Previously, qry->flags.TCP flag was incorectly set, which led
to incorrect logging and maybe other troubles down the line.

utils/cache_gc: fix crashes/assertions on RTT entries

See merge request !1153

I missed some parts when finishing this.  I should've tested it better.
GC would hit assertions or NULL dereferences when removing entries,
and eventually that would lead to cache overflowing (and getting
cleared).

daemon/http: replace assertions

See merge request !1152

ci: update ODVR distros

See merge request !1148

doh2: refuse stream on failure

See merge request !1149

dnstap: don't break request resolution on dnstap errors

See merge request !1147

This isn't a regression of 5.3.0 changes.
Layer functions are supposed to return new values for ctx->state,
but here we were sometimes returning kr_error(EFOO) which altered
processing of the request.

Our case: answers directly from policy module would not end up
finishing the request and we'd hit an assert at the end of processing.

doh2: send HTTP error status code

Closes #618

See merge request !1102

predict docs: better explain how it works

See merge request !1145

release 5.3.0

See merge request !1138

lib/selection: add simple detection of IPv6 being broken

See merge request !1143

Details are described in code comments.

lib/selection: halve the default timeout (for iteration)

See merge request !1141

lib/selection{,_iter}.c: allow switching back to UDP

See merge request !1140

Switching to TCP instead of querying very slow servers over UDP has had
unwanted side effect – we would sometimes get stuck with a server
permanently switched to TCP. And if the server happens to not reply over
TCP we were in trouble.

Therefore after we TCP connect fails or timeouts we provide one last
chance for the server over UDP. This will not prevent the next request
to try TCP again on this server again, but we don't care because
DNS MUST ******* work over TCP.

daemon/udp_queue: drop the error logging

See merge request !1139

We should do this for all transports and probably just in verbose mode.
We were printing lots of these on Turris OS (for one user at least):
https://forum.turris.cz/t/5-1-8-kresd-throwing-many-errors-in-var-log-messages/14775

EACCESS in particular apparently may happen (on Linux) when the network
is "unavailable", EPERM because of firewall/netfilter:
https://stackoverflow.com/a/23869102

modules/{http,watchdog}: fix stability problems

See merge request knot/knot-resolver!1136

Vladimír Čunát authored 4 years ago and Tomas Krizek committed 4 years ago

As first noted in commit d1a229ae, in some cases we do call chains that
are not supported for JIT in LuaJIT.

I'm not 100% sure all of these are needed to comply, but the functions
here are really small and probably not to be that heavily used,
so I don't think it will be costly to interpret them
(and avoiding crashes is more important).

In my tests this fixed occasional crashes when using http://*/trace/*

adapt to knot 3.1 changes

See merge request knot/knot-resolver!1134

ci: Sonarcloud fixup

See merge request knot/knot-resolver!1135

ci: sonarcloud improvements

See merge request knot/knot-resolver!1121