* plugin/transfer: only allow outgoing axfr over tcp

Return refused when the query comes in over udp.
No need to add a new test case as the current crop needed to be changed
to use TCP.

Fixes: #4450
Signed-off-by: Miek Gieben <miek@miek.nl>

* transfer tests: this needs tcp as well
Signed-off-by: Miek Gieben <miek@miek.nl>

Copy the msg to prevent messing with the (via the pointer) original
created message that may be stored in the cache or anything other data
store.
Signed-off-by: Miek Gieben <miek@miek.nl>

Currently ACLs only allow for allow and block, however it isn't
always desirable to set the status code to REFUSED. Often times
you want to completely hide the fact that those records even exist.

Adding the ability to acl to filter results makes it significantly
harder for a third party to know that the records are being masked.
Signed-off-by: George Shammas <george@shamm.as>

Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.35 to 1.1.37.
- [Release notes](https://github.com/miekg/dns/releases)
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](https://github.com/miekg/dns/compare/v1.1.35...v1.1.37)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.36.31 to 1.37.1.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.36.31...v1.37.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

This commit replaces `manifest-tool` with `docker manifest`, which should
hopefully provide a better experience for releasing coredns.

In addition it integrates mips64le (since it's supported by `docker
manifest`) in LINUX_ARCHES, so docker images for mips64le are pushed as
well.
Signed-off-by: Manuel Rüger <manuel@rueg.eu>

* Revert "make copies of RRs before returning them (#4409)"

This reverts commit 8b2ff6c3.

* Document copying responses

See #4409 and the comments. This documents that issue, but doesn't
change the in-tree plugins just yet.
Signed-off-by: Miek Gieben <miek@miek.nl>

* Update plugin.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

Traces are currently working properly with datadog with the exception of having the ability to facet the tags

![image](https://user-images.githubusercontent.com/5513509/105051238-dddbbd00-5a6e-11eb-8fb2-071b3b1fa8cc.png)

In order to get valuable graph in dashboard the tag on the metrics need to be faceted by datadog.
This PR update the tags with facetable path.
While keeping backward compatibility with existing path for zipkin.

Graph like:
![image](https://user-images.githubusercontent.com/5513509/93375960-339e1f80-f859-11ea-81f0-a1074c375630.png)
![image](https://user-images.githubusercontent.com/5513509/93375997-4153a500-f859-11ea-9f8d-63d45217c681.png)
![image](https://user-images.githubusercontent.com/5513509/93376064-5597a200-f859-11ea-823a-6768f59e3497.png)
![image](https://user-images.githubusercontent.com/5513509/93376405-d6ef3480-f859-11ea-8d6f-58dda247cc86.png)
![image](https://user-images.githubusercontent.com/5513509/93376518-069e3c80-f85a-11ea-9a7e-0426a3817439.png)
Signed-off-by: bob <bob.bouteillier@datadoghq.com>

* plugin/forward Add rcode and rtype to request_duration_seconds metric
Signed-off-by: Maxime Ginters <maxime.ginters@shopify.com>

* Control the cardinality of query type
Signed-off-by: Maxime Ginters <maxime.ginters@shopify.com>

Signed-off-by: timyinshi <shiguangyin@inspur.com>

Fixes #4428
Signed-off-by: Lars Ekman <lars.g.ekman@est.tech>

Automatically submitted.

Automatically submitted.

Signed-off-by: Frank Riley <fhriley@gmail.com>

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

* Remove draft draft from notes, and prepare to release
Signed-off-by: Miek Gieben <miek@miek.nl>

* fix time
Signed-off-by: Miek Gieben <miek@miek.nl>

* remove draft=true
Signed-off-by: Miek Gieben <miek@miek.nl>

* Remove manifest-tool installation

This doesn't install cleanly anymore. I've installed manifest-tool in
/usr/bin on the releaser machine; use that instead of building our own
each time.
Signed-off-by: Miek Gieben <miek@miek.nl>

* Check for manifest-tool to be available; otherwise we tag a release and then fail
Signed-off-by: Miek Gieben <miek@miek.nl>

* Remove draft draft from notes, and prepare to release
Signed-off-by: Miek Gieben <miek@miek.nl>

* fix time
Signed-off-by: Miek Gieben <miek@miek.nl>

* remove draft=true
Signed-off-by: Miek Gieben <miek@miek.nl>

Signed-off-by: zouyu <zouy.fnst@cn.fujitsu.com>

This PR update 1.8.1 release note, adding PR 4387 and 4380 notes,
and bumps the time.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.20.1 to 0.20.2.
- [Release notes](https://github.com/kubernetes/client-go/releases)
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.20.1...v0.20.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.36.23 to 1.36.28.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.36.23...v1.36.28)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

Automatically submitted.

Update the file, remove the duplicate line, add new authors
Signed-off-by: Miek Gieben <miek@miek.nl>

Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

Automatically submitted.

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.36.19 to 1.36.23.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.36.19...v1.36.23)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

PR #4161 is stalled. Tried to cherry pick the code from there, but that
led to conflicts, manually copying over while taking into account the
comments on that PR. Use that code and extend the error checking, don't
modify existing tests and make the badwriter test simpler.

Closes: #4161
Signed-off-by: Miek Gieben <miek@miek.nl>

add tests
Signed-off-by: Miek Gieben <miek@miek.nl>