#ifndef BOOST_TEST_DYN_LINK
#define BOOST_TEST_DYN_LINK
#endif

#define BOOST_TEST_NO_MAIN

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif
#include <boost/test/unit_test.hpp>
#include <boost/format.hpp>

#include "iputils.hh"
#include "recursor_cache.hh"
#include "syncres.hh"

BOOST_AUTO_TEST_SUITE(recursorcache_cc)

static void simple(time_t now)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  std::vector<DNSRecord> records;
  MemRecursorCache::AuthRecsVec authRecords;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  const DNSName authZone(".");

  time_t ttd = now + 30;
  DNSName power("powerdns.com.");
  DNSRecord dr0;
  ComboAddress dr0Content("2001:DB8::");
  dr0.d_name = power;
  dr0.d_type = QType::AAAA;
  dr0.d_class = QClass::IN;
  dr0.setContent(std::make_shared<AAAARecordContent>(dr0Content));
  dr0.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  dr0.d_place = DNSResourceRecord::ANSWER;

  records.push_back(dr0);

  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  MRC.replace(now, DNSName("hello"), QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_GT(MRC.bytes(), 1U);
  BOOST_CHECK_EQUAL(MRC.doWipeCache(DNSName("hello"), false, QType::A), 1U);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.bytes(), 0U);

  uint64_t counter = 0;
  try {
    for (counter = 0; counter < 100000; ++counter) {
      DNSName a = DNSName("hello ") + DNSName(std::to_string(counter));
      BOOST_CHECK_EQUAL(DNSName(a.toString()), a);

      MRC.replace(now, a, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);
      if (!MRC.doWipeCache(a, false))
        BOOST_FAIL("Could not remove entry we just added to the cache!");
      MRC.replace(now, a, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);
    }

    BOOST_CHECK_EQUAL(MRC.size(), counter);

    uint64_t delcounter = 0;
    for (delcounter = 0; delcounter < counter / 100; ++delcounter) {
      DNSName a = DNSName("hello ") + DNSName(std::to_string(delcounter));
      BOOST_CHECK_EQUAL(MRC.doWipeCache(a, false, QType::A), 1U);
    }

    BOOST_CHECK_EQUAL(MRC.size(), counter - delcounter);

    std::vector<DNSRecord> retrieved;
    ComboAddress who("192.0.2.1");
    int64_t matches = 0;
    int64_t expected = counter - delcounter;

    for (; delcounter < counter; ++delcounter) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(delcounter)), QType(QType::A), MemRecursorCache::None, &retrieved, who) > 0) {
        matches++;
        BOOST_REQUIRE_EQUAL(retrieved.size(), records.size());
        BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, expected);

    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);

    DNSRecord dr1;
    ComboAddress dr1Content("2001:DB8::1");
    dr1.d_name = power;
    dr1.d_type = QType::AAAA;
    dr1.d_class = QClass::IN;
    dr1.setContent(std::make_shared<AAAARecordContent>(dr1Content));
    dr1.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
    dr1.d_place = DNSResourceRecord::ANSWER;

    DNSRecord dr2;
    ComboAddress dr2Content("192.0.2.42");
    dr2.d_name = power;
    dr2.d_type = QType::A;
    dr2.d_class = QClass::IN;
    dr2.setContent(std::make_shared<ARecordContent>(dr2Content));
    dr2.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
    // the place should not matter to the cache
    dr2.d_place = DNSResourceRecord::AUTHORITY;

    // insert a subnet specific entry
    records.clear();
    records.push_back(dr1);
    MRC.replace(now, power, QType(QType::AAAA), records, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.0.2.1/25"));
    BOOST_CHECK_EQUAL(MRC.size(), 1U);

    // subnet specific should be returned for a matching subnet
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

    // subnet specific should not be returned for a different subnet
    BOOST_CHECK_LT(MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), 0);
    BOOST_CHECK_EQUAL(retrieved.size(), 0U);

    // remove everything
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);

    // insert a NON-subnet specific entry
    records.clear();
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);

    // NON-subnet specific should always be returned
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());

    // insert a subnet specific entry for the same name but a different QType
    records.clear();
    records.push_back(dr1);
    MRC.replace(now, power, QType(QType::AAAA), records, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.0.2.1/25"));
    // we should not have replaced the existing entry
    BOOST_CHECK_EQUAL(MRC.size(), 2U);

    // insert a TXT one, we will use that later
    records.clear();
    records.push_back(dr1);
    MRC.replace(now, power, QType(QType::TXT), records, signatures, authRecords, true, authZone, boost::none);
    // we should not have replaced any existing entry
    BOOST_CHECK_EQUAL(MRC.size(), 3U);

    // we should still get the NON-subnet specific entry
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());

    // we should get the subnet specific entry if we are from the right subnet
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.3")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

    // but nothing from a different subnet
    BOOST_CHECK_LT(MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), 0);
    BOOST_CHECK_EQUAL(retrieved.size(), 0U);

    // QType::ANY should return any qtype, so from the right subnet we should get all of them
    MemRecursorCache::s_limitQTypeAny = false;
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::ANY), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.3")), (ttd - now));
    BOOST_CHECK_EQUAL(retrieved.size(), 3U);
    for (const auto& rec : retrieved) {
      BOOST_CHECK(rec.d_type == QType::A || rec.d_type == QType::AAAA || rec.d_type == QType::TXT);
    }
    // check that the place is always set to ANSWER
    for (const auto& rec : retrieved) {
      BOOST_CHECK(rec.d_place == DNSResourceRecord::ANSWER);
    }

