1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-24 04:33:24 +00:00
freebsd-ports/dns
Kurt Jaeger 2a681458f9 dns/nsd: upgrade 4.2.4 -> 4.3.0
This port incorporates also the proposed bug fix at bug #242367

Major changes:

This release adds cpu affinity.  By pinning a server process to a
specific cpu, having a separate network card also for that cpu, and
an interface address also for that server process, the throughput is
increased.  This increases performance of the nameserver.

Sparse TSIG signing support is removed, to comply with the latest tsig
standard update draft.

There is a feature to drop update queries, with opcode UPDATE,
with nsd.conf option drop-updates.

4.3.0
=========
FEATURES:
- Fix to use getrandom() for randomness, if available.
- Fix #56: Drop sparse TSIG signing support in NSD.
  Sign every axfr packet with TSIG, according to the latest
  draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1.
- Merge pull request #59 from buddyns: add FreeBSD support
  for conf key ip-transparent.
- Add feature to pin server processes to specific cpus.
- Add feature to pin IP addresses to selected server processes.
- Set process title to identify individual processes.
- Merge PR#22: minimise-any: prefer polular and not large RRset,
  from Daisuke Higashi.
- Add support for SO_BINDTODEVICE on Linux.
- Add support for SO_SETFIB on FreeBSD.
- Add feature to drop queries with opcode UPDATE.

BUG FIXES:
- Fix fname null check of fname in namedb_read_zonefile.
- Fix implicit cast of size in udb_radnode_array_grow.
- Fix ignore of return value of ssl_printf in remote.c.
- Fix unused check of fd in parent_handle_reload_command.
- Attempt to fix signedness of nscount lookup in ixfr query_process.
- Fix identical branches for ssl_print of errors in remote.c.
- Fix type cast bounds, signedness of opt_rdlen in edns_parse_record.
- Fix to separate header and data lines in parse_zone_list_file.
- Fix to define max number of EDNS records we are willing to
  spend time on.
- Fix size of string len and capacity type cast in udbradtree.
- Fix to protect rrcount in tsig_find_rr from overflow.
- Annotate radix_find_prefix_node not reachable trail code.
- Fix to protect rrcount in packet_find_notify_serial from overflow.
- Fix to close socket on error in create_tcp_accept_sock.
- Fix to log on failure to chmod for socket for remote control.
- Fix to remove unneeded if in open of socket for remote control.
- Fix to restore input parameter on call failure in create_dirs.
- Please checker by terminating and initialising string read
  by remote control.
- Fix to define upper bounds on rr counts read from untrusted packet
  data.
- Separate acl_addr_match_range functions for ip4 and ip6, to
  please checkers.
- Avoid unused variable warning in new match_range_v4 function.
- Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters.
- use-systemd is ignored in nsd.conf, when NSD is compiled with
  libsystemd it always signals readiness, if possible.
- Note that use-systemd is not necessary and ignored in man page.
- Fix unreachable code in ssl set options code.
- Fix bad shift in assertion code analyzer complaint.
- Fix responses for IXFR so that the authority section is not echoed
  in the response.
- Merge PR#60: Minor portability fixes from michaelforney, with
  avoid pointer arithmetic on void* and avoid unnecessary VLA.
- Fix that the retry wait does not exceed one day for zone transfers.

CHANGES:
- Set FD_CLOEXEC on opened sockets.

