dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life
is to route traffic to the best server, delivering top performance to
legitimate users while shunting or blocking abusive traffic.
dnsdist is dynamic, its configuration language is Lua and it can be can be
changed at runtime, and its statistics can be queried from a console-like
interface or an HTTP API.
dnsdist is used to protect and optimize the DNS traffic of hundreds of millions
of internet subscribers.
* IPv4, UDP/TCP
* IPv6, UDP/TCP, 100% compliant
* Remotely pollable statistics for real time graphing
* High performance
* SNMP statistics bridge (read only)
* Dynamically route queries to backend servers
* Advanced anti-spoofing measures
* Reconfiguration without downtime
* Kernel based filtering of harmful traffic, rejecting packets at 'line speed'
* Internal Lua-based scripted answer generation
* Question interception, answer reconditioning, NXDOMAIN redirection
- Including 'block lists' and security measures
* Built-in memory efficient cache for increased performance
* Ability to continue serving data from cache for non-responsive backends
* Smart rate limiting per user, per subnet, per domain
* Capable of writing dynamic rules to block harmful traffic
===> The following configuration options are available for dnsdist-2.1.2_1:
DNSTAP=off: dnstap support (see dnstap.info)
IPCIPHER=on: ipcipher support (requires OpenSSL)
SNMP=off: SNMP network protocol support
====> Secure network connection support via TLS: you have to choose at least one of them
GNUTLS=on: SSL/TLS support via GnuTLS
OPENSSL=on: SSL/TLS support via OpenSSL
====> Key Value Stores
CDB=on: CDB backend
LMDB=on: LMDB backend
====> Lua library: you have to select exactly one of them
LUA=on: Use lang/lua
LUAJIT=off: Use luajit
===> Use 'make config' to modify these settings
dns/dnsdist: unbreak with boost 1.67
In file included from dnsdist.cc:44:
In file included from ./dnsdist.hh:46:
In file included from /usr/local/include/boost/uuid/uuid_generators.hpp:17:
In file included from /usr/local/include/boost/uuid/random_generator.hpp:19:
In file included from /usr/local/include/boost/tti/has_member_function.hpp:15:
In file included from /usr/local/include/boost/tti/detail/dmem_fun.hpp:11:
In file included from
/usr/local/include/boost/function_types/is_member_function_pointer.hpp:14:
In file included from /usr/local/include/boost/function_types/components.hpp:61:
/usr/local/include/boost/function_types/detail/class_transform.hpp:26:31: error:
expected a qualified name after 'typename'
template<typename T, typename L>
^
./dns.hh:238:11: note: expanded from macro 'L'
#define L theL()
^
PR: 227427
Reported by: antoine (via exp-run)
Obtained from: upstream
- Fix and update the comment when building dnsdist on 10.x
- Mark BROKEN on FreeBSD 10.3, fails to link due to lack of thread_local
MFH: 2018Q2 (blanket)
dns/dnsdist: Fix building against openssl from base
checking for LIBSSL... no
configure: error: OpenSSL libssl requested but libraries were not found
===> Script "configure" failed unexpectedly.
Please report the problem to cpm@FreeBSD.org [maintainer] and attach the
"/wrkdirs/usr/ports/dns/dnsdist/work/dnsdist-1.3.0/config.log" including the
output of the failure of your make command. Also, it might be a good idea to
provide an overview of all packages installed on your system (e.g. a
/usr/local/sbin/pkg-static info -g -Ea).
