Change Details

Wikidough is currently running dnsdist 1.4.0. This version introduced DoH support and was the latest version in Debian testing when we started the project and that we backported to buster (buster has dnsdist 1.3.3). The current version in testing is dnsdist 1.5.0, released on July 30 of this year. We should look into upgrading to the current version in testing and this task tracks the changes required, including updating the Debian package (currently 1.4.0-1~deb10u2), identifying the major changes since 1.4.0, and updating the `dnsdist.conf` file to match those changes. Code changes for upgrade: [ ] backport dnsdist-1.5.0 from testing [x] webserver ACL now defaults to `127.0.0.1, ::1`; update it to allow traffic from outside for Prometheus (already restricted to production network) [ ] confirm DoH endpoints in `addDOHLocal()` match the changes in 1.5.0 [ ] remove the `provider`option for the TLS library as OpenSSL is now the default (only applies to DoT) [see https://github.com/PowerDNS/pdns/pull/8380]

Wikidough is currently running dnsdist 1.4.0. This version introduced DoH support and was the latest version in Debian testing when we started the project and that we backported to buster (buster has dnsdist 1.3.3). The current version in testing is dnsdist 1.5.0, released on July 30 of this year. We should look into upgrading to the current version in testing and this task tracks the changes required, including updating the Debian package (currently 1.4.0-1~deb10u2), identifying the major changes since 1.4.0, and updating the `dnsdist.conf` file to match those changes. Code changes for upgrade: [ ] backport dnsdist-1.5.0 from testing [x] webserver ACL now defaults to `127.0.0.1, ::1`; update it to allow traffic from outside for Prometheus (already restricted to production network) [x] confirm DoH endpoints in `addDOHLocal()` match the changes in 1.5.0 [ ] remove the `provider`option for the TLS library as OpenSSL is now the default (only applies to DoT) [see https://github.com/PowerDNS/pdns/pull/8380]

Wikidough is currently running dnsdist 1.4.0. This version introduced DoH support and was the latest version in Debian testing when we started the project and that we backported to buster (buster has dnsdist 1.3.3). The current version in testing is dnsdist 1.5.0, released on July 30 of this year. We should look into upgrading to the current version in testing and this task tracks the changes required, including updating the Debian package (currently 1.4.0-1~deb10u2), identifying the major changes since 1.4.0, and updating the `dnsdist.conf` file to match those changes. Code changes for upgrade: [ ] backport dnsdist-1.5.0 from testing [x] webserver ACL now defaults to `127.0.0.1, ::1`; update it to allow traffic from outside for Prometheus (already restricted to production network) [ x] confirm DoH endpoints in `addDOHLocal()` match the changes in 1.5.0 [ ] remove the `provider`option for the TLS library as OpenSSL is now the default (only applies to DoT) [see https://github.com/PowerDNS/pdns/pull/8380]