    // but only the non-subnet specific from the another subnet
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::ANY), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_CHECK_EQUAL(retrieved.size(), 2U);
    for (const auto& rec : retrieved) {
      BOOST_CHECK(rec.d_type == QType::A || rec.d_type == QType::TXT);
    }

    // QType::ADDR should return both A and AAAA but no TXT, so two entries from the right subnet
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::ADDR), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.3")), (ttd - now));
    BOOST_CHECK_EQUAL(retrieved.size(), 2U);
    bool gotA = false;
    bool gotAAAA = false;
    for (const auto& rec : retrieved) {
      BOOST_CHECK(rec.d_type == QType::A || rec.d_type == QType::AAAA);
      if (rec.d_type == QType::A) {
        gotA = true;
      }
      else if (rec.d_type == QType::AAAA) {
        gotAAAA = true;
      }
    }
    BOOST_CHECK(gotA);
    BOOST_CHECK(gotAAAA);

    // but only the non-subnet specific one from the another subnet
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::ADDR), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK(retrieved.at(0).d_type == QType::A);

    // entries are only valid until ttd, we should not get anything after that because they are expired
    BOOST_CHECK_LT(MRC.get(ttd + 5, power, QType(QType::ADDR), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), 0);
    BOOST_CHECK_EQUAL(retrieved.size(), 0U);

    // let's age the records for our existing QType::TXT entry so they are now only valid for 5s
    uint32_t newTTL = 5;
    BOOST_CHECK_EQUAL(MRC.doAgeCache(now, power, QType::TXT, newTTL), true);

    // we should still be able to retrieve it
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::TXT), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), static_cast<int32_t>(newTTL));
    BOOST_CHECK_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK(retrieved.at(0).d_type == QType::TXT);
    // please note that this is still a TTD at this point
    BOOST_CHECK_EQUAL(retrieved.at(0).d_ttl, now + newTTL);

    // but 10s later it should be gone
    BOOST_CHECK_LT(MRC.get(now + 10, power, QType(QType::TXT), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), 0);
    BOOST_CHECK_EQUAL(retrieved.size(), 0U);

    // wipe everything
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);
    records.clear();

    // insert auth record
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_CHECK_EQUAL(retrieved.size(), 1U);

    DNSRecord dr3;
    ComboAddress dr3Content("192.0.2.84");
    dr3.d_name = power;
    dr3.d_type = QType::A;
    dr3.d_class = QClass::IN;
    dr3.setContent(std::make_shared<ARecordContent>(dr3Content));
    dr3.d_ttl = static_cast<uint32_t>(ttd + 100); // XXX truncation
    // the place should not matter to the cache
    dr3.d_place = DNSResourceRecord::AUTHORITY;

    // this is important for our tests
    BOOST_REQUIRE_GT(dr3.d_ttl, ttd);

    records.clear();
    records.push_back(dr3);

    // non-auth should not replace valid auth
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, false, authZone, boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());

    // but non-auth _should_ replace expired auth
    MRC.replace(ttd + 1, power, QType(QType::A), records, signatures, authRecords, false, authZone, boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);
    BOOST_CHECK_EQUAL(MRC.get(ttd + 1, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (dr3.d_ttl - (ttd + 1)));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr3Content.toString());

    // non-auth should replace non-auth
    records.clear();
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, false, authZone, boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);
    // let's first check that non-auth is not returned when we need authoritative data
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::RequireAuth, &retrieved, ComboAddress("127.0.0.1")), -1);
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());

    // wipe everything
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);
    records.clear();

    // insert Secure record
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none, boost::none, vState::Secure);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);
    vState retrievedState = vState::Indeterminate;
    bool wasAuth = false;
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1"), boost::none, nullptr, nullptr, nullptr, &retrievedState, &wasAuth), (ttd - now));
    BOOST_CHECK_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(vStateToString(retrievedState), vStateToString(vState::Secure));
    BOOST_CHECK_EQUAL(wasAuth, true);
    // try to replace that with a Bogus record
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none, boost::none, vState::BogusNoRRSIG);
    BOOST_CHECK_EQUAL(MRC.size(), 1U);
    retrievedState = vState::Indeterminate;
    wasAuth = false;
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1"), boost::none, nullptr, nullptr, nullptr, &retrievedState, &wasAuth), (ttd - now));
    BOOST_CHECK_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(vStateToString(retrievedState), vStateToString(vState::Secure));
    BOOST_CHECK_EQUAL(wasAuth, true);

    /**** Most specific netmask tests ****/

    // wipe everything
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);
    records.clear();

    // insert an entry for 192.0.0.1/8
    records.clear();
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.0.0.1/8"));
    BOOST_CHECK_EQUAL(MRC.size(), 1U);

    /* same as dr2 except for the actual IP */
    DNSRecord dr4;
    ComboAddress dr4Content("192.0.2.126");
    dr4.d_name = power;
    dr4.d_type = QType::A;
    dr4.d_class = QClass::IN;
    dr4.setContent(std::make_shared<ARecordContent>(dr4Content));
    dr4.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
    dr4.d_place = DNSResourceRecord::AUTHORITY;

    // insert another entry but for 192.168.0.1/31
    records.clear();
    records.push_back(dr4);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.168.0.1/31"));
    // we should not have replaced any existing entry
    BOOST_CHECK_EQUAL(MRC.size(), 2U);

    // insert the same than the first one but for 192.168.0.2/32
    records.clear();
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.168.0.2/32"));
    // we should not have replaced any existing entry
    BOOST_CHECK_EQUAL(MRC.size(), 3U);

    // we should get the most specific entry for 192.168.0.1, so the second one
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.168.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr4Content.toString());

    // wipe everything
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);
    records.clear();

