| Port details |
- dnsdist Highly DNS-, DoS- and abuse-aware loadbalancer
- 2.0.6_1 dns
=7 2.0.5Version of this port present on the latest quarterly branch. - Maintainer: tremere@cainites.net
 - Port Added: 2015-08-07 19:35:07
- Last Update: 2026-06-04 08:52:51
- Commit Hash: e29b5ee
- People watching this port, also watch:: pftop, sudo, pkg, git, smartmontools
- Also Listed In: net
- License: GPLv2 ISCL MIT
- WWW:
- https://dnsdist.org/
- Description:
- dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life
is to route traffic to the best server, delivering top performance to
legitimate users while shunting or blocking abusive traffic.
dnsdist is dynamic, its configuration language is Lua and it can be can be
changed at runtime, and its statistics can be queried from a console-like
interface or an HTTP API.
dnsdist is used to protect and optimize the DNS traffic of hundreds of millions
of internet subscribers.
* IPv4, UDP/TCP
* IPv6, UDP/TCP, 100% compliant
* Remotely pollable statistics for real time graphing
* High performance
* SNMP statistics bridge (read only)
* Dynamically route queries to backend servers
* Advanced anti-spoofing measures
* Reconfiguration without downtime
* Kernel based filtering of harmful traffic, rejecting packets at 'line speed'
* Internal Lua-based scripted answer generation
* Question interception, answer reconditioning, NXDOMAIN redirection
- Including 'block lists' and security measures
* Built-in memory efficient cache for increased performance
* Ability to continue serving data from cache for non-responsive backends
* Smart rate limiting per user, per subnet, per domain
* Capable of writing dynamic rules to block harmful traffic
¦ ¦ ¦ ¦ 
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- To install the port:
- cd /usr/ports/dns/dnsdist/ && make install clean
- To add the package, run one of these commands:
- pkg install dns/dnsdist
- pkg install dnsdist
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: dnsdist
- Flavors: there is no flavor information for this port.
- NOT_FOR_ARCHS: i386
- distinfo:
- TIMESTAMP = 1780526794
SHA256 (dnsdist-2.0.6.tar.xz) = b861d74abb0da59cff4e58760266198196eee7c10f2bfe86a3f5ccbd6768626b
SIZE (dnsdist-2.0.6.tar.xz) = 2293488
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- libatomic_ops.a : devel/libatomic_ops
- py311-pyyaml>0 : devel/py-pyyaml@py311
- boost-libs>0 : devel/boost-libs
- rust>=1.96.0 : lang/rust
- meson : devel/meson
- ninja : devel/ninja
- pkgconf>=1.3.0_1 : devel/pkgconf
- python3.11 : lang/python311
- Library dependencies:
-
- libnghttp2.so : www/libnghttp2
- libquiche.so : net/quiche
- libre2.so : devel/re2
- libsodium.so : security/libsodium
- libcdb.so : databases/tinycdb
- libgnutls.so : security/gnutls
- liblmdb.so : databases/lmdb
- libedit.so.0 : devel/libedit
- liblua-5.4.so : lang/lua54
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for dnsdist-2.0.6_1:
DNSTAP=off: dnstap support (see dnstap.info)
IPCIPHER=on: ipcipher support (requires OpenSSL)
SNMP=off: SNMP network protocol support
====> Secure network connection support via TLS: you have to choose at least one of them
GNUTLS=on: SSL/TLS support via GnuTLS
OPENSSL=on: SSL/TLS support via OpenSSL
====> Key Value Stores
CDB=on: CDB backend
LMDB=on: LMDB backend
====> Lua library: you have to select exactly one of them
LUA=on: Use lang/lua
LUAJIT=off: Use luajit
===> Use 'make config' to modify these settings
- Options name:
- dns_dnsdist
- USES:
- cargo compiler:c++14-lang cpe libedit localbase meson pkgconfig python:build tar:xz lua ssl
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
1.2.0_4 11 Dec 2017 18:26:14
  |
sunpoet  |
Update devel/protobuf to 3.5.0
- Bump PORTREVISION for shlib change
Changes: https://github.com/google/protobuf/releases |
1.2.0_3 22 Oct 2017 10:09:33
  |
vsevolod  |
- Update libsodium to 1.0.15 [1]
- Bump revisions for all dependent ports
PR: 223147 [1]
Submitted by: Greg V [1] |
1.2.0_2 25 Sep 2017 00:08:17
  |
jbeich  |
devel/boost-*: update to 1.65.1
Changes: http://www.boost.org/users/history/version_1_65_1.html
PR: 218835
Approved by: maintainer timeout (1.65.1: 2 weeks; 1.65.0: 1 month)
Tested by: jhibbits (on powerpc64, earlier version)
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D11582 |
