487e06c50d
Accepting request 1173740 from server:dns
Ana Guerrero2024-05-14 11:37:57 +00:00
27ccbfedf7
- update to 1.9.4: (bsc#1224001, CVE-2024-25581) * Fix “C++ One Definition Rule” warnings in XSK * Fix DNS over plain HTTP broken by reloadAllCertificates() * Fix a crash in incoming DoH with nghttp2 * Fix handling of XFR requests over DoH - changes since 1.9.0: * Support “no server available” result from Lua FFI load-balancing policies * Release incoming TCP connection right away on backend failure * Use server preference algorithm for ALPN selection * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider * Fix DNS over HTTP connections/queries counters with the nghttp2 provider * Fix first IPv6 console connection being rejected * Fix XSK-enabled check when reconnecting a backend * Properly handle a failure of the first lazy health-check * Also handle EHOSTUNREACH as a case for reconnecting the socket
Adam Majer2024-05-13 15:46:50 +00:00
bb714bdd65
Accepting request 1147125 from server:dns
Ana Guerrero2024-02-16 20:42:57 +00:00
2ed11f118b
- update to 1.9.0: * Fall back to libcrypto for authenticated encryption * Optimize the DoQ packet handling path * DNSName: Correct len and offset types * DNSName: Optimize parsing of uncompressed labels * enable DNS-over-HTTPS via nghttp2 library usage
Adam Majer2024-02-16 15:16:07 +00:00
6f722dc84a
Accepting request 1146199 from server:dns
Ana Guerrero2024-02-13 21:42:15 +00:00
b0546db78c
Accepting request 1145445 from home:dimstar:Factory
Adam Majer2024-02-12 14:23:19 +00:00
0214b0889c
- update to 1.7.3 No functional changes since last version - Remove some build dependencies, like GNUTLS - Remove DoH since it requires another http server that is not even in Factory. It's enabled by optinally - Build on 32bit arches by using 64bit time_t there
Adam Majer2023-02-10 12:25:33 +00:00
32510f2d0e
- make re2 conditional again to fix build on sle15
Marcus Rueckert2022-01-17 16:53:51 +00:00
d3c2b9da2a
- exclude all 32bit architectures as dnsdist wants to run on systems where time_t is larger than 4 bytes
Marcus Rueckert2022-01-17 16:27:22 +00:00
f83921977a
- add BuildRequires for doh build conditional - make sure we build with epf and dnstap - enable libcap support (new BR: libcap-devel) - for luajit support if we build with luajit build conditional - prepare lmdb support: fails atm as we do not ship the pkgconfig files
Marcus Rueckert2019-11-01 06:41:27 +00:00
334fea5754
- dont_return_garbage.patch: return a value from function that wants a return.
Adam Majer2018-11-08 15:23:57 +00:00
8194227cd7
- update to 1.3.3 https://blog.powerdns.com/2018/11/08/dnsdist-1-3-3-released/ - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511) - New Features - Add consistent hash builtin policy - Add EDNSOptionRule - Add DSTPortRule - Make getOutstanding usable from both lua and console - Added :excludeRange and :includeRange methods to DynBPFFilter class - Add Prometheus stats support - Name threads in the programs - Support the NXDomain action with dynamic blocks - Add security polling - Add a PoolAvailableRule to easily add backup pools - Improvements - Get rid of some allocs/copies in DNS parsing - Set a correct EDNS OPT RR for self-generated answers - Fix a sign-comparison warning in isEDNSOptionInOPT() - Add warning rates to DynBlockRulesGroup rules - Add support for exporting a server id in protobuf - dnsdist did not set TCP_NODELAY, causing needless latency - Add a setting to control the number of stored sessions - Wrap GnuTLS and OpenSSL pointers in smart pointers - Add a ‘creationOrder’ field to rules - Fix return-type detection with boost 1.69’s tribool - Fix format string issue on 32bits ARM - Wrap TCP connection objects in smart pointers - Add the setConsoleOutputMaxMsgSize function
Adam Majer2018-11-08 14:56:59 +00:00
e97eb4c717
- Comment out the control socket statement and add a commented out line for setKey as it is in the upstream configuration. The old default configuration did not work anymore anyway and this makes it clearer that you need both lines.
Marcus Rueckert2018-07-10 16:39:36 +00:00
9d9d5b6871
- fix build on TW: - no longer look for libsystemd-daemon - enable re2
Marcus Rueckert2017-02-19 18:41:16 +00:00
ace5b69128
- update to 1.1.0 dnsdist 1.1.0 has seen a significant amount of development, mostly based on feedback from they many 1.0 deployments. The majority of the new features have already been taken into production by pre-release and beta users. Highlights include: - TeeAction: send responses to a second nameserver, but ignore responses. Used to test new installations on existing traffic. Also used by the Yeti rootserver project. - Response rules which act on received responses - AXFR/IXFR support, including filtering options - Linux kernel based query type and query name filtering (eBPF), for very high speed packet rejection. Includes counters and statistics - Query counting infrastructure (contributed by TransIP’s Reinier Schoof) For the many other new features, improvements and bug fixes, please see the dnsdist website for the more complete changelog and the current documentation. http://dnsdist.org/changelog/#dnsdist-110http://dnsdist.org/README/ - refresh dnsdist_bindir.patch to apply cleanly again
Marcus Rueckert2016-12-30 01:47:54 +00:00
Adam Majer
Ana Guerrero
Marcus Rueckert
Dominique Leuenberger