lmdb createDomain: provide initial ID seed

dnsdist: Fix the documentation workflow

We need to generate the parts of the documentation sources that are no
longer present in the repository before building it.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #15701 from rgacogne/ddist-20-b1-changelog-secpoll

dnsdist: Update ChangeLog and security polling zone for 2.0.0-beta1

Merge pull request #15700 from omoerbeek/coverity-20250620

Two Coverity issues, the truncation is meant to be

Two Coverity issues, the truncation is meant to be

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

pdnsutil showZone: report zone ID in verbose mode

Merge pull request #15697 from Habbie/pickselfweighted-added-5

auth docs: note that pickselfweighted() is new in auth 5

auth docs: note that pickselfweighted() is new in auth 5

Merge pull request #15684 from PowerDNS/dependabot/pip/regression-tests.recursor-dnssec/protobuf-5.29.5

build(deps): bump protobuf from 5.28.2 to 5.29.5 in /regression-tests.recursor-dnssec

Drop unused argument.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Make lmdb del() operations throw upon error.

In the current state of the code, in flag-deleted mode, failures always
throw; but in regular mode, in the unlikely event of an error during
deletion from cursor, the returned value would be either ignored or...
used to throw an exception.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #15693 from miodvallat/rmdb

better rm in LMDB

dnsdist: Update ChangeLog and security polling zone for 2.0.0-beta1

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Use faster logic in deleteDomainRecords().

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Distinguish argument value and return value

Having full attribute names is something for later (maybe).

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Tidy

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #15692 from omoerbeek/rec-yaml-aliases

rec: introduce aliases for camelCase field names

Merge pull request #15690 from rgacogne/ddist-meta-api

dnsdist: Add Lua APIs to set Meta tags in protobuf messages

Use std::copy and std::fill, as suggested by rgacogne

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Encode TraceID and SpanID into a single EDNS option record, as suggested by Habbie

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

dnsdist: Apply Otto's suggestions (thanks!)

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #15691 from rgacogne/ddist-completion-chains

dnsdist: Generate completion and help for rule chains

Merge pull request #15695 from omoerbeek/dnsdist-meson-libcrypto

dnsdist meson: followup to #15685 to avoid compiler warnings

Merge pull request #15646 from Habbie/rrsig-times-1982

rec validate: use rfc1982 math for RRSIG timestamps

Merge pull request #15652 from omoerbeek/rec-ztc-vs-recforward

rec: when using ZTC, do not store non-auth data if the name is subject to recursive forwarding

Add missed zoneSizeHint

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

dnsdist meson: followup to #15685 to avoid compiler warnings

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Simple test for replaceRRSet ANY operation.

Also exercize the newest pdnsutil syntax while there.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Correctly handle QType::ANY in replaceRRSet().

Co-Authored-By: Håkan Lindqvist <h@qw.se>
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Rework deleteDomainRecords() interface.

NFC yet, will benefit upcoming commits.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

dnsdist: Reorder files in Makefile.am

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Yet another formatting mistake

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Appease code formatting daemon

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Generate completion and help for rule chains

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Move completion-related code to a separate file

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Add docs, typos

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #15689 from omoerbeek/auth-no-more-instances-vec

auth: stop maintaining vector of ueberbackend instances

Merge pull request #15687 from rgacogne/ddist-remove-generated-doc-files

dnsdist: Remove generated YAML documentation files

rec: provide snake_case aliases for CamelCase names in YAML config

dnsdist: Add Lua APIs to set Meta tags in protobuf messages

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: stop maintaining vector of backend instances

Unused. Fixes #15688

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

dnsdist: Remove generated YAML documentation files

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #15682 from pieterlexis/superfluous-code-block

doc(dnsdist): remove superfluous code block in YAML config

Merge pull request #15685 from omoerbeek/dnsdist-ssl-crypto

meson: Pick -lcrypto up from the spot defined by dep_libcrypto

dnsdist: remove superfluous code block in YAML config

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

rec and auth: implement stop command as alias for quit(-nicely)

Fixes #15674

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #15676 from nokia/restartcnt

dnsdist: add a count to track the number of query restarts

Merge pull request #15670 from nokia/policy

dnsdist: add route policy of first ordered then weighted

Pick -lcrypto up from the spot defined by dep_libcrypto

Also avoid a bunch of warning: as compile commands don't take -L:
c++: warning: argument unused during compilation: '-L/usr/local/eboringssl/lib' [-Wunused-command-line -argument]