    // insert an entry for 192.0.0.1/8, non auth
    records.clear();
    records.push_back(dr2);
    MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, false, authZone, boost::optional<Netmask>("192.0.0.1/8"));
    BOOST_CHECK_EQUAL(MRC.size(), 1U);

    // we should not get it when we need authoritative data
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::RequireAuth, &retrieved, ComboAddress("192.168.0.1")), -1);
    BOOST_REQUIRE_EQUAL(retrieved.size(), 0U);

    // but we should when we are OK with non-auth
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.168.0.1")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());
  }
  catch (const PDNSException& e) {
    cerr << "Had error: " << e.reason << endl;
    throw;
  }
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheSimple)
{
  simple(time(nullptr));
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheSimple2038)
{
  simple(INT_MAX - 15);
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheSimple2038bis)
{
  simple(time_t(INT_MAX) + 10000);
}

#if 0
BOOST_AUTO_TEST_CASE(test_RecursorCacheSimpleDistantFuture)
{
  // Fails due to using 32-bit ttl values in records for absolute time, see handleHit()
  simple(2 * time_t(INT_MAX));
}
#endif

BOOST_AUTO_TEST_CASE(test_RecursorCacheBig)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache::s_maxEntrySize = 64 * 1024;
  MemRecursorCache MRC;

  std::vector<DNSRecord> records;
  std::vector<DNSRecord> retrieved;
  const DNSName authZone(".");

  time_t now = time(nullptr);
  time_t ttd = now + 30;
  DNSName power("powerdns.com.");
  DNSRecord dr0;
  string dr0Content("2001:DB8::");
  dr0.d_name = power;
  dr0.d_type = QType::AAAA;
  dr0.d_class = QClass::IN;
  dr0.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  dr0.d_place = DNSResourceRecord::ANSWER;
  for (int i = 0; i < MemRecursorCache::s_maxRRSetSize; i++) {
    dr0.setContent(std::make_shared<AAAARecordContent>(dr0Content + std::to_string(i)));
    records.push_back(dr0);
  }

  // This one should fit
  MRC.replace(now, power, QType::AAAA, records, {}, {}, true, authZone, boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress()), (ttd - now));
  BOOST_CHECK_EQUAL(retrieved.size(), MemRecursorCache::s_maxRRSetSize);

  dr0.setContent(std::make_shared<AAAARecordContent>(dr0Content + std::to_string(MemRecursorCache::s_maxRRSetSize)));
  records.push_back(dr0);
  // This one is too large and should throw exception
  MRC.replace(now, power, QType::AAAA, records, {}, {}, true, authZone, boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  BOOST_CHECK_THROW((void)MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress()),
                    ImmediateServFailException);

  records.resize(1);
  // This one should fit again
  MRC.replace(now, power, QType::AAAA, records, {}, {}, true, authZone, boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::AAAA), MemRecursorCache::None, &retrieved, ComboAddress()), (ttd - now));
  BOOST_CHECK_EQUAL(retrieved.size(), 1U);
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheGhost)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  std::vector<DNSRecord> records;
  MemRecursorCache::AuthRecsVec authRecords;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  time_t now = time(nullptr);

  BOOST_CHECK_EQUAL(MRC.size(), 0U);

  /* insert NS coming from a delegation */
  time_t ttd = now + 30;
  DNSName ghost("ghost.powerdns.com.");
  DNSRecord ns1;
  std::string ns1Content("ns1.ghost.powerdns.com.");
  ns1.d_name = ghost;
  ns1.d_type = QType::NS;
  ns1.d_class = QClass::IN;
  ns1.setContent(std::make_shared<NSRecordContent>(ns1Content));
  ns1.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  ns1.d_place = DNSResourceRecord::ANSWER;
  records.push_back(ns1);
  MRC.replace(now, ns1.d_name, QType(ns1.d_type), records, signatures, authRecords, true, DNSName("powerdns.com."), boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* try to raise the TTL, simulating the delegated authoritative server
     raising the TTL so the zone stays alive */
  records.clear();
  ns1.d_ttl = static_cast<uint32_t>(ttd + 3600); // XXX truncation
  records.push_back(ns1);
  MRC.replace(now, ns1.d_name, QType(ns1.d_type), records, signatures, authRecords, true, DNSName("ghost.powerdns.com."), boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* the TTL should not have been raised */
  std::vector<DNSRecord> retrieved;
  BOOST_CHECK_EQUAL(MRC.get(now, ghost, QType(QType::NS), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2")), (ttd - now));
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(retrieved.at(0).d_ttl, static_cast<uint32_t>(ttd));
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheReplaceAuthByNonAuthMargin)
{
  // Test #12140: as QM does a best NS lookup and then  uses it, incoming infra records should update
  // cache, otherwise they might expire in-between.
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  std::vector<DNSRecord> records;
  MemRecursorCache::AuthRecsVec authRecords;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  time_t now = time(nullptr);

  BOOST_CHECK_EQUAL(MRC.size(), 0U);

  const time_t expiry = 30;
  time_t ttd = now + expiry;

  DNSRecord ns1;
  auto record1 = DNSName("ns1.powerdns.com.");
  ns1.d_name = record1;
  ns1.d_type = QType::NS;
  ns1.d_class = QClass::IN;
  ns1.setContent(std::make_shared<NSRecordContent>(record1));
  ns1.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  ns1.d_place = DNSResourceRecord::ANSWER;
  records.push_back(ns1);
  MRC.replace(now, ns1.d_name, QType(ns1.d_type), records, signatures, authRecords, true, DNSName("powerdns.com."), boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  // Record will expire soon so we should hit the 5s margin, replace by non-auth data should succeed
  now = ttd - 1;
  ttd = now + expiry;
  ns1.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  records.clear();
  records.push_back(ns1);

