notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
I started running short on disk space for the non-production FreshPorts hosts. This time, I have decided to ask for donations. See my recent blog post which points to my Patreon account.
Port details on branch 2025Q3
dnsdist Highly DNS-, DoS- and abuse-aware loadbalancer
1.9.11 dns on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.9.11Version of this port present on the latest quarterly branch.
Maintainer: tremere@cainites.net search for ports maintained by this maintainer
Port Added: 2025-09-26 15:42:07
Last Update: 2025-09-26 15:37:38
Commit Hash: d97b8c7e
Also Listed In: net
License: GPLv2 ISCL MIT
WWW:
https://dnsdist.org/
Description:
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life is to route traffic to the best server, delivering top performance to legitimate users while shunting or blocking abusive traffic. dnsdist is dynamic, its configuration language is Lua and it can be can be changed at runtime, and its statistics can be queried from a console-like interface or an HTTP API. dnsdist is used to protect and optimize the DNS traffic of hundreds of millions of internet subscribers. * IPv4, UDP/TCP * IPv6, UDP/TCP, 100% compliant * Remotely pollable statistics for real time graphing * High performance * SNMP statistics bridge (read only) * Dynamically route queries to backend servers * Advanced anti-spoofing measures * Reconfiguration without downtime * Kernel based filtering of harmful traffic, rejecting packets at 'line speed' * Internal Lua-based scripted answer generation * Question interception, answer reconditioning, NXDOMAIN redirection - Including 'block lists' and security measures * Built-in memory efficient cache for increased performance * Ability to continue serving data from cache for non-responsive backends * Smart rate limiting per user, per subnet, per domain * Capable of writing dynamic rules to block harmful traffic
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (11 items)
Collapse this list.
  1. /usr/local/share/licenses/dnsdist-1.9.11/catalog.mk
  2. /usr/local/share/licenses/dnsdist-1.9.11/LICENSE
  3. /usr/local/share/licenses/dnsdist-1.9.11/GPLv2
  4. /usr/local/share/licenses/dnsdist-1.9.11/ISCL
  5. /usr/local/share/licenses/dnsdist-1.9.11/MIT
  6. sbin/dnsdist
  7. share/man/man1/dnsdist.1.gz
  8. @sample etc/dnsdist/dnsdist.conf.sample
  9. @owner
  10. @group
  11. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • dnsdist
Dependency lines:
  • dnsdist>0:dns/dnsdist
To install the port:
cd /usr/ports/dns/dnsdist/ && make install clean
To add the package, run one of these commands:
  • pkg install dns/dnsdist
  • pkg install dnsdist
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: dnsdist
Flavors: there is no flavor information for this port.
NOT_FOR_ARCHS: i386
distinfo:
TIMESTAMP = 1758739899 SHA256 (dnsdist-1.9.11.tar.bz2) = 6c47a705e745079daf6a273f1a3dd8c96f552635a569bf192493716c1307c8ed SIZE (dnsdist-1.9.11.tar.bz2) = 1598511

Packages (timestamps in pop-ups are UTC):
dnsdist
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest2.0.02.0.1------
FreeBSD:13:quarterly1.9.101.9.11-1.9.10-1.8.31.8.31.8.3
FreeBSD:14:latest2.0.02.0.1---1.8.0_1-1.8.0_1
FreeBSD:14:quarterly1.9.101.9.11-1.9.10-1.8.31.8.31.8.3
FreeBSD:15:latest2.0.02.0.0_1n/a-n/a1.8.3_11.8.3_11.8.3_1
FreeBSD:15:quarterly--n/a-n/a---
FreeBSD:16:latest-2.0.0_1n/a-n/a---
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. libatomic_ops.a : devel/libatomic_ops
  2. boost-libs>0 : devel/boost-libs
  3. gmake>=4.4.1 : devel/gmake
  4. pkgconf>=1.3.0_1 : devel/pkgconf
Library dependencies:
  1. libnghttp2.so : www/libnghttp2
  2. libquiche.so : net/quiche
  3. libre2.so : devel/re2
  4. libsodium.so : security/libsodium
  5. libcdb.so : databases/tinycdb
  6. libgnutls.so : security/gnutls
  7. liblmdb.so : databases/lmdb
  8. libedit.so.0 : devel/libedit
  9. liblua-5.4.so : lang/lua54
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for dnsdist-1.9.11: DNSTAP=off: dnstap support (see dnstap.info) SNMP=off: SNMP network protocol support ====> Secure network connection support via TLS: you have to choose at least one of them GNUTLS=on: SSL/TLS support via GnuTLS OPENSSL=on: SSL/TLS support via OpenSSL ====> Key Value Stores CDB=on: CDB backend LMDB=on: LMDB backend ====> Lua library: you have to select exactly one of them LUA=on: Use lang/lua LUAJIT=off: Use luajit ===> Use 'make config' to modify these settings
Options name:
dns_dnsdist
USES:
bison:alias compiler:c++14-lang cpe gmake libedit libtool localbase pkgconfig tar:bz2 lua ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://downloads.powerdns.com/releases/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.9.11
26 Sep 2025 15:37:38
commit hash: d97b8c7e278b229e8f7f5c977e9c4af8dbdb1062commit hash: d97b8c7e278b229e8f7f5c977e9c4af8dbdb1062commit hash: d97b8c7e278b229e8f7f5c977e9c4af8dbdb1062commit hash: d97b8c7e278b229e8f7f5c977e9c4af8dbdb1062 files touched by this commit
Florian Smeets (flo) search for other commits by this committer
dns/dnsdist: Update to 1.9.11 (fixes CVE-2025-8671)

This is a direct commit to 2025Q3 to not have to merge the 2.0.X major
version upgrade to quarterly.

PR:		289811
Security:	c2253bff-9952-11f0-b6e2-6805ca2fa271

Number of commits found: 1