notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2023Q4
dnsdist Highly DNS-, DoS- and abuse-aware loadbalancer
1.8.2 dns on this many watch lists=0 search for ports that depend on this port This port version is marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.8.2Version of this port present on the latest quarterly branch.
Maintainer: tremere@cainites.net search for ports maintained by this maintainer
Port Added: 2023-10-28 22:27:28
Last Update: 2023-10-28 22:24:48
Commit Hash: f4e4d7c
Also Listed In: net
License: GPLv2 ISCL MIT
WWW:
https://dnsdist.org/
Description:
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life is to route traffic to the best server, delivering top performance to legitimate users while shunting or blocking abusive traffic. dnsdist is dynamic, its configuration language is Lua and it can be can be changed at runtime, and its statistics can be queried from a console-like interface or an HTTP API. dnsdist is used to protect and optimize the DNS traffic of hundreds of millions of internet subscribers. * IPv4, UDP/TCP * IPv6, UDP/TCP, 100% compliant * Remotely pollable statistics for real time graphing * High performance * SNMP statistics bridge (read only) * Dynamically route queries to backend servers * Advanced anti-spoofing measures * Reconfiguration without downtime * Kernel based filtering of harmful traffic, rejecting packets at 'line speed' * Internal Lua-based scripted answer generation * Question interception, answer reconditioning, NXDOMAIN redirection - Including 'block lists' and security measures * Built-in memory efficient cache for increased performance * Ability to continue serving data from cache for non-responsive backends * Smart rate limiting per user, per subnet, per domain * Capable of writing dynamic rules to block harmful traffic
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (11 items)
Collapse this list.
  1. /usr/local/share/licenses/dnsdist-1.8.2/catalog.mk
  2. /usr/local/share/licenses/dnsdist-1.8.2/LICENSE
  3. /usr/local/share/licenses/dnsdist-1.8.2/GPLv2
  4. /usr/local/share/licenses/dnsdist-1.8.2/ISCL
  5. /usr/local/share/licenses/dnsdist-1.8.2/MIT
  6. sbin/dnsdist
  7. man/man1/dnsdist.1.gz
  8. @sample etc/dnsdist/dnsdist.conf.sample
  9. @owner
  10. @group
  11. @mode
Collapse this list.
Dependency lines:
  • dnsdist>0:dns/dnsdist
To install the port:
cd /usr/ports/dns/dnsdist/ && make install clean
To add the package, run one of these commands:
  • pkg install dns/dnsdist
  • pkg install dnsdist
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: dnsdist
Flavors: there is no flavor information for this port.
NOT_FOR_ARCHS: i386
distinfo:
TIMESTAMP = 1697035185 SHA256 (dnsdist-1.8.2.tar.bz2) = 6688f09b2c52f9bf935f0769f4ee28dd0760e5622dade7b3f4e6fa3776f07ab8 SIZE (dnsdist-1.8.2.tar.bz2) = 1492995

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. libatomic_ops.a : devel/libatomic_ops
  2. gmake>=4.3 : devel/gmake
  3. pkgconf>=1.3.0_1 : devel/pkgconf
Library dependencies:
  1. libboost_serialization.so : devel/boost-libs
  2. libh2o-evloop.so : www/h2o
  3. libre2.so : devel/re2
  4. libsodium.so : security/libsodium
  5. libcdb.so : databases/tinycdb
  6. libgnutls.so : security/gnutls
  7. liblmdb.so : databases/lmdb
  8. libedit.so.0 : devel/libedit
  9. liblua-5.4.so : lang/lua54
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for dnsdist-1.8.2: DNSTAP=off: dnstap support (see dnstap.info) SNMP=off: SNMP network protocol support ====> Secure network connection support via TLS: you have to choose at least one of them GNUTLS=on: SSL/TLS support via GnuTLS OPENSSL=on: SSL/TLS support via OpenSSL ====> Key Value Stores CDB=on: CDB backend LMDB=on: LMDB backend ====> Options available for the single EXTLUA: you have to select exactly one of them LUA=on: Use lang/lua LUAJIT=off: Use luajit ===> Use 'make config' to modify these settings
Options name:
dns_dnsdist
USES:
bison:alias compiler:c++14-lang cpe gmake libedit libtool localbase pkgconfig tar:bz2 lua ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://downloads.powerdns.com/releases/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.8.2
28 Oct 2023 22:24:48
commit hash: f4e4d7cd9102f2775257bc47c9868e40199642d5commit hash: f4e4d7cd9102f2775257bc47c9868e40199642d5commit hash: f4e4d7cd9102f2775257bc47c9868e40199642d5commit hash: f4e4d7cd9102f2775257bc47c9868e40199642d5 files touched by this commit This port version is marked as vulnerable.
Dave Cottlehuber (dch) search for other commits by this committer
dns/dnsdist: update to 1.8.2

https://dnsdist.org/changelog.html#change-1.8.2

This release fixes the HTTP2 rapid reset attack, and requires
the updated libh2o fix.

Security:	CVE-2023-44487
(cherry picked from commit 7710d75e67bc4e24985d7a81066a7e086e49bb69)

Number of commits found: 1