]>
git.ipfire.org Git - thirdparty/pdns.git/log
Costy Petrisor [Thu, 9 Jan 2020 10:56:16 +0000 (10:56 +0000)]
parsing `dont-throttle-names` and `dont-throttle-netmasks` as comma separated lists
Otto Moerbeek [Tue, 7 Jan 2020 13:31:42 +0000 (14:31 +0100)]
Merge pull request #8647 from omoerbeek/rec-more-max-qperq
rec: Bump max-qperq default to 60
Otto Moerbeek [Tue, 7 Jan 2020 11:31:22 +0000 (12:31 +0100)]
correct cast
Co-Authored-By: Remi Gacogne <rgacogne@users.noreply.github.com>
Otto Moerbeek [Tue, 7 Jan 2020 11:23:09 +0000 (12:23 +0100)]
Merge pull request #8639 from captainark/rec-postinst
rec: debian postinst / do not fail on user creation if it already exists
Otto Moerbeek [Tue, 7 Jan 2020 11:13:01 +0000 (12:13 +0100)]
Slightly different approach as suggested by rgacogne: if
qname-minimization is active, force maxqperq to be >= 100.
Otto Moerbeek [Tue, 7 Jan 2020 09:28:40 +0000 (10:28 +0100)]
Merge pull request #8640 from tjikkun/gcc10
Fix build with gcc-10
Otto Moerbeek [Tue, 7 Jan 2020 09:27:17 +0000 (10:27 +0100)]
Merge pull request #8672 from omoerbeek/sdig-stdin-is-define
sdig: Fix compilation on OpenBSD where stdin is a define
Remi Gacogne [Tue, 7 Jan 2020 09:24:54 +0000 (10:24 +0100)]
Merge pull request #8671 from omoerbeek/backport-8632-to-rec-4.3.x
rec: backport to 4.3.x: dnsdist: Require Python libnacl < 1.7
Otto Moerbeek [Tue, 7 Jan 2020 09:24:18 +0000 (10:24 +0100)]
Fix compilation on OpenBSD where stdin is a define
Remi Gacogne [Fri, 13 Dec 2019 10:16:20 +0000 (11:16 +0100)]
dnsdist: Require Python libnacl < 1.7
Otherwise we need libsodium >= 1.0.12 (required by this change:
https://github.com/saltstack/libnacl/commit/
8c8b2f8bc05a5b67f39acf9a6bc0bef6fa839166
) and we don't have it in Trusty, which we still use in Travis.
(cherry picked from commit
1f474f69cc45af37646513618badd7bfa06741fd )
Otto Moerbeek [Tue, 7 Jan 2020 07:35:24 +0000 (08:35 +0100)]
Set default maxqperq to 60, and allow for extra if qname-minimization is on.
Remi Gacogne [Mon, 6 Jan 2020 16:14:32 +0000 (17:14 +0100)]
Merge pull request #8567 from rgacogne/ddist-bounded-chash
dnsdist: Add bounded loads to the consistent hashing policy
Otto Moerbeek [Mon, 6 Jan 2020 16:07:08 +0000 (17:07 +0100)]
Merge pull request #8667 from omoerbeek/rec-unittest-for-pr-8648
rec: Introduce test for PR 8648.
Otto Moerbeek [Mon, 6 Jan 2020 14:04:25 +0000 (15:04 +0100)]
Introduce test for PR 8648.
While there, explicitly init qname-minimization in test-syncres to
false. The current code gave the impression it was turned on by
default for unit tests. We have a lot of test that count queries,
and that is highly depedent on qname minimization being on or off.