*** Error code 1
Stop.
make: stopped in /usr/ports/dns/dnsdist
PR: 227180
Submitted by: Ralf van der Enden <tremere@cainites.net>
MFH: 2018Q2
dns/dnsdist: fix rc.d script, add support for LuaJIT and enable some new
features
- Really fix the rc.d script to start using daemon(8) and add the --supervised
commandline argument (which suppresses opening up the console)
- Enable DNS-over-TLS (upstream suggests enabling both GnuTLS and OpenSSL
backends so you can switch in case of a serious security issue in .ie OpenSSL)
- Add OpenSSL support (enabled by default)
- Add GnuTLS support (enabled by default)
- Add dnstap support (disabled by default)
- Add SNMP support (disabled by default)
- Add support for LuaJIT or whatever you set as your default version in
make.conf (disabled by default)
- Bump PORTREVISION
PR: 227175
Submitted by: Ralf van der Enden <tremere@cainites.net>
MFH: 2018Q2
- Update to 1.2.0
- Remove patch that was upstreamed
- Switch from devel/llvm39 to devel/llvm40 when building on 10.3
- Update WWW in pkg-descr
Changes: https://mailman.powerdns.com/pipermail/dnsdist/2017-August/000358.html
MFH: 2017Q3
Security: CVE-2016-7069
Security: CVE-2017-7557
Add The Unlicense to Mk/bsd.licenses.db.mk
- Update all ports that currently use a custom definition
- Also add a link to a list of certified copyfree licenses
Approved by: portmgr (mat)
Differential Revision: https://reviews.freebsd.org/D11487
Update devel/protobuf to 3.3.0
- Remove USE_CSTD=c99: it was added for [1], now audio/clementine-player builds
fine without it
- Bump PORTREVISION for shlib change
Changes: https://github.com/google/protobuf/releases
PR: 178687 [1]
dns/dnsdist: fix dnsdist binaries when building on 10.3
- Change USES=compiler:c++14-lang to USES=compiler. Now the compiler macro
doesn't require any arguments.
- Bump PORTREVISION
Reported by: Robin Geuze <robing@transip.nl> via mail
Bump PORTREVISIONs for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using using Mk/bsd.octave.mk which in turn has USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
c++11-lang, c++0x, c11, or gcc-c++11-lib.
PR: 216707
- Update to 1.1.0
- Remove unneeded patches (added upstream)
- Add protobuf and re2 support
- Switch to USES=localbase
- Drop USE_GCC
- Add USES=compiler:c++14-lang to build with clang on FreeBSD 10.3
- Cosmetic fixes
Changelog:
http://dnsdist.org/changelog/#110
Bump PORTREVISIONS for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.8.5 to GCC 4.9.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
In particular that is ports with USE_GCC=yes, USE_GCC=any, or one of
gcc-c++11-lib, openmp, nestedfct, c++11-lib as well as c++14-lang,
c++11-lang, c++0x, c11 requested via USES=compiler.
security/libsodium: Upgrade version 1.0.8 => 1.0.10
Also bump all ports that depend on libsodium.
PR: 210999
Submitted by: manu
Approved by: vsevolod (maintainer)
dns/dnsdist: 0.0.281gade4ced -> 0.0.336gc278ffd
- Also add maintainer mirror and LOCAL as a fallback. Upstream only seems
to keep the last 50 distfiles on their mirrors and this has broken fetch
in the past (see bug 203613).
PR: 204113
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
Replace USE_GCC=4.8+ by USE_GCC=yes. Both are equivalent as of today,
and generally we want to use the default version of GCC in cases like
these.
Approved by: portmgr blanket
dns/dnsdist: 0.0.251g6efad44 -> 0.0.281gade4ced
- added support for RRs CDS, CDNSKEY, among other changes
PR: 203613
Submitted by: Carlos J. Puga Medina <cpm@fbsd.es> (maintainer)
dns/dnsdist: 0.0.217g7a89932 -> 0.0.251g6efad44
- QPS Limit total
- QPS Limit per IP address or subnet
- Modify query to remove RD bit
PR: 202955
Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
New port: dns/dnsdist
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its
goal in life is to route DNS traffic to the best DNS server,
delivering top performance to legitimate users while shunting or
blocking abusive traffic.
WWW: http://dnsdist.org
PR: 202156
Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es>
Requested by: pi
Number of commits found: 145 (showing only 45 on this page)