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Indentation correction

build(deps): bump protobuf in /regression-tests.recursor-dnssec

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 5.28.2 to 5.29.5.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v5.28.2...v5.29.5)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 5.29.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Add regression test for the restart counting

build(deps): bump protobuf in /regression-tests.dnsdist

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 6.30.2 to 6.31.1.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v6.30.2...v6.31.1)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 6.31.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Optimize policy with already sorted servers and add tag testing

doc(dnsdist): remove superfluous code block in YAML config

Merge pull request #15679 from miodvallat/fragmented_sun

Provide an IP_OFFMASK value for systems lacking it

Merge pull request #15681 from miodvallat/geoipfeetshooting

Lua GeoIPQueryAttribute documentation update

Fix documentation build warning.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Mention that GeoIPQueryAttribute symbolic constants in Lua are v5+.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Provide an IP_OFFMASK value for systems lacking it.

Fixes: #8060
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #15662 from rgacogne/ddist-apply-yaml-items-early

dnsdist: Apply generic YAML configuration items early

Force callers of getMDBEnv() to always specify the maximum map size.

Fixes: #12901
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Change integer type from uint8_t to int in the docs

Merge pull request #15672 from miodvallat/silencing_the_signing

Stop listing the trusted keys at the end of tests

Merge pull request #15661 from omoerbeek/rec-nta-retrieval

rec: fix negativetrustanchor.server CH TXT query processing (disabled by default)

dnsdist: add a count to track the number of query restarts

Address PR review comments

Merge pull request #15654 from Habbie/rec-build-amazon2023-and-assorted-nits

rec: amazon2023 build fix + nits

Make clang-tidy checks happy

Stop listing the trusted keys at the end of tests.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

dnsdist: add route policy of first ordered then weighted

User may require two levels of routing policy to select downstream
servers. First choose the least ordered, then distribute queries
according to weights among the same ordered servers. It also added
special filtering on selecting servers for query restart. If user
sets the required tag in the restarted query then the policy will
not select server(s) that had been tried before.

Merge pull request #15640 from rgacogne/ddist-remove-records-on-rcode-action

dnsdist: Clean up existing records when turning query into response

Merge pull request #15221 from omoerbeek/loc-lat-long

Compute LOC text representation without using floating point for latitude and longitude

dnsdist: Apply Otto's suggestion of reordering ancount/arcount

Co-authored-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>
Signed-off-by: Remi Gacogne <github@coredump.fr>

Merge pull request #15602 from rgacogne/ddist-fix-edns-self-gen-from-packet

dnsdist: Do not replace EDNS in answers self-generated from a packet

match FROM/AS case

recursor.spec: explicitly check for el8 and amazon2023

Upgrade guide note

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Compute LOC text representation without using floating point for latitude and longitude

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Rewrite comment that no longer reflects reality

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Typos in comments from miod

Co-authored-by: Miod Vallat <miod.vallat@powerdns.com>
Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #15619 from Habbie/views-wsauth-netmask-error

auth views http: report network typos to user

Merge pull request #15593 from Habbie/auth-version-loglevel

auth: restore correct logging level for startup version message

Fix autotools build and avoid a few g++ warnings by initing all members explicitly

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Factor code responsible for serial increase. NFCI

Correctly return the previous serial number in X-PDNS-Old-Serial.

Better and more tests

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #15664 from miodvallat/cleaning_me_softly

Low-hanging signature cache hanging fruit

Merge pull request #15659 from miodvallat/spring_paranoia

Some spring paranoia

Merge pull request #15657 from miodvallat/out_of_domain

More domain ID love

Merge pull request #15609 from miodvallat/shard_removal

Packet Cache fixes for views

Merge pull request #15641 from Habbie/auth-2136-test-script-failure

dyndns test: report script failure

Restructure EDE computation to follow RFC1982 as well

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #15667 from miodvallat/my_counter_is_rich

minor tsan fixes

Use atomic types for the latency metrics.

Use atomic types for "time for next cache cleanup" variable.

Fixes: #11816

Merge pull request #15665 from jpmens/patch-18

pdnsutil: clarify provenance of default TTL

pdnsutil: clarify provenance of default TTL

Signed-off-by: Jan-Piet Mens <jp@mens.de>

Throw some bones to clang-tidy.

Clear DNSSEC signature cache outside of its write lock.