or `LuaJit `_ -* `Editline (libedit) `_ +* `Boost `_ +* `Lua `_ 5.1+ or `LuaJit `_ +* `Editline (libedit) `_ * `libfstrm `_ (optional, dnstap support) * `GnuTLS `_ (optional, DoT and DoH support) * `hostname from Inetutils `_ @@ -57,7 +57,7 @@ dnsdist depends on the following libraries: * `libh2o `_ (optional, incoming DoH support, deprecated in 1.9.0 in favor of ``nghttp2``) * `libsodium `_ (optional, DNSCrypt support) * `LMDB `_ (optional, LMDB support) -* `net-snmp `_ (optional, SNMP support) +* `net-snmp `_ (optional, SNMP support) * `nghttp2 `_ (optional, DoH support) * `OpenSSL `_ (optional, DoT and DoH support) * `Quiche `_ (optional, incoming DoQ and DoH3 support) @@ -100,9 +100,9 @@ From git To compile from git, these additional dependencies are required: -* GNU `Autoconf `_ +* GNU `Autoconf `_ * GNU `Automake `_ -* `Ragel `_ +* `Ragel `_ dnsdist source code lives in the `PowerDNS git repository `_ but is independent of PowerDNS. diff --git a/pdns/dnsdistdist/docs/reference/dnstap.rst b/pdns/dnsdistdist/docs/reference/dnstap.rst index d67fcf3977..4b64c67969 100644 --- a/pdns/dnsdistdist/docs/reference/dnstap.rst +++ b/pdns/dnsdistdist/docs/reference/dnstap.rst @@ -1,7 +1,7 @@ dnstap Logging Reference ======================== -`dnstap `__ is a flexible, structured binary log format for DNS software. +`dnstap `__ is a flexible, structured binary log format for DNS software. Reader implementations in various languages exist. :program:`dnsdist` supports dnstap since version 1.3.0. diff --git a/pdns/recursordist/docs/appendices/compiling.rst b/pdns/recursordist/docs/appendices/compiling.rst index 4a8299fdaf..a73b647eea 100644 --- a/pdns/recursordist/docs/appendices/compiling.rst +++ b/pdns/recursordist/docs/appendices/compiling.rst @@ -45,8 +45,8 @@ Starting with version 5, a Rust compiler is needed. By default, the :program:`Recursor` requires the following libraries and headers: -* `Boost `_ 1.54 or newer -* `Lua `_ 5.1+ or `LuaJit `_ +* `Boost `_ 1.54 or newer +* `Lua `_ 5.1+ or `LuaJit `_ * `OpenSSL `_ * For :program:`Recursor` version 5 and higher, `cargo `_ version 1.64 or newer. diff --git a/pdns/recursordist/docs/appendices/internals.rst b/pdns/recursordist/docs/appendices/internals.rst index 2de838d722..67dc22dd8f 100644 --- a/pdns/recursordist/docs/appendices/internals.rst +++ b/pdns/recursordist/docs/appendices/internals.rst @@ -187,9 +187,9 @@ C++ is a powerful language. Perhaps a bit too powerful at times, you can turn a program into a real freakshow if you so desire. PowerDNS generally tries not to go overboard in this respect, but we do -build upon a very advanced part of the `Boost `__ +build upon a very advanced part of the `Boost `__ C++ library: `boost::multi index -container `__. +container `__. This container provides the equivalent of SQL indexes on multiple keys. It also implements compound keys, which PowerDNS uses as well. diff --git a/pdns/recursordist/docs/changelog/4.0.rst b/pdns/recursordist/docs/changelog/4.0.rst index 85cc400da5..c738bbb299 100644 --- a/pdns/recursordist/docs/changelog/4.0.rst +++ b/pdns/recursordist/docs/changelog/4.0.rst @@ -206,7 +206,7 @@ Additions and Enhancements and `commit 7abbb2c `__: Update Ed25519 `algorithm number and - mnemonic `__ + mnemonic `__ and hook up to the Recursor (Kees Monshouwer) - `#5355 `__: Add ``use-incoming-edns-subnet`` option to process and pass along ECS and diff --git a/pdns/recursordist/docs/changelog/pre-4.0.rst b/pdns/recursordist/docs/changelog/pre-4.0.rst index 476b9b85e9..c30788a7fb 100644 --- a/pdns/recursordist/docs/changelog/pre-4.0.rst +++ b/pdns/recursordist/docs/changelog/pre-4.0.rst @@ -484,7 +484,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ Changes since 3.5.2 ^^^^^^^^^^^^^^^^^^^ @@ -521,7 +521,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ Changes since 3.5.1 ^^^^^^^^^^^^^^^^^^^ @@ -550,7 +550,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ Changes since 3.5 ^^^^^^^^^^^^^^^^^ @@ -586,7 +586,7 @@ Downloads - `Official download page `__ - `native RHEL5/6 packages from Kees - Monshouwer `__ + Monshouwer `__ Changes between RC5 and the final 3.5 release ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ @@ -652,7 +652,7 @@ Changes between RC1 and RC2 This was fixed in `commit 3085 `__. This should also close the slightly bogus - `CVE-2012-1193 `__. + `CVE-2012-1193 `__. Closes `ticket 668 `__. - The auth-can-lower-ttl flag was removed, as it did not have any effect in most situations, and thus did not operate as advertised. We @@ -1430,7 +1430,7 @@ enough to justify a quick upgrade. DNS-hierarchy, like 'juniper.net'. This issue was fixed rapidly because of the help of - `XS4ALL `__ (Eric Veldhuyzen, Kai Storbeck), + `XS4ALL `__ (Eric Veldhuyzen, Kai Storbeck), Brad Dameron and Kees Monshouwer. Fix in `commit 1178 `__. @@ -2144,7 +2144,7 @@ PowerDNS, as it is a Better Internet Nameserver Daemon. Some more information, based on a previous version of PowerDNS, can be found on the `PowerDNS development -blog `__. +blog `__. **Warning**: Because of recent DNS based denial of service attacks, running an open recursor has become a security risk. Therefore, unless @@ -2178,6 +2178,6 @@ Important new features of the PowerDNS recursor 3.0 Many people helped package and test this release. Jorn Ekkelenkamp of ISP-Services helped find the '8000 SOAs' bug and spotted many other -oddities and `XS4ALL `__ internet funded a lot of +oddities and `XS4ALL `__ internet funded a lot of the recent development. Joaquín M López Muñoz of the boost::multi\_index\_container was again of great help. diff --git a/pdns/recursordist/docs/index.rst b/pdns/recursordist/docs/index.rst index 0ed53663fd..e90aed46d9 100644 --- a/pdns/recursordist/docs/index.rst +++ b/pdns/recursordist/docs/index.rst @@ -25,7 +25,7 @@ Notable features - Very fast, and contains innovative query-throttling code to save time talking to obsolete or broken nameservers. - Code is written linearly, sequentially, which means that there are no problems with 'query restart' or anything. - Does DNSSEC validation -- Is highly scriptable in `Lua `_ +- Is highly scriptable in `Lua `_ Getting support --------------- diff --git a/pdns/recursordist/docs/lua-scripting/index.rst b/pdns/recursordist/docs/lua-scripting/index.rst index b15bed8a4a..65159141db 100644 --- a/pdns/recursordist/docs/lua-scripting/index.rst +++ b/pdns/recursordist/docs/lua-scripting/index.rst @@ -1,14 +1,14 @@ Scripting PowerDNS Recursor =========================== -In the PowerDNS Recursor, it is possible to modify resolving behaviour using simple scripts written in the `Lua `_ programming language. +In the PowerDNS Recursor, it is possible to modify resolving behaviour using simple scripts written in the `Lua `_ programming language. Lua scripts can be used for load balancing, legal reasons, commercial purposes, to quickly block dangerous domains or override problematic responses. Because Lua is extremely fast and lightweight, it easily supports hundreds of thousands of queries per second. -The Lua language is explained very well in the excellent book `Programming in Lua `_. -If you already have programming experience, `Learn Lua in 15 Minutes `_ is a great primer. +The Lua language is explained very well in the excellent book `Programming in Lua `_. +If you already have programming experience, `Learn Lua in 15 Minutes `_ is a great primer. -For extra performance, a Just In Time compiled version of Lua called `LuaJIT `_ is supported. +For extra performance, a Just In Time compiled version of Lua called `LuaJIT `_ is supported. .. note:: PowerDNS