  MRC.replace(now, ns1.d_name, QType(ns1.d_type), records, signatures, authRecords, false, DNSName("powerdns.com."), boost::none);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  // Let time pass, if we did not insert the non-auth record, it will be expired
  now += expiry / 2;

  std::vector<DNSRecord> retrieved;
  BOOST_CHECK_EQUAL(MRC.get(now, record1, QType(QType::NS), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2")), (ttd - now));
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(retrieved.at(0).d_ttl, static_cast<uint32_t>(ttd));
}

BOOST_AUTO_TEST_CASE(test_RecursorCache_ExpungingExpiredEntries)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC(1);

  std::vector<DNSRecord> records;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  MemRecursorCache::AuthRecsVec authRecs;
  const DNSName authZone(".");
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  time_t now = time(nullptr);
  DNSName power1("powerdns.com.");
  DNSName power2("powerdns-1.com.");
  time_t ttd = now - 30;
  std::vector<DNSRecord> retrieved;
  ComboAddress who("192.0.2.1");

  /* entry for power, which expired 30s ago */
  DNSRecord dr1;
  ComboAddress dr1Content("2001:DB8::1");
  dr1.d_name = power1;
  dr1.d_type = QType::AAAA;
  dr1.d_class = QClass::IN;
  dr1.setContent(std::make_shared<AAAARecordContent>(dr1Content));
  dr1.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  dr1.d_place = DNSResourceRecord::ANSWER;

  /* entry for power1, which expired 30 ago too */
  DNSRecord dr2;
  ComboAddress dr2Content("2001:DB8::2");
  dr2.d_name = power2;
  dr2.d_type = QType::AAAA;
  dr2.d_class = QClass::IN;
  dr2.setContent(std::make_shared<AAAARecordContent>(dr2Content));
  dr2.d_ttl = static_cast<uint32_t>(ttd); // XXX truncation
  dr2.d_place = DNSResourceRecord::ANSWER;

  /* insert both entries */
  records.push_back(dr1);
  MRC.replace(now, power1, QType(dr1.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power2, QType(dr2.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* the one for power2 having been inserted more recently should be removed last */
  /* we ask that 10 entries remain in the cache, this is larger than
     the cache size (2), so 1 entry will be looked at as the code
     rounds up the 10% of entries per shard to look at */
  MRC.doPrune(now, 10);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* the remaining entry should be power2, but to get it
     we need to go back in the past a bit */
  BOOST_CHECK_EQUAL(MRC.get(ttd - 1, power2, QType(dr2.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), 1);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());
  /* check that power1 is gone */
  BOOST_CHECK_EQUAL(MRC.get(ttd - 1, power1, QType(dr1.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), -1);

  /* clear everything up */
  MRC.doWipeCache(DNSName("."), true);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  records.clear();

  /* insert both entries back */
  records.push_back(dr1);
  MRC.replace(now, power1, QType(dr1.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power2, QType(dr2.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* trigger a miss (expired) for power2 */
  BOOST_CHECK_EQUAL(MRC.get(now, power2, QType(dr2.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), -1);

  /* power2 should have been moved to the front of the expunge
     queue, and should this time be removed first */
  /* we ask that 10 entries remain in the cache, this is larger than
     the cache size (2), so 1 entry will be looked at as the code
     rounds up the 10% of entries per shard to look at */
  MRC.doPrune(now, 10);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* the remaining entry should be power1, but to get it
     we need to go back in the past a bit */
  BOOST_CHECK_EQUAL(MRC.get(ttd - 1, power1, QType(dr1.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), 1);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());
  /* check that power2 is gone */
  BOOST_CHECK_EQUAL(MRC.get(ttd - 1, power2, QType(dr2.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), -1);
}

BOOST_AUTO_TEST_CASE(test_RecursorCache_ExpungingValidEntries)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC(1);

  std::vector<DNSRecord> records;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  MemRecursorCache::AuthRecsVec authRecs;
  const DNSName authZone(".");
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  time_t now = time(nullptr);
  DNSName power1("powerdns.com.");
  DNSName power2("powerdns-1.com.");
  time_t ttd = now + 30;
  std::vector<DNSRecord> retrieved;
  ComboAddress who("192.0.2.1");

  /* entry for power, which will expire in 30s */
  DNSRecord dr1;
  ComboAddress dr1Content("2001:DB8::1");
  dr1.d_name = power1;
  dr1.d_type = QType::AAAA;
  dr1.d_class = QClass::IN;
  dr1.setContent(std::make_shared<AAAARecordContent>(dr1Content));
  dr1.d_ttl = static_cast<uint32_t>(ttd);
  dr1.d_place = DNSResourceRecord::ANSWER;

  /* entry for power1, which will expire in 30s too */
  DNSRecord dr2;
  ComboAddress dr2Content("2001:DB8::2");
  dr2.d_name = power2;
  dr2.d_type = QType::AAAA;
  dr2.d_class = QClass::IN;
  dr2.setContent(std::make_shared<AAAARecordContent>(dr2Content));
  dr2.d_ttl = static_cast<uint32_t>(ttd);
  dr2.d_place = DNSResourceRecord::ANSWER;

  /* insert both entries */
  records.push_back(dr1);
  MRC.replace(now, power1, QType(dr1.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power2, QType(dr2.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* the one for power2 having been inserted
     more recently should be removed last */
  /* we ask that only entry remains in the cache */
  MRC.doPrune(now, 1);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* the remaining entry should be power2 */
  BOOST_CHECK_EQUAL(MRC.get(now, power2, QType(dr2.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());
  /* check that power1 is gone */
  BOOST_CHECK_EQUAL(MRC.get(now, power1, QType(dr1.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), -1);