1.2.0_1 25 Sep 2017 00:05:06
  |
jbeich  |
devel/boost-*: enable C++11 features
PR: 218835
Obtained from: https://github.com/DragonFlyBSD/DeltaPorts/pull/690
Approved by: maintainer timeout (2 months)
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D11582 |
1.2.0 22 Aug 2017 20:38:35
  |
cpm  |
- Update to 1.2.0
- Remove patch that was upstreamed
- Switch from devel/llvm39 to devel/llvm40 when building on 10.3
- Update WWW in pkg-descr
Changes: https://mailman.powerdns.com/pipermail/dnsdist/2017-August/000358.html
MFH: 2017Q3
Security: CVE-2016-7069
Security: CVE-2017-7557 |
1.1.0_7 16 Aug 2017 15:44:49
  |
sunpoet  |
Update devel/protobuf to 3.4.0
- Bump PORTREVISION for shlib change
Changes: https://github.com/google/protobuf/releases |
1.1.0_6 05 Jul 2017 14:58:11
  |
tobik  |
Add The Unlicense to Mk/bsd.licenses.db.mk
- Update all ports that currently use a custom definition
- Also add a link to a list of certified copyfree licenses
Approved by: portmgr (mat)
Differential Revision: https://reviews.freebsd.org/D11487 |
1.1.0_6 02 May 2017 06:48:11
  |
jbeich  |
devel/boost-*: update to 1.64.0
Changes: http://www.boost.org/users/history/version_1_64_0.html
PR: 218835
Approved by: office (bapt)
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D10472 |
1.1.0_5 29 Apr 2017 15:43:47
  |
sunpoet  |
Update devel/protobuf to 3.3.0
- Remove USE_CSTD=c99: it was added for [1], now audio/clementine-player builds
fine without it
- Bump PORTREVISION for shlib change
Changes: https://github.com/google/protobuf/releases
PR: 178687 [1] |
1.1.0_4 14 Apr 2017 16:31:02
  |
cpm  |
dns/dnsdist: fix dnsdist binaries when building on 10.3
- Change USES=compiler:c++14-lang to USES=compiler. Now the compiler macro
doesn't require any arguments.
- Bump PORTREVISION
Reported by: Robin Geuze <robing@transip.nl> via mail |
1.1.0_3 01 Apr 2017 15:23:32
  |
gerald  |
Bump PORTREVISIONs for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using using Mk/bsd.octave.mk which in turn has USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
c++11-lang, c++0x, c11, or gcc-c++11-lib.
PR: 216707 |
1.1.0_2 29 Jan 2017 16:04:36
  |
sunpoet  |
Update devel/protobuf to 3.2.0
- Bump PORTREVISION for shlib change
Changes: https://github.com/google/protobuf/releases |
1.1.0_1 18 Jan 2017 17:58:53
  |
cpm  |
dns/dnsdist: unbreak build with clang 4.0
ext/json11/json11.cpp:153:24: error: invalid operands to binary expression
('nullptr_t' and 'nullptr_t')
return m_value < static_cast<const Value<tag, T> *>(other)->m_value;
~~~~~~~ ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ext/json11/json11.cpp:209:5: note: in instantiation of member function
'json11::Value<json11::Json::Type::NUL, nullptr_t>::less' requested here
JsonNull() : Value(nullptr) {}
^
PR: 216069
Reported by: jbeich
Obtained from: upstream
MFH: 2017Q1 |
1.1.0 11 Jan 2017 00:48:05
  |
cpm  |
- Update to 1.1.0
- Remove unneeded patches (added upstream)
- Add protobuf and re2 support
- Switch to USES=localbase
- Drop USE_GCC
- Add USES=compiler:c++14-lang to build with clang on FreeBSD 10.3
- Cosmetic fixes
Changelog:
http://dnsdist.org/changelog/#110 |
1.0.0_4 06 Jan 2017 08:45:04
  |
jbeich  |
devel/boost-*: update to 1.63.0
Changes: http://www.boost.org/users/history/version_1_63_0.html
PR: 215598
Exp-run by: antoine
Approved by: office (bapt)
MFH: 2017Q1 |
1.0.0_3 23 Nov 2016 12:45:47
  |
jbeich  |
devel/boost-*: update to 1.62.0
- Enable `long double` C99 math usage
- Switch 9.x back to building with GCC
Changes: http://www.boost.org/users/history/
PR: 199601
Submitted by: Chen Xu, bapt, amdmi3, truckman (based on)
Reviewed by: rakuco (kde) (earlier version)
Exp-run by: antoine (3 tries), truckman (consumers only, earlier versions)
Approved by: bapt (office) |
1.0.0_2 20 Nov 2016 09:38:09
  |
gerald  |
Bump PORTREVISIONS for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.8.5 to GCC 4.9.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
In particular that is ports with USE_GCC=yes, USE_GCC=any, or one of
gcc-c++11-lib, openmp, nestedfct, c++11-lib as well as c++14-lang,
c++11-lang, c++0x, c11 requested via USES=compiler. |
1.0.0_1 12 Jul 2016 22:03:52
  |
marino  |
security/libsodium: Upgrade version 1.0.8 => 1.0.10
Also bump all ports that depend on libsodium.