PR:		244886, 242367[2]
Submitted by:	Jaap Akkerhuis <jaap@nlnetlabs.nl> (maintainer)
Reported by:	Leo Vandewoestijne <freebsd@dns.company> [2]
Relnotes:	https://github.com/NLnetLabs/nsd/blob/NSD_4_3_0_REL/doc/ChangeLog
2020-03-18 18:54:45 +00:00
..
adns
adsuck
amass dns/amass: Update 3.4.3 -> 3.4.4 2020-02-17 18:13:04 +00:00
ares
autotrust
axfr2acl
bind9-devel Update to latest commit. 2020-03-02 16:56:17 +00:00
bind911 Add forgotten CONFLICTS lines. 2020-02-20 09:09:00 +00:00
bind914 Fix expiration date, it is 3 months after 9.16's release. 2020-02-24 12:32:32 +00:00
bind916 Import patch from upstream to fixa tcp client quota exhaustion issue. 2020-03-06 10:24:11 +00:00
bind-tools Switch dns/bind-tools to the new dns/bind916. 2020-02-20 09:32:05 +00:00
bindgraph
bundy Unmark certain ports as broken on powerpc64 elfv2, after a trybroken run. 2020-03-18 02:20:03 +00:00
c-ares
checkdns
cli53 dns/cli53: Update to 0.8.17 2020-03-10 01:38:10 +00:00
coredns dns/coredns: Update 1.6.2 -> 1.6.7 2020-02-02 00:30:42 +00:00
credns
crossip
curvedns
ddclient
ddns
denominator
dhisd
djbdns
djbdns-tools
dlint
dnrd
dns2blackhole
dns2tcp Unbreak by fetching distfile from Debian mirror 2020-02-12 22:58:22 +00:00
dns_balance
dnsblast
dnscap Update to 1.10.4 2020-03-03 18:50:03 +00:00
dnscheckengine
dnscrypt-proxy2 dns/dnscrypt-proxy2: update 2.0.36 to 2.0.39 2020-02-04 11:49:41 +00:00
dnscrypt-wrapper
dnsdbck
dnsdbq
dnsdist Remove useless dependency on bison 2020-03-10 11:12:30 +00:00
dnsenum
dnsflood
dnsforwarder
dnshistory
dnsjava
dnsmasq dns/dnsmasq: Remove obsolete REINPLACE_CMD line. 2020-02-23 13:50:25 +00:00
dnsmasq-devel dns/dnsmasq-devel: Update to 2.81rc3 (from rc2). 2020-03-09 21:29:24 +00:00
dnsmax-perl
dnsperf
dnsproxy
dnsrecon
dnsreflector
dnstable
dnstable-convert
dnstop
dnstracer
dnsutl
dnsviz
dnswalk
dnswall
doc
doh-proxy lang/rust: Update to 1.42.0 2020-03-12 19:39:24 +00:00
dq
drool
dsc
dsp
dynip
erlang-idna
fastresolve
firedns
flamethrower
fpdns
gdnsd
gdnsd2
gdnsd3
gen6dns
getdns
hesiod
hostdb
idnkit
idnkit2
inadyn Update MAINTAINER: use @FreeBSD.org 2020-02-13 14:27:46 +00:00
inadyn-mt dns/inadyn-mt: update REINPLACE_CMD 2020-03-17 12:34:04 +00:00
ipcheck
ironsides
kadnode
kf5-kdnssd Update KDE Frameworks to 5.67.0 2020-02-19 18:49:22 +00:00
knock
knot2 dns/knot2: upgrade 2.9.1 -> 2.9.3 2020-03-05 20:08:57 +00:00
knot2-lib
knot-resolver dns/knot-resolver: upgrade 4.2.2 -> 5.0.1 2020-02-15 18:19:15 +00:00
ldapdns
ldns dns/ldns: set MAKE_JOBS_UNSAFE=yes 2020-02-29 12:00:57 +00:00
libasr
libasr-devel
libbind
libdjbdns
libidn
libidn2
libnspsl
libpsl devel/icu: update to 66.1 2020-03-13 09:47:16 +00:00
linux-c7-libasyncns
maradns
mdnsd
mDNSResponder_nss dns/mDNSResponder_nss: Update to 1096.0.2 2020-03-08 20:29:59 +00:00
mydns
mydns-ng
namesilo_ddns
nextdns Update to 1.4.33 2020-02-23 08:16:04 +00:00
noip
nsd dns/nsd: upgrade 4.2.4 -> 4.3.0 2020-03-18 18:54:45 +00:00
nsec3walker Deprecate some ports using deprecated version of python 2020-03-08 17:01:46 +00:00
nslint
nsnotifyd
nsping
nss_mdns
nss_resinit
opendd
opendnssec dns/opendnssec: adding EOL message to opendnssec-1.4.14 2020-03-08 13:55:05 +00:00
opendnssec2 dns/opendnssec2: upgrade 2.1.4 -> 2.1.6 2020-02-11 20:11:57 +00:00
