]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Use 65535 instead of 255 to block all types via eBPF 15199/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 21 Feb 2025 13:38:55 +0000 (14:38 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 21 Feb 2025 13:43:54 +0000 (14:43 +0100)
commit33e1cc66bfde71df84d84900ea7e93b465b15967
treed4709b4ecd275f73a711d77117acaede93041dde
parent2a2919ef71dce50f9a0349e54a0466b3d9150de5
dnsdist: Use 65535 instead of 255 to block all types via eBPF

Our eBPF filtering code used to treat the `255` (`ANY`) qtype as a
special value meaning to block queries for all types. Unfortunately
it prevented blocking queries for the `ANY` type only, which is a
legitimate use-case.
After this commit `255` is no longer a special value, and `65535`
(a reserved value) is used instead to represent all types.

This is a breaking change that should NOT be backported.
contrib/xdp-filter.ebpf.src
contrib/xdp.py
pdns/dnsdistdist/bpf-filter.ebpf.src
pdns/dnsdistdist/bpf-filter.hh
pdns/dnsdistdist/bpf-filter.main.ebpf
pdns/dnsdistdist/bpf-filter.qname.ebpf
pdns/dnsdistdist/dnsdist-lua-bindings.cc
pdns/dnsdistdist/docs/advanced/ebpf.rst
pdns/dnsdistdist/docs/reference/ebpf.rst
pdns/dnsdistdist/docs/upgrade_guide.rst
regression-tests.dnsdist/test_EBPF.py