dnsdist: Revert the backend's default TCP read and write timeouts

dnsdist: Fix the TCP connect timeout, add metrics

Merge pull request #10156 from rgacogne/ddist-conn-reuse

dnsdist: Improve TCP connection reuse, add metrics

Merge pull request #10184 from rgacogne/ddist-tcp-listen-overflows

dnsdist: Add a metric for TCP listen queue full events

Merge pull request #10185 from omoerbeek/rec-ageing-pc

rec: make sure we take the right minimum for the PC TTL data.

Make sure we take the right minimum for the PC TTL data in the SERVFAIL case.

Also add safety belt to the ageing code to not wrap TTLs,
adjust one dnsdist test for ageDNSPacket no longer underflowing, and
stop dnsdist from relying on ageDNSPacket wrapping around.

Merge pull request #10186 from mind04/pdns-lmdb-coverity

auth: fix coverity CID 1450843

Merge pull request #10187 from Habbie/circleci-upstream-docker-images

circleci: use upstream docker images instead of the circleci forks

auth: fix coverity CID 1450843

circleci: use upstream docker images instead of the circleci forks

dnsdist: Add a metric for TCP listen queue full events

Merge pull request #10181 from rgacogne/ddist-doc-typos2

dnsdist: Fix a few typos in the docs, document that setTCPUseSinglePipe should not be used anymore

Merge pull request #10178 from omoerbeek/rec-root-ns-poison

rec: Don't pick up random root NS records from AUTHORITY sections

Merge pull request #10179 from rgacogne/ddist-tls-release-buffers

dnsdist: Set OpenSSL to release buffers when idle, saves 35 kB per connection

dnsdist: Fix formatting issue in the TLS sessions management guide

dnsdist: Document that setTCPUseSinglePipe should not be used anymore

Merge pull request #10107 from mind04/pdns-lmdb-disabled

auth: implement disabled in LMDB backend

Formatting

Fix indent

Clarify comments

dnsdist: Set OpenSSL to release buffers when idle, saves 35 kB per connection

Don't pick up random root NS records from AUTHORITY sections

Merge pull request #10155 from pieterlexis/alias-nsec-bitmap

ALIAS: Ensure A and AAAA are in the NSEC bitmap

Merge pull request #10172 from Habbie/csync-init

CSYNCRecordContent: init member variables

Merge pull request #10169 from Habbie/check-secpoll

check secpoll syntax

Merge pull request #10174 from rubenk/spelling

Spelling

Merge pull request #10126 from peterthomassen/patch-2

Improve description of dname-processing

Merge pull request #10145 from mnordhoff/patch-8

docs: ecswho is a Netmask, not a ComboAddress

Merge pull request #10141 from pieterlexis/sd-better-runtimedir

Fix configure issue with systemd runtime dir detection

ALIAS: Ensure A and AAAA are in the NSEC bitmap

This ensures that NODATA responses from names with an ALIAS record don't
blank out A/AAAA on resolvers using aggressive NSEC caching.

Closes #6667

Whitespace and interpunction

More spelling

Spelling

Merge pull request #10168 from jsoref/spelling

Spelling

CSYNCRecordContent: init member variables

spelling: Update patterns/exclusions

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Correct NetmaskGroup comment

per Habbie

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: valid

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: unsupported

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: unexpected

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: transaction

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: test

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: support

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: start

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: status code

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: should

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: running

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: rule

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: referrals

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: received

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: raised

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queuedo

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queued

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queries

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: qname

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: program

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: powerdns

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: optionally

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: occurred

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: name

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: mismatching

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: minimization

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: matches

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ifurlup

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ifportup

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: header

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: filename

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: explicit

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: exception

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: everything

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: dismissing

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: discarded

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: disaster

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: descriptions

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: currently

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: checkof

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: behaviour

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: backend

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ancestor

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Merge pull request #10142 from jsoref/reword

Reword

Avoid here

Avoid please-find

Merge pull request #10165 from rytis/master

Install vim in docker-auth image

Use vim-tiny to reduce image size

Merge pull request #10147 from Habbie/auth-4.3.2-docs

auth 4.3.2: docs&secpoll

auth 4.3.2: docs&secpoll

Merge pull request #10078 from Habbie/csync

add CSYNC type

gh actions: add secpoll syntax check

pdnsutil load-zone: report errors in exit value

Install vim in docker-auth image

pdnsutil edit-zone requires EDITOR to be set. Currently there's no editor installed at all. Adding vim, so that it can be used as default editor by pdnsutil edit-zone.

Merge pull request #10161 from omoerbeek/real-real-mem-usage

"data" size is unreliable, start using RES, as it seem reliable and relavant

"data" size is unreliable, start using RES, as it seem reliable and relevant

dnsdist: Check more TCP-related metrics in the web API

dnsdist: Fix a typo in the prometheus metric name for TCP reuseds

dnsdist: Better messages on TLS connection closed by the remote end

dnsdist: Reuse the most recently used TCP conn first, check liveness

dnsdist: Add metrics about outgoing TCP connections reuse

As well as a new command to get a dump of the current TCP states:
`requestTCPStatesDump()`.

Fix secpoll zone

Merge pull request #10146 from omoerbeek/prep-rec-4.5.0-alpha2

rec: Prep for rec-4.5.0-alpha3