  /* clear everything up */
  MRC.doWipeCache(DNSName("."), true);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  records.clear();

  /* insert both entries back */
  records.push_back(dr1);
  MRC.replace(now, power1, QType(dr1.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power2, QType(dr2.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* replace the entry for power1 */
  records.push_back(dr1);
  MRC.replace(now, power1, QType(dr1.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* the replaced entry for power1 should have been moved
     to the back of the expunge queue, so power2 should be at the front
     and should this time be removed first */
  /* we ask that only entry remains in the cache */
  MRC.doPrune(now, 1);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* the remaining entry should be power1 */
  BOOST_CHECK_EQUAL(MRC.get(now, power1, QType(dr1.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());
  /* check that power2 is gone */
  BOOST_CHECK_EQUAL(MRC.get(now, power2, QType(dr2.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), -1);

  /* clear everything up */
  MRC.doWipeCache(DNSName("."), true);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  records.clear();

  /* insert both entries back */
  records.push_back(dr1);
  MRC.replace(now, power1, QType(dr1.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power2, QType(dr2.d_type), records, signatures, authRecs, true, authZone, boost::none);
  records.clear();
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* get a hit for power1 */
  BOOST_CHECK_EQUAL(MRC.get(now, power1, QType(dr1.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

  /* the entry for power1 should have been moved to the back of the expunge queue
     due to the hit, so power2 should be at the front and should this time be removed first */
  /* we ask that only entry remains in the cache */
  MRC.doPrune(now, 1);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* the remaining entry should be power1 */
  BOOST_CHECK_EQUAL(MRC.get(now, power1, QType(dr1.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<AAAARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());
  /* check that power2 is gone */
  BOOST_CHECK_EQUAL(MRC.get(now, power2, QType(dr2.d_type), MemRecursorCache::None, &retrieved, who, boost::none, nullptr), -1);

  MRC.doPrune(now, 0);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);

  /* add a lot of netmask-specific entries */
  for (size_t i = 0; i <= 255; i++) {
    records.clear();

    DNSRecord r1;
    ComboAddress r1Content("192.0.2." + std::to_string(i));
    r1.d_name = power1;
    r1.d_type = QType::A;
    r1.d_class = QClass::IN;
    r1.setContent(std::make_shared<ARecordContent>(r1Content));
    r1.d_ttl = static_cast<uint32_t>(ttd);
    r1.d_place = DNSResourceRecord::ANSWER;
    records.push_back(r1);

    MRC.replace(now, power1, QType(QType::A), records, signatures, authRecs, true, authZone, Netmask(r1Content, 32));
  }

  BOOST_CHECK_EQUAL(MRC.size(), 256U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* remove a bit less than half of them */
  size_t keep = 129;
  MRC.doPrune(now, keep);
  BOOST_CHECK_EQUAL(MRC.size(), keep);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* check that we can still retrieve the remaining ones */
  size_t found = 0;
  for (size_t i = 0; i <= 255; i++) {
    ComboAddress whoLoop("192.0.2." + std::to_string(i));

    auto ret = MRC.get(now, power1, QType(QType::A), MemRecursorCache::None, &retrieved, whoLoop);
    if (ret > 0) {
      BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
      BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), whoLoop.toString());
      found++;
    }
    else {
      BOOST_REQUIRE_EQUAL(ret, -1);
      BOOST_REQUIRE_EQUAL(retrieved.size(), 0U);
    }
  }

  BOOST_CHECK_EQUAL(found, keep);

  /* remove the rest */
  MRC.doPrune(now, 0);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheECSIndex)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC(1);

  const DNSName power("powerdns.com.");
  const DNSName authZone(".");
  std::vector<DNSRecord> records;
  MemRecursorCache::AuthRecsVec authRecords;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  time_t now = time(nullptr);
  std::vector<DNSRecord> retrieved;
  ComboAddress who("192.0.2.1");

  time_t ttl = 10;
  time_t ttd = now + ttl;
  DNSRecord dr1;
  ComboAddress dr1Content("192.0.2.255");
  dr1.d_name = power;
  dr1.d_type = QType::A;
  dr1.d_class = QClass::IN;
  dr1.setContent(std::make_shared<ARecordContent>(dr1Content));
  dr1.d_ttl = static_cast<uint32_t>(ttd);
  dr1.d_place = DNSResourceRecord::ANSWER;

  DNSRecord dr2;
  ComboAddress dr2Content("192.0.2.127");
  dr2.d_name = power;
  dr2.d_type = QType::A;
  dr2.d_class = QClass::IN;
  dr2.setContent(std::make_shared<ARecordContent>(dr2Content));
  dr2.d_ttl = static_cast<uint32_t>(now + 5);
  dr2.d_place = DNSResourceRecord::ANSWER;

  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* no entry in the ECS index, no non-specific entry either */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, who), -1);

  /* insert a non-specific entry */
  records.push_back(dr1);
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);

  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* retrieve the non-specific entry */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, who), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

  /* wipe everything */
  MRC.doPrune(now, 0);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* insert a specific entry */
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));

  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* there is an ECS index for that entry but no match, and no non-specific entry */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.4")), -1);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 0U);

  /* there is an ECS index for that entry and we get a match */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.1")), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

  /* there is an ECS index for that entry and we get a match,
     but it has expired. No other match, no non-specific entry */
  BOOST_CHECK_EQUAL(MRC.get(now + ttl + 1, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.1")), -1);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 0U);

  /* The ECS index should now be empty, but the cache entry has not been expunged yet */
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);

