Formatting

Fix indent

Clarify comments

Don't pick up random root NS records from AUTHORITY sections

Merge pull request #10155 from pieterlexis/alias-nsec-bitmap

ALIAS: Ensure A and AAAA are in the NSEC bitmap

Merge pull request #10172 from Habbie/csync-init

CSYNCRecordContent: init member variables

Merge pull request #10169 from Habbie/check-secpoll

check secpoll syntax

Merge pull request #10174 from rubenk/spelling

Spelling

Merge pull request #10126 from peterthomassen/patch-2

Improve description of dname-processing

Merge pull request #10145 from mnordhoff/patch-8

docs: ecswho is a Netmask, not a ComboAddress

Merge pull request #10141 from pieterlexis/sd-better-runtimedir

Fix configure issue with systemd runtime dir detection

ALIAS: Ensure A and AAAA are in the NSEC bitmap

This ensures that NODATA responses from names with an ALIAS record don't
blank out A/AAAA on resolvers using aggressive NSEC caching.

Closes #6667

Whitespace and interpunction

More spelling

Spelling

Merge pull request #10168 from jsoref/spelling

Spelling

CSYNCRecordContent: init member variables

spelling: Update patterns/exclusions

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Correct NetmaskGroup comment

per Habbie

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: valid

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: unsupported

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: unexpected

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: transaction

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: test

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: support

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: start

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: status code

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: should

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: running

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: rule

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: referrals

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: received

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: raised

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queuedo

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queued

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queries

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: qname

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: program

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: powerdns

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: optionally

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: occurred

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: name

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: mismatching

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: minimization

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: matches

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ifurlup

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ifportup

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: header

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: filename

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: explicit

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: exception

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: everything

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: dismissing

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: discarded

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: disaster

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: descriptions

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: currently

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: checkof

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: behaviour

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: backend

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ancestor

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Merge pull request #10142 from jsoref/reword

Reword

Avoid here

Avoid please-find

Merge pull request #10165 from rytis/master

Install vim in docker-auth image

Use vim-tiny to reduce image size

Merge pull request #10147 from Habbie/auth-4.3.2-docs

auth 4.3.2: docs&secpoll

auth 4.3.2: docs&secpoll

Merge pull request #10078 from Habbie/csync

add CSYNC type

gh actions: add secpoll syntax check

pdnsutil load-zone: report errors in exit value

Install vim in docker-auth image

pdnsutil edit-zone requires EDITOR to be set. Currently there's no editor installed at all. Adding vim, so that it can be used as default editor by pdnsutil edit-zone.

Merge pull request #10161 from omoerbeek/real-real-mem-usage

"data" size is unreliable, start using RES, as it seem reliable and relavant

"data" size is unreliable, start using RES, as it seem reliable and relevant

Fix secpoll zone

Merge pull request #10146 from omoerbeek/prep-rec-4.5.0-alpha2

rec: Prep for rec-4.5.0-alpha3

Merge pull request #10153 from mnordhoff/patch-7

docs: Fix formatting typo in Recursor settings

Merge pull request #10152 from omoerbeek/rec-non-resolving-followup2

Make the non-resolving cache even less aggressive and add a unit test.

docs: Explain what DNSSEC settings aggressive NSEC requires

docs: Fix formatting typo in Recursor settings

It's going to be the 9th of March

Add one more unit test and use the proper counter.

nretrieveAddressesForNS is only incremented on empty results, so the clearing did not work as expected.

it's going to be alpha3

Make the non-resolving cache even less aggressive and add a unit test.

In particular, we clear the entry if we see a succeeding resolve.
This means that we only a couple of failing resolves in a row will
cause a ban. Also change to default non-resolving-ns-max-fails from
1 to 5.

Merge pull request #10151 from omoerbeek/rec-non-resolving-followup

rec: Only put a failing NS in the map if we actually went out and that produced no results

Talk about the rec_control changes and the new non-resolving-... settings

Merge pull request #10149 from omoerbeek/sdig-doh-fastopen

sdig: implement TCP Fast Open for DoH

Only put a failing NS in the map if we actually went out and that
produced no results.

While there, rename a var to be different from the method name.

Merge pull request #10105 from Habbie/ldap-docs-bindmethod

auth ldap docs: s/authmethod/bindmethod/

make CURLOPT_TCP_FASTOPEN conditional on availability

sdig: implement TCP Fast Open for DoH

While at it, honour timeout parameter as well for DoT.

Merge pull request #10104 from Habbie/sync-dnsmessage

update dnsmessage.proto from upstream

Process review comments

Prep for rec-4.5.0-alpha2

docs: ecswho is a Netmask, not a ComboAddress

Merge pull request #10140 from rgacogne/ddist160-a2-changelog

dnsdist: Update the ChangeLog and secpoll zone for 1.6.0-alpha2

Fix configure issue with systemd runtime dir detection

This issue was introduced in 7bbaae110abb53f43d0bf60c81efe3bb8630a925

Merge pull request #10010 from omoerbeek/check-time_t-size

Check sizeof(time_t) to be at least 8

Merge pull request #10116 from pieterlexis/lmdb-docs

docs: improve rendering of lmdb page