Remi Gacogne

One very annoying limitation from the current interface is that we cannot mix CNAME and A/AAAA, for example.

I was thinking of reversing the condition if the next hash < owner hash, or something like that.

A naive attempt triggers a unit test failure, but that might be a problem in the unit test: ```diff diff --git pdns/recursordist/aggressive_nsec.cc pdns/recursordist/aggressive_nsec.cc index 14b5f61cc..bc2cb5a57 100644 --- pdns/recursordist/aggressive_nsec.cc +++ pdns/recursordist/aggressive_nsec.cc...

> Fixing this is possible, but the potential benefits have to be weighted against the increased complexity. I agree that if the fix is making the code too complicated/brittle, it's...

It looks like you have `SOA-EDIT-API` set for this zone, and in that case we indeed fail if we can't find a `SOA` record to edit. I'm not sure if...

Interesting read on this topic: https://www.haproxy.com/blog/state-of-ssl-stacks > In blunt terms: running OpenSSL 3.0.2 as shipped with Ubuntu 22.04 results in 1/100 of WolfSSL’s performance on identical hardware!

It turns out that it only works for `std::array`s of `int`s (not passing the type and size), and you cannot pass only the type. C++20 has `std::to_array` but we are...

Actually the type can be properly deducted in C++17, but one needs to be careful to check that the desirable type has been deduced.

I'm afraid I cannot reproduce the issue using the Oracle Linux 9 docker image: ``` $ docker run -it oraclelinux:9 [root@f97640d2e2b7 /]# dnf install epel-release && curl -o /etc/yum.repos.d/powerdns-dnsdist-19.repo https://repo.powerdns.com/repo-files/el-dnsdist-19.repo...

We will probably need to make the sampling rate available to consumers of the information located in the ring buffers, like the dynamic block, so they can infer the actual...