Remi Gacogne [Mon, 6 Jan 2020 08:55:20 +0000 (09:55 +0100)]
Merge pull request #8654 from phonedph1/logresp
dnsdist: LogResponseAction
Remi Gacogne [Mon, 6 Jan 2020 08:54:08 +0000 (09:54 +0100)]
Merge pull request #8650 from spheron1/master
Fix trusted-notification-proxy port
Remi Gacogne [Mon, 6 Jan 2020 08:53:43 +0000 (09:53 +0100)]
Merge pull request #8658 from rgacogne/ddist-doc-typos
dnsdist: Fix a few typos in the documentation
Remi Gacogne [Thu, 2 Jan 2020 08:24:43 +0000 (09:24 +0100)]
Merge pull request #8662 from rgacogne/ddist-default-tls-provider
dnsdist: Display the correct DoT provider
Remi Gacogne [Tue, 31 Dec 2019 10:15:32 +0000 (11:15 +0100)]
dnsdist: Display the correct DoT provider
Remi Gacogne [Tue, 31 Dec 2019 10:09:45 +0000 (11:09 +0100)]
Merge pull request #8649 from rgacogne/auth-tsig-keys-8645
auth: Clear the TSIG algo between iterations in the API
Remi Gacogne [Tue, 24 Dec 2019 15:23:17 +0000 (16:23 +0100)]
dnsdist: Fix a few typos in the documentation
Remi Gacogne [Mon, 23 Dec 2019 16:45:47 +0000 (17:45 +0100)]
Merge pull request #8656 from phonedph1/patch-20
dnsdist: Update rules-actions.rst
phonedph1 [Mon, 23 Dec 2019 16:32:55 +0000 (09:32 -0700)]
Update rules-actions.rst
phonedph1 [Mon, 23 Dec 2019 16:29:49 +0000 (16:29 +0000)]
Document LogResponseAction
phonedph1 [Fri, 20 Dec 2019 17:05:11 +0000 (17:05 +0000)]
LogResponseAction
Otto Moerbeek [Fri, 20 Dec 2019 12:46:13 +0000 (13:46 +0100)]
Merge pull request #8648 from omoerbeek/rec-zonecuts-go-out-if-needed
rec: fix wrong zoneCuts caused by cache only lookup
Remi Gacogne [Fri, 20 Dec 2019 12:04:23 +0000 (13:04 +0100)]
auth: Clear the TSIG algo between iterations in the API
Otherwise `GSQLBackend::getTSIGKey()` will try to match the
algorithm in `keyAlgo` if it's set, which will prevent retrieving
a key with a different algorithm that the previous one.
Otto Moerbeek [Fri, 20 Dec 2019 09:08:50 +0000 (10:08 +0100)]
QName Minimization consults the cache first to see work needs to
be done. Via doCacheCheck() this can lead to a call to computeZoneCuts()
which might/does not work properly on only cached records, so always
make sure it can go out if needed. Should fix #8642.
Otto Moerbeek [Fri, 20 Dec 2019 08:02:21 +0000 (09:02 +0100)]
Bump max-qperq default to 100; this is enough for rev v6 queries with cold
cache with validations and qname minimization enabled. Fixes #8646.
Edward Dore [Thu, 19 Dec 2019 17:48:42 +0000 (17:48 +0000)]
Fix trusted-notification-proxy port
Explicitly set the port for outgoing queries to the SuperMaster when using trusted-notification-proxy and EDNS Client Subnet
Closes #8584
Sander Hoentjen [Mon, 16 Dec 2019 21:44:43 +0000 (22:44 +0100)]
Fix build with gcc-10
From an e-mail from Jeff Law <law@redhat.com>:
Subject: Minor problem in pdns, dnsdist and pdns-recursor packages in Fedora
[ All three packages have embedded copies of the same problematic code
and the same patch fixes all three. ]
Red Hat's compiler team continues to try and be proactive in identifying
issues that will arise as a result of the introduction of a new GCC
release into Fedora each spring.
You're being contacted because a package you maintain in Fedora is going
to fail to build with gcc-10 in the spring. Yes, I know that's a few
months away, but it's far easier to fix this stuff proactively now than
wait.
Fixing it now also means that your package will continue to be built
with testing versions of gcc-10 as we proceed through the development
process thus allowing additional issues to be caught early.
Your particular package will fail due to an uninstantiated template for
AsyncLoader<Request>. These kinds of problems are relatively common due to
changes in the tuning of the inliner for gcc-10:
> BUILDSTDERR: /usr/bin/ld: webserver.o: in function `WebServer::serveConnection(std::shared_ptr<Socket>) const':
> BUILDSTDERR: /builddir/build/BUILD/pdns-4.2.1/pdns/webserver.cc:373: undefined reference to `YaHTTP::AsyncLoader<YaHTTP::Request>::feed(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)'
> BUILDSTDERR: collect2: error: ld returned 1 exit status
> BUILDSTDERR: make[3]: *** [Makefile:2751: ixfrdist] Error 1
>
The attached patch arranges for an instance to be instantiated when
compiling reqresp.cpp and is sufficient to fix this problem. The
choice of reqresp.cpp fairly arbitrary IIRC.
Ideally you'll with upstream to get this fixed, but a Fedora patch is
clearly OK as well. I'll install the attached fix into Fedora in a
week or so if I haven't heard from you.