Recursor is capable of handling many queries simultaneously using cooperative user space multi-threading. diff --git a/pdns/recursordist/docs/nod_udr.rst b/pdns/recursordist/docs/nod_udr.rst index a12139a222..e661ab125e 100644 --- a/pdns/recursordist/docs/nod_udr.rst +++ b/pdns/recursordist/docs/nod_udr.rst @@ -9,7 +9,7 @@ Deciding whether a domain is truly a new domain would involve deterministic meth A simple method to determine a candidate domain would simply be to check if the domain was not in the recursor cache; indeed this is a method used by many security researchers. However, while that does produce a smaller list of candidate domains, cache misses are still relatively common, particularly in deployments where techniques such as EDNS client-subnet are used. -Therefore, a feature has been developed for the recursor which uses probabilistic data structures (specifically a Stable Bloom Filter (SBF): [http://webdocs.cs.ualberta.ca/~drafiei/papers/DupDet06Sigmod.pdf]). This recursor feature is named "Newly Observed Domain" or "NOD" for short. +Therefore, a feature has been developed for the recursor which uses probabilistic data structures (specifically a Stable Bloom Filter (SBF): [https://webdocs.cs.ualberta.ca/~drafiei/papers/DupDet06Sigmod.pdf]). This recursor feature is named "Newly Observed Domain" or "NOD" for short. The use of a probabilistic data structure means that the memory and CPU usage for the NOD feature is minimal, however it does mean that there can be false positives (a domain flagged as new when it is not), and false negatives (a domain that is new is not detected). The size of the SBF data structure can be tuned to reduce the FP/FN rate, although it is created with a default size (67108864 cells) that should provide a reasonably low FP/FN rate. To configure a different size use the :ref:`setting-yaml-nod.db_size` setting to specify a higher or lower cell count. Each cell consumes 1-bit of RAM (per recursor thread) and 1-byte of disk space. diff --git a/pdns/recursordist/docs/security-advisories/powerdns-advisory-2008-01.rst b/pdns/recursordist/docs/security-advisories/powerdns-advisory-2008-01.rst index 195b9835f7..36addd1362 100644 --- a/pdns/recursordist/docs/security-advisories/powerdns-advisory-2008-01.rst +++ b/pdns/recursordist/docs/security-advisories/powerdns-advisory-2008-01.rst @@ -29,7 +29,7 @@ Details can be found on `this Trusteer page `__. This security problem was announced in `this email -message `__. +message `__. It is recommended that all users of the PowerDNS Recursor upgrade to 3.1.5 as soon as practicable, while we simultaneously note that busy diff --git a/pdns/recursordist/docs/security-advisories/powerdns-advisory-2014-02.rst b/pdns/recursordist/docs/security-advisories/powerdns-advisory-2014-02.rst index 70117f069f..c71be45ab4 100644 --- a/pdns/recursordist/docs/security-advisories/powerdns-advisory-2014-02.rst +++ b/pdns/recursordist/docs/security-advisories/powerdns-advisory-2014-02.rst @@ -3,7 +3,7 @@ PowerDNS Security Advisory 2014-02: PowerDNS Recursor 3.6.1 and earlier can be m - CVE: CVE-2014-8601 - Date: 8th of December 2014 -- Credit: Florian Maury (`ANSSI `__) +- Credit: Florian Maury (`ANSSI `__) - Affects: PowerDNS Recursor versions 3.6.1 and earlier - Not affected: PowerDNS Recursor 3.6.2; no versions of PowerDNS Authoritative Server diff --git a/regression-tests/README.md b/regression-tests/README.md index 9b7bd7023e..2c1747ac3c 100644 --- a/regression-tests/README.md +++ b/regression-tests/README.md @@ -5,7 +5,7 @@ Dependencies ------------ We need very recent versions of: - * validns (http://www.validns.net/) + * validns (https://www.validns.net/) * ldns-verify-zone (part of ldns) * jdnssec-verifyzone (https://github.com/dblacka/jdnssec-tools) * named-checkzone (part of BIND9)