Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* retry initial transfer
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* fix import grouping
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* add test; use backoff timeout
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* fix import order
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* manual backoff
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

Signed-off-by: coredns[bot] <bot@bot.coredns.io>

This PR will fix the issue of doc is not automated rendered
through GitHub Actions anymore.

It looks the issue is cause by the fact that in `fixup_file_mtime.sh`
is only fixing files on source (.md) side, not on target (man/*.[1|5|7])
side. As a result Makefile will skip the rendering of doc as
it assume everything will be update to date.

This should fix the issue we were facing.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Our GitHub Actions CI is having some issues with `make -f Makefile.doc`
as the related changes that should have triggered the build didn't
work for the past 3 months (since march).

This PR adds verbose to GitHub Actions CI to see if we can get more information.

Note this PR just add `set -x` to show detailed step. Will not impact anything else.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

This fixes the rendering of this README as html. The codeblock was
closed with 4 ~, should be 3.
Signed-off-by: Miek Gieben <miek@miek.nl>

Signed-off-by: Licht Takeuchi <licht-t@outlook.jp>

Bumps [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) from 3.5.0-beta.4 to 3.5.0-rc.0.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Changelog](https://github.com/etcd-io/etcd/blob/main/CHANGELOG-3.4.md)
- [Commits](https://github.com/etcd-io/etcd/compare/v3.5.0-beta.4...v3.5.0-rc.0)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.26.0 to 0.28.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.26.0...v0.28.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: coredns[bot] <bot@bot.coredns.io>

Signed-off-by: Sven Nebel <nebel.sven@gmail.com>

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* fix ipv6 case for cidr.Class
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* add check and test case for invalid ipv6 cidr
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* net package is bad at detecting ipv6/ipv4
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* rename Class -> Split
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

Signed-off-by: coredns[bot] <bot@bot.coredns.io>

-p is the default flag in DNS software for setting the port, we use
'dns.port' because of preventing clashes with other caddy software
users. This is no longer an issue, so we can do what we want here.

Add -p to works like -dns.port.

(this PR includes generated manpage, but that shouldn't matter too much)
Signed-off-by: Miek Gieben <miek@miek.nl>

* Bump version and amend notes to include latest PRs
Signed-off-by: Miek Gieben <miek@miek.nl>

* Update notes/coredns-1.8.4.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

* Update notes/coredns-1.8.4.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

* Update notes/coredns-1.8.4.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

* Update notes/coredns-1.8.4.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

* Remove newline and set data anew
Signed-off-by: Miek Gieben <miek@miek.nl>
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

The health endpoint histogram has a large amount of cardinality for a
simple endpoint. Introduce a new "Slim" set of buckets for `/health` to
reduce the metrics load on large deployments. Especially those that have
per-node DNS caching services.

Add a metric to count internal health check failures rather than use the
timeout value as side effect monitor of the check error. This avoids
incorrectly recording the timeout value if there is an error that is not
a timeout (ex. refused)
Signed-off-by: SuperQ <superq@gmail.com>

* confirm endpointslices is served or not
Signed-off-by: uesyn <suemura@zlab.co.jp>

* Apply suggestions
Signed-off-by: uesyn <suemura@zlab.co.jp>

* deprecate normalize and mustnormalize
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* add runtime warning
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* elaborate runtime warning
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* include caller info
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

Signed-off-by: coredns[bot] <bot@bot.coredns.io>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.37.1 to 1.38.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.37.1...v1.38.0)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.21.0 to 0.21.1.
- [Release notes](https://github.com/kubernetes/client-go/releases)
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.21.0...v0.21.1)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.24.0...v0.25.0)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.21.0 to 0.21.1.
- [Release notes](https://github.com/kubernetes/apimachinery/releases)
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.21.0...v0.21.1)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.29.0 to 0.47.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.29.0...v0.47.0)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.38.40 to 1.38.45.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.38.40...v1.38.45)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Revert "plugin/file: Fix in wrong answers returned when wildcard and concrete records exist (#4599)" (#4633)

reverting as I don't want to release 1.8.4 with this enabled.

This reverts commit fbf3f07f.

* trap unsupported FROM cidr notations
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* make is a warning
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

This was found by fuzzing.

We need to make this a fully qualified domain name to catch all errors
in dnsserver/register.go and not later when plugin.Normalize() is called again on these
strings, with the prime difference being that the domain name is fully
qualified. This was found by fuzzing where "ȶ" is deemed OK, but "ȶ." is
not (might be a bug in miekg/dns actually). But here we were checking ȶ,
which is OK, and later we barf in ȶ. leading to "index out of range".

Added a tests and check manually if it would crash with the current code
(yes), and fail with an error in this PR (yes).
Signed-off-by: Miek Gieben <miek@miek.nl>

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

Signed-off-by: coredns[bot] <bot@bot.coredns.io>

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* plugin/file: Fix in wrong answers returned when wildcard and concrete records exist
Signed-off-by: Jason Du <xdu@infoblox.com>

* Remove superfluous change
Signed-off-by: Jason Du <xdu@infoblox.com>

* Re-implementation and new test case
If the domain's terminal is neither the matching wildcard, nor a domian directly
under the wildcard, return NXDOMAIN
Signed-off-by: Jason Du <xdu@infoblox.com>

* Fix empty non-terminal & add test case
Signed-off-by: Jason Du <xdu@infoblox.com>

* Cleanup
Signed-off-by: Jason Du <xdu@infoblox.com>

* Fix case on domain name with character before * and add more test cases
Signed-off-by: Jason Du <xdu@infoblox.com>

* Use different IPs for records in cornerCasesWildcard zone file
Signed-off-by: Jason Du <xdu@infoblox.com>