Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

dnsdist: fix build error

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Update document

Update pdns/bpf-filter.hh

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update pdns/bpf-filter.hh

Co-authored-by: Remi Gacogne <github@coredump.fr>

dnsdist: Change the bpf:blockRange bpf:allowRange to bpf:addRangeRule
bpf:rmRangeRule bpf:lsRangeRule

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Update pdns/bpf-filter.cc

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update pdns/bpf-filter.hh

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update pdns/bpf-filter.cc

Co-authored-by: Remi Gacogne <github@coredump.fr>

dnsdist: throw a exception when use unsupport eBPF map type

Co-authored-by: Remi Gacogne <github@coredump.fr>
Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

dnsdist: fix typo in pdns/dnsdist-console.cc

Co-authored-by: Remi Gacogne <github@coredump.fr>

dnsdist: add parameter in blockRange

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Use IPNetwork instead of IPAddress

Update document

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

rename BPFFilter:unblockRange() to BPFFilter:allowRange()

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

add BPFFilter::getRangeStats()
add BPF_MAP_TYPE_LPM_TRIE support in getStats()

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Revert "add BPF_MAP_TYPE_LPM_TRIE support in getStats()"

This reverts commit a8b0100a28b4367d8038726382e007f727d23ad1.

Update bpf_create_map type declare

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>
Co-authored-by: Remi Gacogne <github@coredump.fr>

change name

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>
Co-authored-by: Remi Gacogne <github@coredump.fr>

change code style

Co-authored-by: Remi Gacogne <github@coredump.fr>
Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

add BPF_MAP_TYPE_LPM_TRIE support in getStats()

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>
Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

update document

use BPF_MAP_TYPE_LPM_TRIE map in XDP program to block a range

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

add blockRange and unblockRange

Support create bpf map with BPF_MAP_TYPE_LPM_TRIE type

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Merge pull request #11565 from rgacogne/ddist-fix-ebpf-qnames

dnsdist: Fix wrong eBPF values (qtype, counter) being inserted for qnames

Merge pull request #11544 from rgacogne/ddist-bpf-block-action

dnsdist: Properly use eBPF when the DynBlock is not set

Merge pull request #11547 from rgacogne/ddist-add-address-accessor-to-frontends

dnsdist: Add a 'getAddressAndPort()' method to DOHFrontend and TLSFrontend objects

Merge pull request #11545 from rgacogne/ddist-fix-backend-proto

dnsdist: Use the correct outgoing protocol in our ring buffers

Merge pull request #11561 from omoerbeek/dnsdist-include-openbsd

dnsdist: include <unordered_map>

dnsdist: Fix wrong eBPF values (qtype, counter) being inserted for qnames

Merge pull request #11564 from Habbie/circleci-docs-no-texlive

circleci: revert docs build to specific debian image, instead of the debian:testing underlying the texlive image

revert docs build to specific debian image, instead of the debian:testing underlying the texlive image

Include <unordered_map>

On OpenBSD you don't get std::unordered_map for free

Merge pull request #11541 from omoerbeek/rec-fix-dot-probe

Fix DoT port, as noted by ph1 on IRC

Decide to use Dot earlier.

To keep the nsspeed table good, we need to decide to use DoT earlier.
Now the lookup and updats of the speed table occur in a proper way
(using the port that is actually used for the connetion) and when
we switch from/to DoT, the old nsspeeds are cleared by the already
existing code.

Merge pull request #11546 from rgacogne/ddist-fix-0-sized-cache

dnsdist: Raise the number of entries in a packet cache to at least 1

Merge pull request #11539 from rgacogne/rec-fix-dnssec-counters-documentation

rec: DNSSEC counters track responses sent, not actual validations performed

Merge pull request #11535 from Y7n05h/MergeParams

Merge multiple parameters in newBPFFilter

Update pdns/dnsdistdist/docs/reference/ebpf.rst

dnsdist: Fix formatting

dnsdist: Add a 'getAddressAndPort()' method to DOHFrontend and TLSFrontend objects

dnsdist: Raise the number of entries in a packet cache to at least 1

And make sure that we cannot create such an object.

dnsdist: Use the correct outgoing protocol in our ring buffers

dnsdist: Properly use eBPF when the DynBlock is not set

When the DynBlock rule does not set a specific action we use the
default one, set with `setDynBlocksAction()`, so we should follow
the same logic when determining whether to insert an eBPF block.

fix d_type in MapConfiguration

rec: Fix DNSSEC counters description in web/prometheus as well

fix errer key in access convertParamsToConfig

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Missing newline in dump output, noted by ph1

Fix port, as noted by ph1 on IRC

Without this, probed DoT actually becomes regular TCP.

Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

rec: DNSSEC counters track responses sent, not actual validations performed

Since 4.1 these counters are updated for every response sent, even if the DNSSEC
status was fetched from the records cache and did not involve any actual
validation.

Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

Merge pull request #11381 from omoerbeek/rec-dynamic-root-refresh-period

rec: Adaptive root refresh interval, normally at 80% of max-cache-ttl

Update document

Simplify the parameters of newBPFFilter

Merge pull request #11518 from fredmorcos/add-libdecaf-to-github-actions

Add libdecaf (auth) tests to Github Actions

Refer to new root hint handling info from settings docs

Merge pull request #11527 from omoerbeek/prep-rec-4.7.0-beta1

rec: Prep for rec-4.7.0-beta1

Update pdns/dnsdistdist/docs/reference/ebpf.rst

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update pdns/dnsdist-lua-bindings.cc

Co-authored-by: Remi Gacogne <github@coredump.fr>

Document more details of root-hints handling

Merge pull request #11536 from omoerbeek/rec-nitems

Fix Coverity 1487923 Out-of-bounds read (wrong use of sizeof)

Move to std:::array for name array, as suggested by rgacogne

Merge pull request #11531 from rgacogne/ddist-small-improvements

dnsdist: Prevent allocations in two corner cases

Adaptive root refresh, normally at 80% of max-cache-ttl; shortening the interval on failure.

Merge pull request #11532 from omoerbeek/coverity-annotations-tmsg

rec: Add coverity annotations for a leak false positives

Fix Coverity 1487923 Out-of-bounds read (wrong use of sizeof)

Merge multiple parameters in newBPFFilter

Signed-off-by: Y7n05h <Y7n05h@protonmail.com>

Add coverity annotations for a leaks false positives, as a model requires much more work

Merge pull request #11530 from omoerbeek/rec-coverity-build-more

rec: enable a few more optional parts for coverity build

dnsdist: Reuse the temporary logging string for syslog

proxy-protocol: Prevent a temporary allocation

Merge pull request #11529 from omoerbeek/rec-zap-test-debug-output

rec: Zap a leftover debug lines in test code

rec: enable a few more optional parts for coverity build

Merge pull request #11512 from rgacogne/ddist-small-cleanups

dnsdist: Bunch of small cleanups

Zap a leftover debug line in test code

Prep for rec-4.7.0-beta1

Merge pull request #11487 from omoerbeek/rec-probe-auth-dot

Rec: probe auth for DoT support

Update pdns/recursordist/docs/settings.rst

Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

doResolveAtThisIP() can throw and do not throttle when DoT probing

Review comments: document what happens on failure and use runOnce() as a building block for runTasks()

Process review comments: use correct auth and nsname for task

Apply suggestions from code review

Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Only probe somewhat popular auths; i.e. auths that are revisited at least once

Docs

Tweaks

Add ttd pruning by using a multi-index table and update status after DoT use

Initial code to Probe nameservers for DoT.

The ratelmiting code sure need so extra attention.
Missing: pruning, stats, tests, docs.

wip

Merge pull request #11525 from omoerbeek/dnsdist-docs-retain

Mention addCapabilitiesToRetain in eBPF docs.

Merge pull request #11521 from Habbie/auth-4.6.2-docs

auth-4.6.2: changelog + secpoll

auth-4.6.2: changelog + secpoll

Merge pull request #11524 from omoerbeek/upddate-moment.js

Update moment.min.js (path traversal fix; we are unaffected)

Merge pull request #11523 from Y7n05h/master

Reject BPFFilter::attachToAllBinds() at configuration time

both CAP_SYS_ADMIN and CAP_BPF mightr be relevant

Co-authored-by: Remi Gacogne <github@coredump.fr>

Update moment.min.js (path tarversal fix; we are unaffected)

Also remove unused moment.js