PowerDNS DNSdist 2.1.0-alpha1 Released

[rgacogne]

https://blog.powerdns.com/2026/01/29/powerdns-dnsdist-2.1.0-alpha1-released

[paddg]

Hello @rgacogne,

Compiling of ipcrypt2.c fails on Suse Enterprise (complete build log):

[  104s] ipcrypt2.c: In function 'aes_encrypt_with_tweak':
[  104s] ipcrypt2.c:295:26: warning: implicit declaration of function '_mm_loadu_si64'; did you mean '_mm_loadl_epi64'? [-Wimplicit-function-declaration]
[  104s]          _mm_shuffle_epi8(_mm_loadu_si64((const void *) tweak),                                     \
[  104s]                           ^
[  104s] ipcrypt2.c:451:35: note: in expansion of macro 'TWEAK_EXPAND'
[  104s]      const BlockVec  tweak_block = TWEAK_EXPAND(tweak);
[  104s]                                    ^~~~~~~~~~~~
[  104s] ipcrypt2.c:295:26: error: incompatible type for argument 1 of '_mm_shuffle_epi8'
[  104s]          _mm_shuffle_epi8(_mm_loadu_si64((const void *) tweak),                                     \
[  104s]                           ^
[  104s] ipcrypt2.c:451:35: note: in expansion of macro 'TWEAK_EXPAND'
[  104s]      const BlockVec  tweak_block = TWEAK_EXPAND(tweak);
[  104s]                                    ^~~~~~~~~~~~
[  104s] In file included from /usr/lib64/gcc/x86_64-suse-linux/7/include/smmintrin.h:32:0,
[  104s]                  from ipcrypt2.c:221:
[  104s] /usr/lib64/gcc/x86_64-suse-linux/7/include/tmmintrin.h:136:1: note: expected '__m128i {aka __vector(2) long long int}' but argument is of type 'int'
[  104s]  _mm_shuffle_epi8 (__m128i __X, __m128i __Y)
[  104s]  ^~~~~~~~~~~~~~~~
[  104s] ipcrypt2.c: In function 'aes_decrypt_with_tweak':
[  104s] ipcrypt2.c:295:26: error: incompatible type for argument 1 of '_mm_shuffle_epi8'
[  104s]          _mm_shuffle_epi8(_mm_loadu_si64((const void *) tweak),                                     \
[  104s]                           ^
[  104s] ipcrypt2.c:483:39: note: in expansion of macro 'TWEAK_EXPAND'
[  104s]      const BlockVec  tweak_block     = TWEAK_EXPAND(tweak);
[  104s]                                        ^~~~~~~~~~~~
[  104s] In file included from /usr/lib64/gcc/x86_64-suse-linux/7/include/smmintrin.h:32:0,
[  104s]                  from ipcrypt2.c:221:
[  104s] /usr/lib64/gcc/x86_64-suse-linux/7/include/tmmintrin.h:136:1: note: expected '__m128i {aka __vector(2) long long int}' but argument is of type 'int'
[  104s]  _mm_shuffle_epi8 (__m128i __X, __m128i __Y)
[  104s]  ^~~~~~~~~~~~~~~~
[  104s] make[2]: *** [Makefile:525: ipcrypt2.lo] Error 1

[rgacogne]

Hello Winfried!

Thank you for reporting this, and sorry about the issue!
Looks like the ipcrypt2.cc code expects these functions to be available, but they were not available before gcc 9 according to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=78782
So I guess we will have to properly detect that and disable ipcrypt2 support in that case.

[rgacogne]

I can see in the log that GCC 7, 11 and 15 are installed but dnsdist is built with gcc (gcc (SUSE Linux) 7.5.0), which indeed does not support these. Let me see if I can reproduce the issue.

[mtheofy]

FWIW - this is also blocking building dnsdist on a raspberry pi on armv7l. Both gcc 14 and clang 19 fail.

I also noticed that softaes/untrinsics.h is missing from ext/ipcrypt2 directory.

[rgacogne]

Good catch, I opened #16799 adding the missing header and updating ipcrypt2 to 1.1.10, which might already help a bit, but probably does not fix everything.

[rgacogne]

We added a few fixes on master:

• updated ipcrypt2 to the latest version which claims to better support old compilers
• added the missing softaes/untrinsics.h
• disabled ipcrypt2 by default when building with autotools
• better detection of compiler support when building with meson