Jeff
Antoine Joubert [Mon, 16 Dec 2019 16:57:13 +0000 (17:57 +0100)]
rec: debian postinst / do not fail on user creation if it already exists
Otto Moerbeek [Mon, 16 Dec 2019 12:25:10 +0000 (13:25 +0100)]
Merge pull request #8630 from omoerbeek/rec-4.3-upgrade-guide
Upgrade guide for rec-4.3
Otto Moerbeek [Mon, 16 Dec 2019 09:08:11 +0000 (10:08 +0100)]
User differs on Debian vs CentOS
Otto Moerbeek [Mon, 16 Dec 2019 08:56:35 +0000 (09:56 +0100)]
Give recursor relevant examples.
Otto Moerbeek [Mon, 16 Dec 2019 08:52:02 +0000 (09:52 +0100)]
hyphen vs underscore
Co-Authored-By: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Peter van Dijk [Sun, 15 Dec 2019 19:54:51 +0000 (20:54 +0100)]
Merge pull request #8637 from blackbit42/master
Fix test syntax in 'pdnsutil --help'
Alexander Huemer [Sun, 15 Dec 2019 19:46:31 +0000 (19:46 +0000)]
Fix test syntax in 'pdnsutil --help'
Remi Gacogne [Fri, 13 Dec 2019 13:30:09 +0000 (14:30 +0100)]
Merge pull request #8632 from rgacogne/dnsdist-libnacl-requirements
dnsdist: Require Python libnacl < 1.7
Remi Gacogne [Fri, 13 Dec 2019 10:43:19 +0000 (11:43 +0100)]
Merge pull request #8633 from rgacogne/ddist-doc-install-rh-missing-underline
dnsdist: Add missing underline in install documentation
Remi Gacogne [Fri, 13 Dec 2019 10:41:55 +0000 (11:41 +0100)]
dnsdist: Add missing underline in install documentation
Remi Gacogne [Fri, 13 Dec 2019 10:34:27 +0000 (11:34 +0100)]
Merge pull request #8613 from Habbie/auth-pc-init-order
auth packetcache: sync init order with member order
Remi Gacogne [Fri, 13 Dec 2019 10:16:20 +0000 (11:16 +0100)]
dnsdist: Require Python libnacl < 1.7
Otherwise we need libsodium >= 1.0.12 (required by this change:
https://github.com/saltstack/libnacl/commit/
8c8b2f8bc05a5b67f39acf9a6bc0bef6fa839166
) and we don't have it in Trusty, which we still use in Travis.
Otto Moerbeek [Fri, 13 Dec 2019 09:45:30 +0000 (10:45 +0100)]
Upgrade guide for rec-4.3
Peter van Dijk [Thu, 12 Dec 2019 10:22:12 +0000 (11:22 +0100)]
Merge pull request #8621 from aerique/feature/repo-script-for-auth-43
Add `auth-43` and `rec-43`.
Erik Winkels [Thu, 12 Dec 2019 09:47:25 +0000 (10:47 +0100)]
Add `auth-43` and `rec-43`.
aerique [Thu, 12 Dec 2019 09:24:26 +0000 (10:24 +0100)]
Merge pull request #8618 from omoerbeek/rec-prep-4.3.0-beta1
Rec: Prepare for rec-4.3.0-beta1
Otto Moerbeek [Wed, 11 Dec 2019 09:56:45 +0000 (10:56 +0100)]
Update pdns/recursordist/docs/changelog/4.3.rst
Co-Authored-By: Peter van Dijk <peter.van.dijk@powerdns.com>
Otto Moerbeek [Wed, 11 Dec 2019 08:36:01 +0000 (09:36 +0100)]
Suggestions by Habbie
Otto Moerbeek [Tue, 10 Dec 2019 14:40:10 +0000 (15:40 +0100)]
Prepare for rec-4.3.0-beta1
Peter van Dijk [Tue, 10 Dec 2019 11:25:44 +0000 (12:25 +0100)]
Merge pull request #8539 from pieterlexis/4.3-docs
Auth 4.3.0 docs
Peter van Dijk [Tue, 10 Dec 2019 10:51:44 +0000 (11:51 +0100)]
auth 4.3.0-alpha1 secpoll
Peter van Dijk [Mon, 9 Dec 2019 09:26:00 +0000 (10:26 +0100)]
document local-ipv6 removal in 4.3
Peter van Dijk [Fri, 6 Dec 2019 15:22:27 +0000 (16:22 +0100)]
auth 4.3 changelog
Peter van Dijk [Fri, 6 Dec 2019 15:22:00 +0000 (16:22 +0100)]
git-to-changelog-merges: remove trailing spaces
Pieter Lexis [Mon, 18 Nov 2019 09:40:09 +0000 (10:40 +0100)]
EL pkgs: chown dirs to service user
Pieter Lexis [Mon, 18 Nov 2019 09:38:03 +0000 (10:38 +0100)]
Add auth 4.3.0 upgrade docs
Otto Moerbeek [Tue, 10 Dec 2019 09:47:49 +0000 (10:47 +0100)]
Merge pull request #8571 from omoerbeek/rec-better-time-based
Rec: better time based data structures
aerique [Tue, 10 Dec 2019 08:35:01 +0000 (09:35 +0100)]
Merge pull request #8599 from aerique/feature/update-docker-repo-script
Update docker repo script for auth-4.2.1.
