Created attachment 233888 [details] patch to update This release fixes a couple of minor bugs and adds IXFR out functionality. With this functionality NSD can respond to IXFR queries and serve IXFR transfers downstream. It is default disabled, that means it does not store IXFR contents for zones by default. The response on the wire is different, also with IXFR disabled, because it is now supported, and thus also for those zones a reply is served, that no differential data is available. FEATURES: - Merge PR #209: IXFR out This adds IXFR out functionality to NSD. NSD can copy IXFRs from upstream to downstream clients, or create IXFRs from zonefiles. The options store-ixfr: yes and create-ixfr: yes can be used to turn this on. Default is turned off. The options ixfr-number and ixfr-size can be used to tune the number of IXFR transfers and total data size stored. This is configured per zone, the IXFRs are served to the hosts that are allowed to perform zone transfers. And if TSIG is configured, signed with the same key. The content is stored to file if a zonefile is configured for the zone, in the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain readable text format. The number of IXFRs is num.rixfr in statistics output, also per zone if per zone statistics are enabled. If offline, nsd-checkzone -i can create ixfr files. NSD already supports requesting IXFRs, this addition allows NSD to serve IXFR transfers to clients. NSD stops responding with NOTIMPL to IXFR requests, also for zones that do not have IXFR enabled. The clients gets a full zone reply or a status reply if the serial is up to date. BUG FIXES: - Fix code analyzer zero divide warning. - Fix code analyzer large value with assertion. - Fix another code analyzer zero divide warning. - Fix code analyzer warning about uninitialized temp storage in loop. - Fix spelling error in comment in svcbparam_lookup_key. - Update cirrus script FreeBSD version.
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=624dbc61a18734921b5d724805b1164cbc47b6d3 commit 624dbc61a18734921b5d724805b1164cbc47b6d3 Author: Jaap Akkerhuis <jaap@NLnetLabs.nl> AuthorDate: 2022-05-13 22:27:09 +0000 Commit: Dmitri Goutnik <dmgk@FreeBSD.org> CommitDate: 2022-05-13 22:29:07 +0000 dns/nsd: Update to 4.5.0 Changes: https://www.nlnetlabs.nl/news/2022/May/13/nsd-4.5.0-released/ This release fixes a couple of minor bugs and adds IXFR out functionality. With this functionality NSD can respond to IXFR queries and serve IXFR transfers downstream. It is default disabled, that means it does not store IXFR contents for zones by default. The response on the wire is different, also with IXFR disabled, because it is now supported, and thus also for those zones a reply is served, that no differential data is available. FEATURES: - Merge PR #209: IXFR out This adds IXFR out functionality to NSD. NSD can copy IXFRs from upstream to downstream clients, or create IXFRs from zonefiles. The options store-ixfr: yes and create-ixfr: yes can be used to turn this on. Default is turned off. The options ixfr-number and ixfr-size can be used to tune the number of IXFR transfers and total data size stored. This is configured per zone, the IXFRs are served to the hosts that are allowed to perform zone transfers. And if TSIG is configured, signed with the same key. The content is stored to file if a zonefile is configured for the zone, in the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain readable text format. The number of IXFRs is num.rixfr in statistics output, also per zone if per zone statistics are enabled. If offline, nsd-checkzone -i can create ixfr files. NSD already supports requesting IXFRs, this addition allows NSD to serve IXFR transfers to clients. NSD stops responding with NOTIMPL to IXFR requests, also for zones that do not have IXFR enabled. The clients gets a full zone reply or a status reply if the serial is up to date. BUG FIXES: - Fix code analyzer zero divide warning. - Fix code analyzer large value with assertion. - Fix another code analyzer zero divide warning. - Fix code analyzer warning about uninitialized temp storage in loop. - Fix spelling error in comment in svcbparam_lookup_key. - Update cirrus script FreeBSD version. PR: 263952 dns/nsd/Makefile | 2 +- dns/nsd/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-)
Committed, thanks!