rebase

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "tdns/ext/simplesocket"]
+	path = tdns/ext/simplesocket
+	url = https://github.com/ahupowerdns/simplesocket.git

auth.md

@@ -1,6 +1,10 @@
                 <meta charset="utf-8" emacsmode="-*- markdown -*-">
                             **A warm welcome to DNS**
 
+<link rel="stylesheet" href="https://casual-effects.com/markdeep/latest/apidoc.css?">
+
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
 
 # Authoritative servers
 

basic.md.html

@@ -0,0 +1 @@
+basic.md

dnssec.md

@@ -1,7 +1,10 @@
                 <meta charset="utf-8" emacsmode="-*- markdown -*-">
                             **A warm welcome to DNS**
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
 
 # DNSSEC
 For now, see [this page](https://ds9a.nl/dnssec/).
 
 <!-- Markdeep: --><style class="fallback">body{visibility:hidden;white-space:pre;font-family:monospace}</style><script src="ext/markdeep.min.js"></script><script>window.alreadyProcessedMarkdeep||(document.body.style.visibility="visible")</script>
+

meta.md

@@ -1,5 +1,7 @@
                 <meta charset="utf-8" emacsmode="-*- markdown -*-">
                             **A warm welcome to DNS**
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
 
 # The why and what of these documents
 There are now between 1500 and 3000 pages of RFC documents describing DNS,
@@ -52,3 +54,4 @@ urge to write 'standardese'  here.
 
 
 <!-- Markdeep: --><style class="fallback">body{visibility:hidden;white-space:pre;font-family:monospace}</style><script src="ext/markdeep.min.js"></script><script>window.alreadyProcessedMarkdeep||(document.body.style.visibility="visible")</script>
+

non-ietf.md

@@ -0,0 +1,16 @@
+                <meta charset="utf-8" emacsmode="-*- markdown -*-">
+                            **A warm welcome to DNS**
+
+<link rel="stylesheet" href="https://casual-effects.com/markdeep/latest/apidoc.css?">
+
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
+
+# Non-IETF DNS standards
+
+ * RPZ
+ * RRL
+ * DNSCrypt
+ * Curvedns
+
+<!-- Markdeep: --><style class="fallback">body{visibility:hidden;white-space:pre;font-family:monospace}</style><script src="ext/markdeep.min.js"></script><script>window.alreadyProcessedMarkdeep||(document.body.style.visibility="visible")</script>

non-ietf.md.html

@@ -0,0 +1 @@
+non-ietf.md

privacy.md

@@ -0,0 +1,16 @@
+                <meta charset="utf-8" emacsmode="-*- markdown -*-">
+                            **A warm welcome to DNS**
+
+<link rel="stylesheet" href="https://casual-effects.com/markdeep/latest/apidoc.css?">
+
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
+
+# Privacy 
+TBC
+
+ * DNS over TLS
+ * DNS over HTTPS
+ * Query name minimization
+
+<!-- Markdeep: --><style class="fallback">body{visibility:hidden;white-space:pre;font-family:monospace}</style><script src="ext/markdeep.min.js"></script><script>window.alreadyProcessedMarkdeep||(document.body.style.visibility="visible")</script>

privacy.md.html

@@ -0,0 +1 @@
+privacy.md

rare.md

@@ -0,0 +1,24 @@
+                <meta charset="utf-8" emacsmode="-*- markdown -*-">
+                            **A warm welcome to DNS**
+
+<link rel="stylesheet" href="https://casual-effects.com/markdeep/latest/apidoc.css?">
+
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
+
+# Rare
+DNS is currently described in over 150 RFCs. Not all of these are
+operational, and it is uncertain if all of them should be. 
+
+This page is a menu of things that are specified, but not in wide
+production. 
+
+Standards listed here could be omitted from 2018 implementations
+without causing operational problems, but this may change in the future.
+
+Applicable to authoritative servers:
+
+ * TKEY
+ * SIG(0)
+
+<!-- Markdeep: --><style class="fallback">body{visibility:hidden;white-space:pre;font-family:monospace}</style><script src="ext/markdeep.min.js"></script><script>window.alreadyProcessedMarkdeep||(document.body.style.visibility="visible")</script>

rare.md.html

@@ -0,0 +1 @@
+rare.md

resolver.md

@@ -1,6 +1,9 @@
                 <meta charset="utf-8" emacsmode="-*- markdown -*-">
                             **A warm welcome to DNS**
 
+Note: this page is part of the
+'[hello-dns](https://powerdns.org/hello-dns/)' documentation effort.
+
 # Resolver
 Writing a modern resolver is the hardest part of DNS. A fully standards
 compliant DNS resolver is not a resolver that can be used in practice.

tdns/Makefile

@@ -0,0 +1,16 @@
+CXXFLAGS:=-std=gnu++14 -Wall -O2 -MMD -MP -ggdb -Iext/simplesocket
+
+PROGRAMS = tdns
+
+all: $(PROGRAMS)
+
+clean:
+	rm -f *~ *.o *.d test $(PROGRAMS)
+
+#check: mtests
+#	./mtests
+
+-include *.d
+
+tdns: tdns.o ext/simplesocket/comboaddress.o ext/simplesocket/sclasses.o ext/simplesocket/swrappers.o
+	g++ -std=gnu++14 $^ -o $@ 

tdns/dns.hh

@@ -0,0 +1,38 @@
+#pragma once
+struct dnsheader {
+        unsigned        id :16;         /* query identification number */
+#if BYTE_ORDER == BIG_ENDIAN
+                        /* fields in third byte */
+        unsigned        qr: 1;          /* response flag */
+        unsigned        opcode: 4;      /* purpose of message */
+        unsigned        aa: 1;          /* authoritative answer */
+        unsigned        tc: 1;          /* truncated message */
+        unsigned        rd: 1;          /* recursion desired */
+                        /* fields in fourth byte */
+        unsigned        ra: 1;          /* recursion available */
+        unsigned        unused :1;      /* unused bits (MBZ as of 4.9.3a3) */
+        unsigned        ad: 1;          /* authentic data from named */
+        unsigned        cd: 1;          /* checking disabled by resolver */
+        unsigned        rcode :4;       /* response code */
+#elif BYTE_ORDER == LITTLE_ENDIAN || BYTE_ORDER == PDP_ENDIAN
+                        /* fields in third byte */
+        unsigned        rd :1;          /* recursion desired */
+        unsigned        tc :1;          /* truncated message */
+        unsigned        aa :1;          /* authoritative answer */
+        unsigned        opcode :4;      /* purpose of message */
+        unsigned        qr :1;          /* response flag */
+                        /* fields in fourth byte */
+        unsigned        rcode :4;       /* response code */
+        unsigned        cd: 1;          /* checking disabled by resolver */
+        unsigned        ad: 1;          /* authentic data from named */
+        unsigned        unused :1;      /* unused bits (MBZ as of 4.9.3a3) */
+        unsigned        ra :1;          /* recursion available */
+#endif
+                        /* remaining bytes */
+        unsigned        qdcount :16;    /* number of question entries */
+        unsigned        ancount :16;    /* number of answer entries */
+        unsigned        nscount :16;    /* number of authority entries */
+        unsigned        arcount :16;    /* number of resource entries */
+};
+
+static_assert(sizeof(dnsheader) == 12, "dnsheader size must be 12");