dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life
is to route traffic to the best server, delivering top performance to
legitimate users while shunting or blocking abusive traffic.
dnsdist is dynamic, its configuration language is Lua and it can be can be
changed at runtime, and its statistics can be queried from a console-like
interface or an HTTP API.
dnsdist is used to protect and optimize the DNS traffic of hundreds of millions
of internet subscribers.
* IPv4, UDP/TCP
* IPv6, UDP/TCP, 100% compliant
* Remotely pollable statistics for real time graphing
* High performance
* SNMP statistics bridge (read only)
* Dynamically route queries to backend servers
* Advanced anti-spoofing measures
* Reconfiguration without downtime
* Kernel based filtering of harmful traffic, rejecting packets at 'line speed'
* Internal Lua-based scripted answer generation
* Question interception, answer reconditioning, NXDOMAIN redirection
- Including 'block lists' and security measures
* Built-in memory efficient cache for increased performance
* Ability to continue serving data from cache for non-responsive backends
* Smart rate limiting per user, per subnet, per domain
* Capable of writing dynamic rules to block harmful traffic
===> The following configuration options are available for dnsdist-2.1.2_1:
DNSTAP=off: dnstap support (see dnstap.info)
IPCIPHER=on: ipcipher support (requires OpenSSL)
SNMP=off: SNMP network protocol support
====> Secure network connection support via TLS: you have to choose at least one of them
GNUTLS=on: SSL/TLS support via GnuTLS
OPENSSL=on: SSL/TLS support via OpenSSL
====> Key Value Stores
CDB=on: CDB backend
LMDB=on: LMDB backend
====> Lua library: you have to select exactly one of them
LUA=on: Use lang/lua
LUAJIT=off: Use luajit
===> Use 'make config' to modify these settings
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
(Only the first 15 lines of the commit message are shown above )
all: drop support for FreeBSD 13, mips and risc64sf
Reviewed by: many (*)
Differential Revision: https://reviews.freebsd.org/D55624
Differential Revision: https://reviews.freebsd.org/D55642 (merged in from bofh)
many (*)
acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
nobutaka pkubaj se tagattie thj
Anton Saietskii
GenericRikka
Gert Doering
Jan Bramkamp
Oleh Hushchenkov
Oleksandr Kryvulia
Ralf van der Enden
Yamagi
desktop kde python tcltk office
lang/luajit: update to v2.1
Disconnect lang/luajit-devel from the build, will be removed soon.
Bump PORTREVISIONs for the consumers.
Discussed with: adamw
PR: 225342
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
dns: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* Aaron Dalton <aaron@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Samorukov <samm@freebsd.org>
* Alexey Dokuchaev <danfe@FreeBSD.org>
* Allan Jude <allanjude@freebsd.org>
* Amar Takhar <verm@drunkmonk.net>
* Anders Nordby <anders@fix.no>
* Andrew Greenwood <greenwood.andy@gmail.com>
* Anton Berezin <tobez@FreeBSD.org>
* Ashish SHUKLA <ashish@FreeBSD.org>
* Attila Nagy <bra@fsn.hu>
(Only the first 15 lines of the commit message are shown above )
Fix spelling mistakes, typos, poor wording, hyphenation, jargonisms,
contractions, "<portname> is ..." cases, missing Oxford commas, and
other miscellaneous style bugs in the COMMENT line.
Chase devel/re2 shlib bump
Upstream has changed their minds about so.10 and reverted to so.9
The only changes were private.
PR: ports/253255
Reported by: sunpoet
dns/dnsdist: Update to 1.5.1
Update to dnsdist 1.5.1 and make rc.d script start earlier
PR: 250026
Submitted by: Juraj Lutter, Ralf van der Enden (maintainer)
dns/dnsdist: update 1.4.0 -> 1.5.0
- Please check the upgrade guide before upgrading:
https://dnsdist.org/upgrade_guide.html#to-1-5-x
- Reworked the Lua options. You can now choose from Lua,
LuaJIT and LuaJIT-openresty
- Also added options for CDB and LMDB Key Value stores
PR: 248385
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Relnotes: https://dnsdist.org/changelog.html
dns/dnsdist: Update to 1.4.0
- Lint Makefile
- Some configure switches changed from --enable to --with
- Rename FSTRM to DNSTAP
- Add DoH support
- Switch to LuaJIT-Openresty (when LUAJIT is selected instead of LUA)
- Remove unnecessary patch (files/patch-dnsdist-lua-vars.cc)
- Major improvement in the rc script: allowing multiple daemons
- Start using -C and %%ETCDIR%% causing the default path for dnsdist.conf
changes to usually /usr/local/etc/dnsdist/ in which you can store single
or multiple config files, includes, key-files for DNSCrypt, key/certs for
DoH, etc.
Also, change maintainer to Ralf van der Enden.
Changelog:
https://dnsdist.org/changelog.html
PR: 242125
Submitted by: Jorn Ane de Jong, Ralf van der Enden, Leo Vandewoestijne
Reviewed by: cpm@, Sascha Biberhofer, Yann Kerherve
Approved by: maintainer
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
- Fix building against Lua(JIT). The configuration switch change since version
1.3.2.
When building without poudriere, it would always pick LuaJIT over Lua if both
are installed,
basically ignoring the configuration knob.
- Bump PORTREVISION
PR: 233142 (based on)
Submitted by: Ralf van der Enden <tremere@cainites.net>
MFH: 2018Q4
dns/dnsdist: replace r482789 with upstream version
Upstream chose more verbose fix via if() construct where indeterminate
value takes false branch. Similar behavior to explict conversion.
dns/dnsdist: unbreak with boost 1.69
dnsdist-lua.cc:76:10: error: no viable conversion from returned value of type
'boost::logic::tribool' to function return type 'bool'
return g_noLuaSideEffect==true;
^~~~~~~~~~~~~~~~~~~~~~~
PR: 232525
dns/dnsdist: Update to 1.3.2
- Add a note to UPDATING about breaking changes
Changelog: https://dnsdist.org/changelog.html#change-1.3.2
PR: 229742
Submitted by: Ralf van der Enden <tremere@cainites.net>
Approved by: cpm
