dnsdist: Update secpoll and ChangeLog for 2.0.0-alpha1

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 2414845b7719f7fcacaf199f61c42ac2e4daea53..49affae9ca7be341cadbef74345a48d042c6fbc7 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025020700 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025031800 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -582,3 +582,4 @@ dnsdist-1.9.5.security-status                              60 IN TXT "1 OK"
 dnsdist-1.9.6.security-status                              60 IN TXT "1 OK"
 dnsdist-1.9.7.security-status                              60 IN TXT "1 OK"
 dnsdist-1.9.8.security-status                              60 IN TXT "1 OK"
+dnsdist-2.0.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"

diff --git a/pdns/dnsdistdist/docs/changelog.rst b/pdns/dnsdistdist/docs/changelog.rst
index ac25e0105d435018b00df8661ea6c1425c0271ab..c5453d816691c854c2a5eea3b976afc36f5dc2f4 100644 (file)
--- a/pdns/dnsdistdist/docs/changelog.rst
+++ b/pdns/dnsdistdist/docs/changelog.rst
@@ -1,6 +1,273 @@
 Changelog
 =========
 
+.. changelog::
+  :version: 2.0.0-alpha1
+  :released: 18th of March 2025
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15165
+
+    Update Quiche to 0.23.2
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15164
+
+    Update Rust to 1.84.1 for our packages
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 13920
+
+    Shrink InternalQueryState's size by reordering its fields
+
+  .. change::
+    :tags: New Features
+    :pullreq: 13923
+
+    Add a new response chain for XFR responses
+
+  .. change::
+    :tags: New Features
+    :pullreq: 13922
+
+    Add a new query rules chain triggered after a cache miss
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14083
+
+    Change home directory to /var/lib/<product> on EL-based OSs
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14130
+
+    Fix TCP I/O timeout and callback being used for HTTP/2
+
+  .. change::
+    :tags: Removals
+    :pullreq: 14184
+
+    Remove XPF support
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14195
+
+    Get rid of ``assert()``
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14205
+
+    Delint the DNSCrypt code base
+
+  .. change::
+    :tags: New Features
+    :pullreq: 14182
+    :tickets: 13750, 13374
+
+    Add the ability to set tags from dynamic block rules
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14330
+
+    Snmp-agent: Move net-snmp headers out of our headers
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14326
+
+    Use ``pdns::checked_stoi`` instead of ``sscanf`` for ``grepq``'s ms
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14392
+
+    Handle Quiche >= 0.22.0
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14376
+
+    Fix a race when accessing a backend health status
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14367
+
+    Refactoring of the configuration
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14495
+
+    Use atomic variables for the per-protocol latencies
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14588
+
+    Add configure args to --version output
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14577
+
+    Add Lua FFI accessors for EDNS version and extended rcode
+
+  .. change::
+    :tags: New Features, DNS over HTTPS, DNS over TLS
+    :pullreq: 14938
+
+    Allow setting keyLogFile to DoT/DoH backends (Karel Bilek)
+
+  .. change::
+    :tags: New Features, DNS over HTTP3
+    :pullreq: 15002
+
+    Add DoH3 headers, query string, path and scheme bindings
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14970
+
+    Boost > std optional (Rosen Penev)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14948
+
+    Clang-tidy: simplify some algorithms (Rosen Penev)
+
+  .. change::
+    :tags: New Features, DNS over HTTP3
+    :pullreq: 15029
+
+    Add the ability to set custom HTTP responses over DoH3
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15036
+
+    Improve error messages on security polling failures
+
+  .. change::
+    :tags: Removals
+    :pullreq: 15030
+
+    Remove ``TLSContext``
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15032
+
+    Use getAddressInfo() instead python daemonized subprocess (Denis Kadyshev)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15046
+
+    Better error when we cannot connect a backend socket
+
+  .. change::
+    :tags: New Features
+    :pullreq: 14969
+
+    Add a new, optional, YAML-based configuration format
+
+  .. change::
+    :tags: New Features, DNS over QUIC, DNS over HTTP3
+    :pullreq: 15024
+    :tickets: 14048
+
+    Gather Server Name Indication on QUIC (DoQ, DoH3) connections
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14724, 15115, 15138, 15149, 15163, 15184
+
+    Add meson support
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15118, 14134
+
+    Handle Quiche >= 0.23.0 since the API changed
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15120
+
+    Make hard-coded values configurable in xdp.py
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15132
+
+    Add support for multiple network interfaces in the XDP helper
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15137
+
+    Fix compatibility with ``boost::lockfree`` >= 1.87.0
+
+  .. change::
+    :tags: Improvements, Protobuf, DNSTAP
+    :pullreq: 15123
+    :tickets: 14861
+
+    Add pooling support for ``RemoteLoggerInterface`` (Ensar Sarajčić)
+
+  .. change::
+    :tags: Bug Fixes,
+    :pullreq: 15199
+
+    Use ``65535`` instead of ``255`` to block all types via eBPF
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15247
+    :tickets: 15246
+
+    Lua comboaddress: raw docs, cleanups, dnsdist add getRaw (Karel Bilek)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15158
+
+    Disable Lua configuration directives in YAML mode
+
+  .. change::
+    :tags: Improvements, DNSTAP
+    :pullreq: 15151
+    :tickets: 15108
+
+    Add support for dnstap new http_protocol field
+
+  .. change::
+    :tags: Improvements, Protobuf
+    :pullreq: 15298
+
+    Protobuf, support packetCacheHit and outgoingQueries fields
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 15300
+
+    Allow ``AF_NETLINK`` and ``AF_XDP`` under ``systemd``
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 15257
+
+    Limit # of proxy protocol-enabled outgoing TCP connections
+
 .. changelog::
   :version: 1.9.8
   :released: 17th of December 2024

diff --git a/pdns/dnsdistdist/docs/upgrade_guide.rst b/pdns/dnsdistdist/docs/upgrade_guide.rst
index cecd03104a72d546bef29dea4ae6d12c65b6ba8e..b221f36091cd2e0edaff425761e4da8602a53c32 100644 (file)
--- a/pdns/dnsdistdist/docs/upgrade_guide.rst
+++ b/pdns/dnsdistdist/docs/upgrade_guide.rst
@@ -11,6 +11,8 @@ Upgrade Guide
 
 Our eBPF filtering code no longer treats the ``255``/``ANY`` qtype as a special value intended to block queries for all types, and will only block ``ANY`` queries instead. The reserved ``65535`` value now can be used to block queries for all qtypes.
 
+XPF support has been removed.
+
 1.8.x to 1.9.0
 --------------