  /* add back the entry while it still exists in the cache but has been removed from the ECS index.
     It should be added back to the ECS index, and we should be able to retrieve it */
  MRC.replace(now + ttl + 1, power, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));
  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.1")), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

  /* wipe everything */
  MRC.doPrune(now, 0);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* insert a specific entry */
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/24"));

  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* insert a slightly more specific one, but expiring sooner */
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/26"));

  BOOST_CHECK_EQUAL(MRC.size(), 2U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* check that we get the most specific one as long as it's still valid */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.1")), 5);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());

  /* there is an ECS index for that entry and we get a match,
     but it has expired.
     The second ECS is a match too, and is valid. */
  BOOST_CHECK_EQUAL(MRC.get(now + 5 + 1, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.1")), (ttd - (now + 5 + 1)));
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

  /* The ECS index should not be empty */
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);
  BOOST_CHECK_EQUAL(MRC.size(), 2U);

  /* wipe everything */
  MRC.doPrune(now, 0);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* insert a non-specific entry */
  records.clear();
  records.push_back(dr1);
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, boost::none);

  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* insert a subnet-specific entry */
  records.clear();
  records.push_back(dr2);
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.42/32"));

  BOOST_CHECK_EQUAL(MRC.size(), 2U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* there is an ECS index for that entry and it doesn't match. No other match, but we have a non-specific entry */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.255")), ttd - now);
  BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
  BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

  BOOST_CHECK_EQUAL(MRC.size(), 2U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* wipe everything */
  MRC.doPrune(now, 0);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);
}

BOOST_AUTO_TEST_CASE(test_RecursorCache_Wipe)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  const DNSName power("powerdns.com.");
  const DNSName authZone(".");
  std::vector<DNSRecord> records;
  MemRecursorCache::AuthRecsVec authRecords;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  time_t now = time(nullptr);
  std::vector<DNSRecord> retrieved;
  ComboAddress who("192.0.2.1");

  time_t ttl = 10;
  time_t ttd = now + ttl;
  DNSRecord dr1;
  ComboAddress dr1Content("192.0.2.255");
  dr1.d_name = power;
  dr1.d_type = QType::A;
  dr1.d_class = QClass::IN;
  dr1.setContent(std::make_shared<ARecordContent>(dr1Content));
  dr1.d_ttl = static_cast<uint32_t>(ttd);
  dr1.d_place = DNSResourceRecord::ANSWER;

  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);

  /* no entry in the ECS index, no non-specific entry either */
  BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, who), -1);

  /* insert a specific entry */
  records.push_back(dr1);
  MRC.replace(now, power, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));

  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  /* insert two sub-domains entries */
  DNSName sub1("a.powerdns.com.");
  dr1.d_name = sub1;
  records.clear();
  records.push_back(dr1);
  MRC.replace(now, sub1, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));

  BOOST_CHECK_EQUAL(MRC.size(), 2U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 2U);

  DNSName sub2("z.powerdns.com.");
  dr1.d_name = sub2;
  records.clear();
  records.push_back(dr1);
  MRC.replace(now, sub2, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));

  BOOST_CHECK_EQUAL(MRC.size(), 3U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 3U);

  /* insert two entries for different domains */
  DNSName other1("b\bpowerdns.com.");
  dr1.d_name = other1;
  records.clear();
  records.push_back(dr1);
  MRC.replace(now, other1, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));

  BOOST_CHECK_EQUAL(MRC.size(), 4U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 4U);

  DNSName other2("c\bpowerdns.com.");
  dr1.d_name = other2;
  records.clear();
  records.push_back(dr1);
  MRC.replace(now, other2, QType(QType::A), records, signatures, authRecords, true, authZone, Netmask("192.0.2.0/31"));

  BOOST_CHECK_EQUAL(MRC.size(), 5U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 5U);

  /* wipe everything under the powerdns.com domain */
  BOOST_CHECK_EQUAL(MRC.doWipeCache(power, true), 3U);
  BOOST_CHECK_EQUAL(MRC.size(), 2U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 2U);

  /* now wipe the other domains too */
  BOOST_CHECK_EQUAL(MRC.doWipeCache(other1, true), 1U);
  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 1U);

  BOOST_CHECK_EQUAL(MRC.doWipeCache(other2, true), 1U);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.ecsIndexSize(), 0U);
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheTagged)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  const DNSName authZone(".");
  MemRecursorCache::AuthRecsVec authRecords;
  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  time_t now = time(nullptr);
  time_t ttd = now + 30;

  DNSName power("powerdns.com.");
  DNSRecord dr0;
  ComboAddress dr0Content("192.0.2.40");
  dr0.d_name = power;
  dr0.d_type = QType::A;
  dr0.d_class = QClass::IN;
  dr0.setContent(std::make_shared<ARecordContent>(dr0Content));
  dr0.d_ttl = static_cast<uint32_t>(ttd);
  dr0.d_place = DNSResourceRecord::ANSWER;
  std::vector<DNSRecord> rset0;
  rset0.push_back(dr0);

  DNSRecord dr0tagged;
  ComboAddress dr0taggedContent("192.0.2.100");
  dr0tagged.d_name = power;
  dr0tagged.d_type = QType::A;
  dr0tagged.d_class = QClass::IN;
  dr0tagged.setContent(std::make_shared<ARecordContent>(dr0taggedContent));
  dr0tagged.d_ttl = static_cast<uint32_t>(ttd);
  dr0tagged.d_place = DNSResourceRecord::ANSWER;
  std::vector<DNSRecord> rset0tagged;
  rset0tagged.push_back(dr0tagged);

