GitLab

3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]

3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]

3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8

3401.	[bug]		Addressed Coverity warnings. [RT #31484]

add test support for dropping edns messages (-T dropedns);  ignoring edns in queries (-T noedns);  variable max UDP (-T maxudp=value)

3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]

This includes the following changes:

3326.	[func]		Added task list statistics: task model, worker
			threads, quantum, tasks running, tasks ready.
			[RT #27678]

3325.	[func]		Report cache statistics: memory use, number of
			nodes, number of hash buckets, hit and miss counts.
			[RT #27056]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3323.	[func]		Report the number of buckets the resolver is using.
			[RT #27020]

3322.	[func]		Monitor the number of active TCP and UDP dispatches.
			[RT #27055]

3321.	[func]		Monitor the number of recursive fetches and the
			number of open sockets, and report these values in
			the statistics channel. [RT #27054]

3320.	[func]		Added support for monitoring of recursing client
			count. [RT #27009]

3319.	[func]		Added support for monitoring of ADB entry count and
			hash size. [RT #27057]

                        client.c:exit_check. [RT #28346]

                        section even when filter-aaaa-on-v4 was in use.
                        [RT #27292]

			overload could trigger an assertion failure. [RT #26463]

			being queried. [RT #25944]

			cause an assertion failure on shutdown. [RT #26271]

			so that responses can be changed depending on the
			source address of the query. [RT #25768]

			concurrency problems with large numbers of threads.
			[RT #26044]

			when running in a chrooted environment without
			/proc. [RT #25863]

3158.	[bug]		Recursive servers would prefer a particular UDP
			socket instead of using all available sockets.
			[RT #26038]

                        shutting named down. [RT #25210]

			worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]

			the TSIG key if any. [RT #23619]

                        across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]

                        allow-query-cache acl to cache lookups. [RT #22114]

			if built with './configure --enable-filter-aaaa'.
			Filters out AAAA answers to clients connecting
			via IPv4.  (This is NOT recommended for general
			use.) [RT #20339]

                        [RT #19209]

			I/O events and query RTT histograms.  [RT #18802]