PR: 210999
Submitted by: manu
Approved by: vsevolod (maintainer) |
1.0.0 25 Apr 2016 07:47:54
  |
cpm  |
- Update to 1.0.0 release
- Use USERS/GROUPS framework
- Install the dnsdist binary in ${PREFIX}/sbin
- Fix rc script
- Fix pkg-plist
Changelog: http://dnsdist.org/changelog/#dnsdist-100
Reported by: Bryan Seitz <seitz@bsd-unix.net>
Approved by: junovitch (mentor)
Differential Revision: D6066 |
1.0.0.a2 01 Apr 2016 14:00:57
  |
mat  |
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight |
1.0.0.a2 22 Mar 2016 02:14:01
  |
cpm  |
- Update to 1.0.0-alpha2
- Replace USES=readline with USES=libedit
- Remove ragel dependency because it's only required to compile from git.
- Fix MASTER_SITES
- Add incbin License (The Unlicense)
- Enable dnscrypt support
- Fix comparison signedness in dnsname.cc
Changelog:
http://dnsdist.org/changelog/#dnsdist-100-alpha2
PR: 208126
Approved by: junovitch (mentor) |
0.0.791.g356.b 03 Mar 2016 04:16:37
  |
cpm  |
- Update to 0.0.791gfbb356b
- Update MASTER_SITES
- Add my LOCAL to MASTER_SITES
PR: 207668
Approved by: junovitch (mentor) |
0.0.734.g1.f3.f982 22 Feb 2016 10:02:35
  |
cpm  |
- Update dnsdist to 0.0.734g1f3f982
PR: 207333
Approved by: junovitch (mentor) |
0.0.679.g176.f7 02 Feb 2016 12:52:20
  |
cpm  |
- Update dnsdist to 0.0.679g176fdd7
- Update MAINTAINER to my @FreeBSD.org address
PR: 206822
Approved by: junovitch (mentor) |
0.0.667.g7181 27 Jan 2016 10:50:32
  |
cpm  |
- Update to 0.0.667gdee7181.
Submitted by: Carlos J. Puga Medina <cpm@FreeBSD.org>
Approved by: junovitch (mentor) |
0.0.649.g41.f9.c 21 Jan 2016 15:30:53
  |
robak  |
dns/dnsdist: update 0.0.619gda835ff -> 0.0.649gf41f9cf
PR: 206371
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer) |
0.0.619.g835.f 15 Jan 2016 06:36:37
  |
miwi  |
- Update to 0.0.619gda835ff
PR: 206187
Submitted by: maintainer |
0.0.336.g278.f 30 Oct 2015 01:58:14
  |
junovitch  |
dns/dnsdist: 0.0.281gade4ced -> 0.0.336gc278ffd
- Also add maintainer mirror and LOCAL as a fallback. Upstream only seems
to keep the last 50 distfiles on their mirrors and this has broken fetch
in the past (see bug 203613).
PR: 204113
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer) |
0.0.281.g4.c 25 Oct 2015 20:38:11
  |
gerald  |
Replace USE_GCC=4.8+ by USE_GCC=yes. Both are equivalent as of today,
and generally we want to use the default version of GCC in cases like
these.
Approved by: portmgr blanket |
0.0.281.g4.c 08 Oct 2015 18:51:49
  |
pi  |
dns/dnsdist: 0.0.251g6efad44 -> 0.0.281gade4ced
- added support for RRs CDS, CDNSKEY, among other changes
PR: 203613
Submitted by: Carlos J. Puga Medina <cpm@fbsd.es> (maintainer) |
0.0.251.g6.e44 12 Sep 2015 07:21:34
  |
pi  |
dns/dnsdist: 0.0.217g7a89932 -> 0.0.251g6efad44
- QPS Limit total
- QPS Limit per IP address or subnet
- Modify query to remove RD bit
PR: 202955
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer) |
0.0.217.g7.a89932 25 Aug 2015 09:24:03
  |
pi  |
dns/dnsdist: 0.0.213g3172f9b -> 0.0.217g7a89932
PR: 202617
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer) |
0.0.213.g3172.f9.b 22 Aug 2015 11:26:17
  |
pi  |
dns/dnsdist: 0.0.211g05c8117 -> 0.0.213g3172f9b
- Add startup script
- Add sample config file
- Build with libsodium
PR: 202555
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> |
0.0.211.g05.c8117 16 Aug 2015 11:27:03
  |
amdmi3  |
- Update to 0.0.211g05c8117
PR: 202352
Submitted by: cpm@fbsd.es (maintainer) |
0.0.210.g4.f0.f7 13 Aug 2015 03:07:48
  |
vanilla  |
Upgrade to 0.0.210g4f0fae7
PR: 202279
Submitted by: maintainer |
0.0.209.g4.f8.a 11 Aug 2015 19:26:38
  |
pi  |
dns/dnsdist: add USES=cpe
PR: 202167
Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es> (maintainer) |
0.0.209.g4.f8.a 07 Aug 2015 19:34:58
  |
pi  |
New port: dns/dnsdist
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its
goal in life is to route DNS traffic to the best DNS server,
delivering top performance to legitimate users while shunting or
blocking abusive traffic.
WWW: http://dnsdist.org
PR: 202156
Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es>
Requested by: pi |