- enable dns over tls support: new BR for gnutls

- enable dnstap support: new BR for libfstrm

- update to 1.3.0

OBS-URL: https://build.opensuse.org/package/show/server:dns/dnsdist?expand=0&rev=6

dnsdist-1.2.1.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dc71baebc1fe024035dd3fdc7b08a0ad5aa834bc9438f3152adeb881d2323012
-size 866549

dnsdist-1.3.0.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:aa67cd4db8404a13ed4ed1097dd850203dab8a327372f72bb140df11ef7eba08
+size 924183

dnsdist.changes

@@ -1,3 +1,109 @@
+-------------------------------------------------------------------
+Sun Apr  1 23:56:33 UTC 2018 - mrueckert@suse.de
+
+- enable dns over tls support: new BR for gnutls
+- enable dnstap support: new BR for libfstrm
+
+-------------------------------------------------------------------
+Sun Apr  1 23:40:36 UTC 2018 - mrueckert@suse.de
+
+- update to 1.3.0
+  https://blog.powerdns.com/2018/03/30/dnsdist-1-3-0-released/
+  - New Features
+    - Add an optional status parameter to Server:setAuto().
+      References: pull request 5625
+    - Add inClientStartup() function. References: pull request 6072
+    - Add tag-based routing of queries. References: pull request
+      6037
+    - Add experimental DNS-over-TLS support.  References: pull
+      request 6176, pull request 6177, pull request 6117, pull
+      request 6175, pull request 6189
+    - Add simple dnstap support (Justin Valentini, Chris
+      Hofstaedtler). References: pull request 5201, pull request
+      6170
+    - Add experimental XPF support based on
+      draft-bellis-dnsop-xpf-04. References: #5654, #5079, pull
+      request 6220, pull request 5594
+    - Add ERCodeRule() to match on extended RCodes (Chris
+      Hofstaedtler). References: pull request 6147
+    - Add TempFailureCacheTTLAction() (Chris Hofstaedtler).
+      References: pull request 6003
+    - Add DynBlockRulesGroup to improve processing speed of the
+      maintenance() function by reducing memory usage and not
+      walking the ringbuffers multiple times. References: pull
+      request 6391
+    - Add console ACL functions.  References: #4654, pull request
+      6399
+    - Allow adding EDNS Client Subnet information to a query before
+      looking in the cache. This allows serving ECS enabled answers
+      from the cache when all servers in a pool are down.
+      References: #6098, pull request 6400
+  - Improvements
+    - Add cache sharding, recvmmsg and CPU pinning support. With
+      these, the scalability of dnsdist is drastically improved.
+      References: #5202, #5859, pull request 5576, pull request
+      5860
+    - Add burst option to MaxQPSIPRule() (42wim).  References: pull
+      request 5970
+    - Add Pools, cacheHitResponseRules to the API.  References:
+      pull request 6022
+    - Add a class option to health checks.  References: #5748, pull
+      request 5929
+    - Add UUIDs to rules, this allows tracking rules through
+      modifications and moving them around.  References: pull
+      request 6030
+    - Apply ResponseRules to locally generated answers (Chris
+      Hofstaedtler).  References: #6182, pull request 6185
+    - Report LuaAction() and LuaResponseAction() failures in the
+      log and send SERVFAIL instead of not answering the query
+      (Chris Hofstaedtler).  References: pull request 6283
+    - Unify global statistics accounting (Chris Hofstaedtler).
+      References: pull request 6289
+    - Speed up the processing of large ring buffers. This change
+      will make dnsdist more scalable with a large number of
+      different clients.  References: pull request 6366, pull
+      request 6350
+    - Make custom addLuaAction() and addLuaResponseAction()
+      callback’s second return value optional.  References: #6346,
+      pull request 6363
+    - Add “server-up” metric count to Carbon Reporting (Lowell
+      Mower).  References: pull request 6327
+    - Add xchacha20 support for DNSCrypt.  References: pull request
+      6045, pull request 6382
+    - Scalability improvement: Add an option to use several source
+      ports towards a backend.  References: pull request 6317
+    - Add ‘?’ and ‘help’ for providing help() output on dnsdist -c
+      (Kirill Ponomarev, Chris Hofstaedtler).  References: #4845,
+      pull request 5866, pull request 6375
+    - Replace the Lua mutex with a rw lock to limit contention.
+      This improves the processing speed and parallelism of the
+      policies.  References: pull request 6190, pull request 6381
+    - Ensure dnsdist compiles on NetBSD (Tom Ivar Helbekkmo).
+      References: pull request 6146
+    - Also log eBPF dynamic blocks, as regular dynamic block
+      already are.  References: #5845, pull request 5845
+    - Ensure large numbers are shown correctly in the API.
+      References: #6211, pull request 6401
+    - Add option to showRules() to truncate the output length.
+      References: #5763, pull request 6402
+    - Fix several warnings reported by clang’s analyzer and
+      cppcheck, should lead to small performance increases.
+      References: pull request 6407
+  - Bug Fixes
+    - Handle SNMP alarms so we can reconnect to the master.
+      References: #5327, pull request 5328
+    - Fix signed/unsigned comparison warnings on ARM.  References:
+      #5489, pull request 5597
+    - Keep trying if the first connection to the remote logger
+      failed References: pull request 5770
+    - Fix escaping unusual DNS label octets in DNSName is off by
+      one (Kees Monshouwer). References: pull request 6018
+    - Avoid assertion errors in NewServer() (Chris Hofstaedtler).
+      References: pull request 6403
+  - Removals
+    - Remove the --daemon option from dnsdist. References: #6329,
+      pull request 6394
+
 -------------------------------------------------------------------
 Fri Feb 16 10:30:23 UTC 2018 - adam.majer@suse.de
 

dnsdist.spec

@@ -58,7 +58,7 @@
 %endif
 
 Name:           dnsdist
-Version:        1.2.1
+Version:        1.3.0
 Release:        0
 License:        GPL-2.0
 Summary:        A highly DNS-, DoS- and abuse-aware loadbalancer
@@ -74,6 +74,8 @@ BuildRequires:  apparmor-profiles
 %endif
 BuildRequires:  boost-devel >= 1.35.0
 BuildRequires:  gcc-c++ >= 4.8
+BuildRequires:  libfstrm-devel
+BuildRequires:  gnutls-devel
 %if %{with dnsdist_sodium}
 BuildRequires:  libsodium-devel
 %endif
@@ -129,6 +131,7 @@ Do NOT take this into production, but please DO let us know your thoughts!
 
 %build
 %configure \
+  --enable-dns-over-tls \
 %if %{with dnsdist_sodium}
   --enable-libsodium --enable-dnscrypt \
 %endif
@@ -194,7 +197,7 @@ getent passwd %{name} >/dev/null || \
 %{_sbindir}/dnsdist
 %{_mandir}/man1/dnsdist.1*
 %if %{with systemd}
-%{_unitdir}/%{name}.service
+%{_unitdir}/%{name}*.service
 %if 0%{?suse_version}
 %{_sbindir}/rc%{name}
 %endif