openresolv
p5-AnyEvent-CacheDNS
p5-AnyEvent-DNS-EtcHosts
p5-App-DSC-DataTool
p5-BIND-Conf_Parser
p5-BIND-Config-Parser
p5-Data-Validate-Domain
p5-DNS-Config
p5-DNS-EasyDNS
p5-DNS-Ldns
p5-DNS-Zone
p5-DNS-ZoneParse
p5-DSC
p5-IO-Async-Resolver-DNS
p5-Mozilla-PublicSuffix Bump PORTREVISION for dns/public_suffix_list update 2020-02-03 19:45:11 +00:00
p5-Net-Amazon-Route53
p5-Net-Bonjour
p5-Net-DNS Update to 1.22 2020-02-14 19:48:44 +00:00
p5-Net-DNS-Async
p5-Net-DNS-Check
p5-Net-DNS-Codes
p5-Net-DNS-Lite
p5-Net-DNS-Match
p5-Net-DNS-Resolver-Mock Update to 1.20200215 2020-02-17 19:42:47 +00:00
p5-Net-DNS-Resolver-Programmable
p5-Net-DNS-RR-SRV-Helper
p5-Net-DNS-SEC Update to 1.15 2020-02-04 17:53:52 +00:00
p5-Net-DNS-TestNS
p5-Net-DNS-ToolKit
p5-Net-DNS-Zone-Parser
p5-Net-DNS-ZoneFile-Fast
p5-Net-DNSBL-MultiDaemon
p5-Net-DNSBL-Statistics
p5-Net-Domain-ExpireDate
p5-Net-Domain-TLD
p5-Net-DRI
p5-Net-LibIDN
p5-Net-LibIDN2
p5-Net-Nslookup
p5-Net-RBLClient
p5-Net-RNDC
p5-POE-Component-Client-DNS
p5-POE-Component-Client-DNS-Recursive
p5-POE-Component-Client-DNSBL
p5-POE-Component-Resolver
p5-POE-Component-Server-DNS
p5-POE-Filter-DNS-TCP
p5-Stanford-DNSserver
p5-Tie-DNS
p5-URBL-Prepare
packetq
pdnsd
pear-File_DNS
pear-Horde_Idna
pear-Net_DNS2 hand over Maintainership to miwi 2020-03-06 17:33:54 +00:00
powerdns
powerdns-recursor Update to 4.2.1 2020-02-17 13:10:01 +00:00
public_suffix_list Update SLAVEDIRS after r525222 2020-02-04 18:16:51 +00:00
py-adns
py-aiodns
py-cloudflare
py-dns
py-dns-lexicon
py-dnschain Deprecate a few ports 2020-02-23 15:25:53 +00:00
py-dnspython
py-easyzone
py-idna
py-idna_ssl
py-idnkit2 Deprecate a few ports 2020-02-23 15:25:53 +00:00
py-ldns
py-localzone Update to 0.9.6 2020-02-02 11:00:51 +00:00
py-namebench
py-ns1-python
py-publicsuffix Bump PORTREVISION for dns/public_suffix_list update 2020-02-03 19:45:11 +00:00
py-publicsuffix2 Add py-publicsuffix2 2.20191221 2020-02-04 17:58:34 +00:00
py-publicsuffixlist Update to 0.6.12 2020-02-06 19:26:41 +00:00
py-py3dns
py-pybonjour Update MAINTAINER: use @FreeBSD.org 2020-02-13 14:27:46 +00:00
py-pycares
py-pydnstable
py-pywdns Deprecate a few ports 2020-02-23 15:25:53 +00:00
py-tld Update to 0.11.10 2020-03-01 08:23:32 +00:00
py-tldextract
qmdnsengine
radns
rbldnsd
rbllookup
rbllookup-ng
rdap
renewck
rpsl2acl
rubygem-dnsruby
rubygem-gitlab-net-dns
rubygem-idn-ruby
rubygem-net-dns
rubygem-public_suffix Bump PORTREVISION for dns/public_suffix_list update 2020-02-03 19:45:11 +00:00
rubygem-public_suffix_service Bump PORTREVISION for dns/public_suffix_list update 2020-02-03 19:45:11 +00:00
rubygem-simpleidn
rubygem-validates_hostname Update to 1.0.10 2020-02-22 15:57:42 +00:00
samba-nsupdate
scavenge
sheerdns
sleuth
sshfp Deprecate some ports using deprecated version of python 2020-03-08 17:01:46 +00:00
subfinder dns/subfinder: Update 2.3.1 -> 2.3.2 2020-02-15 05:03:39 +00:00
tinystats
totd
udns
unbound dns/unbound: update 1.9.6 -> 1.10.0 2020-02-22 13:59:26 +00:00
updatedd
utdns
validns
vhostcname
vizone
void-zones-tools
walker
wdns
whoseip
wrapsrv
yadifa
zkt dns/zkt: update 1.1.2 -> 1.1.4 2020-02-24 15:38:21 +00:00
zonecheck
zonenotify
Makefile Add the newly minted BIND9 9.16. 2020-02-20 09:06:58 +00:00