Peter van Dijk [Mon, 9 Dec 2019 15:26:22 +0000 (16:26 +0100)]
Merge pull request #8249 from chbruyand/lua-monitoring-thread
auth: refactor health checks monitoring done from LUA records
Peter van Dijk [Mon, 9 Dec 2019 11:43:50 +0000 (12:43 +0100)]
Merge pull request #8497 from mind04/pdns-api2
Auth: api: cache and rectify fixes in patchZone()
Erik Winkels [Mon, 9 Dec 2019 09:52:37 +0000 (10:52 +0100)]
Fix CentOS 8 issue and install `dig`.
Erik Winkels [Mon, 9 Dec 2019 09:36:05 +0000 (10:36 +0100)]
Update docker repo script for rec-4.2.1.
Otto Moerbeek [Mon, 9 Dec 2019 09:30:02 +0000 (10:30 +0100)]
Merge pull request #8611 from omoerbeek/rec-prep-4.2.1
Prepare for rec-4.2.1
Peter van Dijk [Mon, 9 Dec 2019 08:54:00 +0000 (09:54 +0100)]
auth packetcache: sync init order with member order
Peter van Dijk [Fri, 6 Dec 2019 13:32:44 +0000 (14:32 +0100)]
remove unused variable
Peter van Dijk [Fri, 6 Dec 2019 13:31:31 +0000 (14:31 +0100)]
add qname/qtype to LUA Lua errors
Charles-Henri Bruyand [Thu, 19 Sep 2019 15:30:24 +0000 (17:30 +0200)]
auth: lua monitoring, lock on status change, better report malformed options content
Charles-Henri Bruyand [Thu, 29 Aug 2019 10:36:57 +0000 (12:36 +0200)]
auth: lua refactor health checks monitoring
Otto Moerbeek [Fri, 6 Dec 2019 19:18:50 +0000 (20:18 +0100)]
Merge pull request #8512 from rgacogne/dedup-rrs-signature
Remove duplicate RRs inside a RRSet when computing the signature
Otto Moerbeek [Fri, 6 Dec 2019 16:02:54 +0000 (17:02 +0100)]
Rebased; test files were reformatted
Remi Gacogne [Thu, 7 Nov 2019 09:21:48 +0000 (10:21 +0100)]
rec: Check duplicated records inside a RRSet validate correctly
Remi Gacogne [Wed, 6 Nov 2019 17:53:35 +0000 (18:53 +0100)]
Remove duplicate RRs inside a RRSet when computing the signature
These duplicates should not exist but they do happen in the wild.
Since we need to sort the RRs anyway, let's be nice and remove
duplicates as well.