  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  // An entry without edns subnet gets stored without tag as well
  MRC.replace(ttd, DNSName("hello"), QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, boost::none);
  MRC.replace(ttd, DNSName("hello"), QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, string("mytag"));
  BOOST_CHECK_EQUAL(MRC.size(), 1U);
  BOOST_CHECK_EQUAL(MRC.doWipeCache(DNSName("hello"), false, QType::A), 1U);
  BOOST_CHECK_EQUAL(MRC.size(), 0U);
  BOOST_CHECK_EQUAL(MRC.bytes(), 0U);

  ComboAddress nobody;
  ComboAddress who("192.0.2.1");

  uint64_t counter = 0;
  try {
    for (counter = 0; counter < 100; ++counter) {
      DNSName a = DNSName("hello ") + DNSName(std::to_string(counter));
      BOOST_CHECK_EQUAL(DNSName(a.toString()), a);

      MRC.replace(now, a, QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, string("mytagA"));
      MRC.replace(now, a, QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, string("mytagB"));
      // After this, we have untagged entries, since no address was specified for both replace calls
    }

    BOOST_CHECK_EQUAL(MRC.size(), counter);

    std::vector<DNSRecord> retrieved;
    int64_t matches = 0;
    int64_t expected = counter;

    for (counter = 0; counter < 110; counter++) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, nobody, boost::none) > 0) {
        matches++;
        BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
        BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, expected);

    matches = 0;
    for (counter = 0; counter < 110; ++counter) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, who, string("mytagB")) > 0) {
        matches++;
        BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
        BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, expected);

    matches = 0;
    for (counter = 0; counter < 110; counter++) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, who, string("mytagX")) > 0) {
        matches++;
        BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
        BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, expected);

    // Now insert some tagged entries
    for (counter = 0; counter < 50; ++counter) {
      DNSName a = DNSName("hello ") + DNSName(std::to_string(counter));
      MRC.replace(now, a, QType(QType::A), rset0tagged, signatures, authRecords, true, authZone, boost::optional<Netmask>("128.0.0.0/8"), string("mytagA"));
    }
    BOOST_CHECK_EQUAL(MRC.size(), 150U);

    matches = 0;
    for (counter = 0; counter < 110; counter++) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, nobody, boost::none) > 0) {
        matches++;
        BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
        BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, 100U);

    matches = 0;
    for (counter = 0; counter < 110; ++counter) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, nobody, string("mytagA")) > 0) {
        matches++;
        if (counter < 50) {
          BOOST_CHECK_EQUAL(retrieved.size(), rset0tagged.size());
          BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0taggedContent.toString());
        }
        else {
          BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
          BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
        }
      }
    }
    BOOST_CHECK_EQUAL(matches, 100U);

    matches = 0;
    for (counter = 0; counter < 110; counter++) {
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, nobody, string("mytagX")) > 0) {
        matches++;
        BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
        BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, 100U);

    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);

    DNSRecord dr1;
    ComboAddress dr1Content("192.0.2.41");
    dr1.d_name = power;
    dr1.d_type = QType::A;
    dr1.d_class = QClass::IN;
    dr1.setContent(std::make_shared<ARecordContent>(dr1Content));
    dr1.d_ttl = static_cast<uint32_t>(ttd);
    dr1.d_place = DNSResourceRecord::ANSWER;
    std::vector<DNSRecord> rset1;
    rset1.push_back(dr1);

    DNSRecord dr2;
    ComboAddress dr2Content("192.0.2.42");
    dr2.d_name = power;
    dr2.d_type = QType::A;
    dr2.d_class = QClass::IN;
    dr2.setContent(std::make_shared<ARecordContent>(dr2Content));
    dr2.d_ttl = static_cast<uint32_t>(ttd);
    dr2.d_place = DNSResourceRecord::ANSWER;
    std::vector<DNSRecord> rset2;
    rset2.push_back(dr2);

    DNSRecord dr3;
    ComboAddress dr3Content("192.0.2.43");
    dr3.d_name = power;
    dr3.d_type = QType::A;
    dr3.d_class = QClass::IN;
    dr3.setContent(std::make_shared<ARecordContent>(dr3Content));
    dr3.d_ttl = static_cast<uint32_t>(ttd);
    dr3.d_place = DNSResourceRecord::ANSWER;
    std::vector<DNSRecord> rset3;
    rset3.push_back(dr3);

    // insert a tagged entry
    MRC.replace(now, power, QType(QType::A), rset1, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.0.2.0/24"), string("mytag"));
    BOOST_CHECK_EQUAL(MRC.size(), 1U);

    // tagged specific should be returned for a matching tag
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2"), string("mytag")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

    // tag specific should not be returned for a different tag
    BOOST_CHECK_LT(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2"), string("othertag")), 0);
    BOOST_CHECK_EQUAL(retrieved.size(), 0U);

    // insert a new  entry without tag
    MRC.replace(now, power, QType(QType::A), rset2, signatures, authRecords, true, authZone, boost::optional<Netmask>("192.0.3.0/24"), boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 2U);

    // tagged specific should be returned for a matching tag
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2"), string("mytag")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

    // if no tag given nothing should be retrieved if address doesn't match
    BOOST_CHECK_LT(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("127.0.0.1"), boost::none), 0);
    BOOST_REQUIRE_EQUAL(retrieved.size(), 0U);

    // if no tag given and no-non-tagged entries matches nothing should be returned
    BOOST_CHECK_LT(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2"), boost::none), 0);
    BOOST_REQUIRE_EQUAL(retrieved.size(), 0U);

    // Insert untagged entry with no netmask
    MRC.replace(now, power, QType(QType::A), rset3, signatures, authRecords, true, authZone, boost::none, boost::none);
    BOOST_CHECK_EQUAL(MRC.size(), 3U);

