Setup env properly to skip v6 test.

CicleCI docs indeed suggest the environment setting under docker do not apply
to the jobs steps.

Merge pull request #10208 from rgacogne/ddist-doh-id

dnsdist: Fix the handling of DoH queries with a non-zero ID

Merge pull request #8918 from rgacogne/rec-edns-padding-plus-tests

rec: Implement EDNS0 padding (rfc7830) for outgoing responses

dnsdist: Fix the handling of DoH queries with a non-zero ID

rfc8484 states that clients "SHOULD use a DNS ID of 0 in every DNS
request", not MUST, so it does indeed happen.
The issue was introduced in 341d2553b74c579df9d9843959f3ca6f5c3dc954
when we moved to a safer PacketBuffer.

Merge pull request #10057 from rgacogne/rec-no-zone-cut-computation

rec: Get rid of early zone cut computation

Merge pull request #10182 from omoerbeek/rec-better-prime

rec: Insert hints as non-auth into cache

Reformat

Merge pull request #10164 from Habbie/amazon-linux-extras-epel

amazonlinux-2 packaging improvements

Merge pull request #10200 from Habbie/sdig-dumpluaraw

dig, pdnsutil: add dnsdist spoofAction string generators

Merge pull request #10195 from omoerbeek/rec-prep-4.3.7

rec: changelog and secpoll for rec 4.3.7

fix typo

fix formatting after merge of #10099

Merge pull request #10099 from RobinGeuze/lmdbTransactionErrors

Check if transaction is active in LMDB

Merge pull request #10129 from Habbie/auth-docs-10127

auth upgrade docs: note removal of do-ipv6-additional-processing

Merge pull request #10175 from jsoref/patterns

spelling: ignore hex strings that are 8+ chars long

sdig, pdnsutil: add dnsdist spoofAction string generators

Merge pull request #10202 from kaistian/docs-fix

docs: Changed to correct zone in sqlite backend example

docs: Changed to correct zone in sqlite backend example

Merge pull request #10156 from rgacogne/ddist-conn-reuse

dnsdist: Improve TCP connection reuse, add metrics

Apply suggestions from code review

Co-authored-by: Remi Gacogne <rgacogne+github@valombre.net>

Add a unit test and also make the test priming correspond to the new real priming.

Merge pull request #10184 from rgacogne/ddist-tcp-listen-overflows

dnsdist: Add a metric for TCP listen queue full events

Prep for rec 4.3.7

Merge pull request #10185 from omoerbeek/rec-ageing-pc

rec: make sure we take the right minimum for the PC TTL data.

auth upgrade docs: note removal of do-ipv6-additional-processing

closes #10127

amazonlinux-2: do not build ixfrdist

Make sure we take the right minimum for the PC TTL data in the SERVFAIL case.

Also add safety belt to the ageing code to not wrap TTLs,
adjust one dnsdist test for ageDNSPacket no longer underflowing, and
stop dnsdist from relying on ageDNSPacket wrapping around.

Merge pull request #10186 from mind04/pdns-lmdb-coverity

auth: fix coverity CID 1450843

Merge pull request #10187 from Habbie/circleci-upstream-docker-images

circleci: use upstream docker images instead of the circleci forks

auth: fix coverity CID 1450843

circleci: use upstream docker images instead of the circleci forks

dnsdist: Add a metric for TCP listen queue full events

Do not log error in unit test, it is expected now

Insert hints as non-auth into cache, so info received from the net is
recorded in the cache.

Also make sure the root NS refresh happens more often if max-cache-ttl is low.
This is needed as the records no longer maintain the 1000 hours TTL.
In the existing setup, a reprime (with potential outdated info) was done at that
point in time since all root-server address records would expire at the same
time.

Lastly, fix a infinite (caught by depth check) recursion in getBestNSFromCache().

Fixes #10177.

Merge pull request #10181 from rgacogne/ddist-doc-typos2

dnsdist: Fix a few typos in the docs, document that setTCPUseSinglePipe should not be used anymore

Merge pull request #10178 from omoerbeek/rec-root-ns-poison

rec: Don't pick up random root NS records from AUTHORITY sections

Merge pull request #10179 from rgacogne/ddist-tls-release-buffers

dnsdist: Set OpenSSL to release buffers when idle, saves 35 kB per connection

dnsdist: Fix formatting issue in the TLS sessions management guide

dnsdist: Document that setTCPUseSinglePipe should not be used anymore

Merge pull request #10107 from mind04/pdns-lmdb-disabled

auth: implement disabled in LMDB backend

Formatting

Fix indent

Clarify comments

dnsdist: Set OpenSSL to release buffers when idle, saves 35 kB per connection

Don't pick up random root NS records from AUTHORITY sections

Merge pull request #10155 from pieterlexis/alias-nsec-bitmap

ALIAS: Ensure A and AAAA are in the NSEC bitmap

Merge pull request #10172 from Habbie/csync-init

CSYNCRecordContent: init member variables

Merge pull request #10169 from Habbie/check-secpoll

check secpoll syntax

spelling: ignore hex strings

* that are 8+ chars long
* from github urls
* from commit refs

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Merge pull request #10174 from rubenk/spelling

Spelling

Merge pull request #10126 from peterthomassen/patch-2

Improve description of dname-processing

Merge pull request #10145 from mnordhoff/patch-8

docs: ecswho is a Netmask, not a ComboAddress

Merge pull request #10141 from pieterlexis/sd-better-runtimedir

Fix configure issue with systemd runtime dir detection

ALIAS: Ensure A and AAAA are in the NSEC bitmap

This ensures that NODATA responses from names with an ALIAS record don't
blank out A/AAAA on resolvers using aggressive NSEC caching.

Closes #6667

Whitespace and interpunction

More spelling

Spelling

Merge pull request #10168 from jsoref/spelling

Spelling

CSYNCRecordContent: init member variables

spelling: Update patterns/exclusions

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Correct NetmaskGroup comment

per Habbie

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: valid

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: unsupported

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: unexpected

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: transaction

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: test

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: support

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: start

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: status code

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: should

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: running

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: rule

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: referrals

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: received

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: raised

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queuedo

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queued

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: queries

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: qname

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: program

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: powerdns

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: optionally

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: occurred

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: name

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: mismatching

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: minimization

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: matches

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ifurlup

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: ifportup

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: header

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: filename

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: explicit

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: exception

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: everything

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: dismissing

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: discarded

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: disaster

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: descriptions

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: currently

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>