Otto Moerbeek [Fri, 6 Dec 2019 11:35:40 +0000 (12:35 +0100)]
Prepare for rec-4.2.1
Peter van Dijk [Fri, 6 Dec 2019 12:53:32 +0000 (13:53 +0100)]
Merge pull request #8435 from mind04/pdns-remove-opendbx
auth: remove opendbx backend
Otto Moerbeek [Fri, 6 Dec 2019 09:33:25 +0000 (10:33 +0100)]
Merge pull request #8603 from omoerbeek/rec-prep-4.1.15
rec: Prep for rec-4.1.15
Remi Gacogne [Thu, 5 Dec 2019 08:36:20 +0000 (09:36 +0100)]
Merge pull request #8601 from omoerbeek/no-copy-rwlocks
Avoid copying of pthread_rwlock_t
Remi Gacogne [Thu, 5 Dec 2019 08:35:55 +0000 (09:35 +0100)]
Merge pull request #8607 from rgacogne/ddist-doc-zeroscope-parseecs
dnsdist: Document that the 'zero-scope' feature requires 'parseECS'
Peter van Dijk [Thu, 5 Dec 2019 08:20:29 +0000 (09:20 +0100)]
Merge pull request #8027 from Habbie/sdig-stdin-exitvalue
sdig: decode DNS packets from stdin; exit non-zero on failure
Remi Gacogne [Wed, 4 Dec 2019 09:42:29 +0000 (10:42 +0100)]
Merge pull request #8604 from rgacogne/ddist-kvs-errors
dnsdist: Add missing exception message in KVS error
Remi Gacogne [Wed, 4 Dec 2019 09:42:12 +0000 (10:42 +0100)]
Merge pull request #8605 from rgacogne/ddist-tuning-doc-typo
dnsdist: Add missing newline in setMaxUDPOutstanding() documentation
Remi Gacogne [Wed, 4 Dec 2019 09:39:46 +0000 (10:39 +0100)]
dnsdist: Document that the 'zero-scope' feature requires 'parseECS'
Remi Gacogne [Tue, 3 Dec 2019 15:37:29 +0000 (16:37 +0100)]
dnsdist: Add missing newline in setMaxUDPOutstanding() documentation
Remi Gacogne [Tue, 3 Dec 2019 15:34:52 +0000 (16:34 +0100)]
dnsdist: Add missing exception message in KVS error
Pieter Lexis [Tue, 3 Dec 2019 14:11:58 +0000 (15:11 +0100)]
Merge pull request #8585 from pieterlexis/auth-api-lenient
Auth API: be a bit more lenient
Otto Moerbeek [Tue, 3 Dec 2019 12:43:41 +0000 (13:43 +0100)]
Prep for rec-4.1.15
Peter van Dijk [Tue, 3 Dec 2019 11:45:00 +0000 (12:45 +0100)]
sdig: support reading packets from stdin
Peter van Dijk [Tue, 3 Dec 2019 11:29:22 +0000 (12:29 +0100)]
fix formatting
Peter van Dijk [Tue, 3 Dec 2019 11:28:59 +0000 (12:28 +0100)]
fix typo
Peter van Dijk [Tue, 3 Dec 2019 09:37:31 +0000 (10:37 +0100)]
Merge pull request #8430 from Habbie/builder-no-all
builder: demand user chooses a module except when building docs
Peter van Dijk [Thu, 17 Oct 2019 21:19:15 +0000 (23:19 +0200)]
builder: demand user chooses a module except when building docs
Peter van Dijk [Tue, 3 Dec 2019 09:27:25 +0000 (10:27 +0100)]
Merge pull request #8334 from Habbie/dnsscope-nits
dnsscope: two nits
Kees Monshouwer [Fri, 18 Oct 2019 10:51:02 +0000 (12:51 +0200)]
auth: remove opendbx backend
Peter van Dijk [Tue, 3 Dec 2019 08:31:44 +0000 (09:31 +0100)]
Merge pull request #8486 from pieterlexis/auth-rm-local-ipv6
Auth: Remove local-ipv6 setting
Otto Moerbeek [Mon, 2 Dec 2019 15:06:33 +0000 (16:06 +0100)]
Avoid copying of pthread_rwlock_t
Peter van Dijk [Mon, 2 Dec 2019 16:04:55 +0000 (17:04 +0100)]
Merge pull request #8591 from rgacogne/ddist-wait-longer-for-tls-tickets
dnsdist: Wait longer for the TLS ticket to arrive in our tests
aerique [Mon, 2 Dec 2019 14:12:34 +0000 (15:12 +0100)]
Merge pull request #8574 from Habbie/auth-4.2.1-docs
Secpoll and changelog for auth-4.2.1.
Erik Winkels [Mon, 2 Dec 2019 13:14:48 +0000 (14:14 +0100)]
Update docker repo script for auth-4.2.1.
Peter van Dijk [Mon, 2 Dec 2019 09:55:28 +0000 (10:55 +0100)]
Merge pull request #8504 from rubenk/docs-fix-redhat
docs: s/RedHat/Red Hat/
Peter van Dijk [Mon, 25 Nov 2019 11:13:22 +0000 (12:13 +0100)]
secpoll and changelog for auth 4.2.1