    // Retrieval with no address and no tag should get that one
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress(), boost::none), (ttd - now));
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr3Content.toString());

    // If no tag given match non-tagged entry
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2"), boost::none), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr3Content.toString());

    // If no tag given we should be able to retrieve the netmask specific record
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.3.1"), boost::none), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr2Content.toString());

    // tagged specific should still be returned for a matching tag, address is not used
    BOOST_CHECK_EQUAL(MRC.get(now, power, QType(QType::A), MemRecursorCache::None, &retrieved, ComboAddress("192.0.2.2"), string("mytag")), (ttd - now));
    BOOST_REQUIRE_EQUAL(retrieved.size(), 1U);
    BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr1Content.toString());

    // remove everything
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);
  }
  catch (const PDNSException& e) {
    cerr << "Had error: " << e.reason << endl;
    throw;
  }
}

BOOST_AUTO_TEST_CASE(test_RecursorCacheDumpAndRestore)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  const DNSName authZone(".");
  MemRecursorCache::AuthRecsVec authRecords;
  DNSRecord dr;
  dr.d_place = DNSResourceRecord::ANSWER;
  dr.d_name = DNSName("hi");
  dr.d_type = QType::AAAA;
  dr.d_ttl = 3600;
  dr.setContent(std::make_shared<ARecordContent>(ComboAddress("1::2:3:4")));
  authRecords.emplace_back(dr);

  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  signatures.emplace_back(std::dynamic_pointer_cast<RRSIGRecordContent>(RRSIGRecordContent::make("DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xx ItRJUUim+SrJywAmLKe+48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44 usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcAplV9OYWhxi+CxmxZU5 8vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3 WMootO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6Ghkd SpLsRxArUhvoVgtnh0LkAV7TsajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGv LiGkIQ==")));

  time_t now = time(nullptr);
  time_t ttd = now + 30;

  DNSName power("powerdns.com.");
  DNSRecord dr0;
  ComboAddress dr0Content("192.0.2.40");
  dr0.d_name = power;
  dr0.d_type = QType::A;
  dr0.d_class = QClass::IN;
  dr0.setContent(std::make_shared<ARecordContent>(dr0Content));
  dr0.d_ttl = static_cast<uint32_t>(ttd);
  dr0.d_place = DNSResourceRecord::ANSWER;
  std::vector<DNSRecord> rset0;
  rset0.push_back(dr0);

  const ComboAddress nobody;
  const ComboAddress somebody("::1");
  const time_t ttl_time = 90;

  auto checker = [&] {
    const size_t expected = 100;

    for (size_t counter = 0; counter < expected; ++counter) {
      DNSName a = DNSName("hello ") + DNSName(std::to_string(counter));
      BOOST_CHECK_EQUAL(DNSName(a.toString()), a);

      MRC.replace(now, a, QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, boost::none, vState::Insecure, somebody, false, ttl_time);
    }

    BOOST_CHECK_EQUAL(MRC.size(), expected);

    size_t matches = 0;

    for (size_t counter = 0; counter < expected + 10; counter++) {
      std::vector<DNSRecord> retrieved;
      MemRecursorCache::AuthRecs authRecs;
      MemRecursorCache::SigRecs sigs;
      bool variable = false;
      vState state = vState::Indeterminate;
      bool wasAuth = false;
      DNSName fromZone;
      ComboAddress from;
      if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, somebody, boost::none, &sigs, &authRecs, &variable, &state, &wasAuth, &fromZone, &from) > 0) {
        matches++;
        BOOST_CHECK_EQUAL(retrieved.size(), rset0.size());
        BOOST_CHECK_EQUAL(getRR<ARecordContent>(retrieved.at(0))->getCA().toString(), dr0Content.toString());
        BOOST_CHECK_EQUAL(sigs->size(), 1U);
        BOOST_CHECK_EQUAL(sigs->at(0)->getZoneRepresentation(), signatures.at(0)->getZoneRepresentation());
        BOOST_CHECK_EQUAL(authRecs->size(), 1U);

        BOOST_CHECK_EQUAL(authRecs->at(0).toString(), authRecords.at(0).toString());
        BOOST_CHECK_EQUAL(state, vState::Insecure);
        BOOST_CHECK_EQUAL(wasAuth, true);
        BOOST_CHECK_EQUAL(fromZone, authZone);
        BOOST_CHECK_EQUAL(from.toString(), somebody.toString());
      }
    }
    BOOST_CHECK_EQUAL(matches, expected);
  };
  try {
    checker();

    std::string dump;
    MRC.getRecordSets(0, 0, dump);
    MRC.doWipeCache(DNSName("."), true);
    BOOST_CHECK_EQUAL(MRC.size(), 0U);
    size_t inserted = MRC.putRecordSets(dump);
    BOOST_CHECK_EQUAL(inserted, 100U);
    BOOST_CHECK_EQUAL(MRC.size(), 100U);

    checker();
  }
  catch (const PDNSException& e) {
    cerr << "Had error: " << e.reason << endl;
    throw;
  }
}

BOOST_AUTO_TEST_CASE(test_RecursorAuthRecords)
{
  MemRecursorCache::resetStaticsForTests();
  MemRecursorCache MRC;

  const DNSName authZone(".");
  MemRecursorCache::AuthRecsVec authRecords;
  DNSRecord dr;
  dr.d_place = DNSResourceRecord::ANSWER;
  dr.d_name = DNSName("hi");
  dr.d_type = QType::AAAA;
  dr.d_ttl = 3600;
  dr.setContent(std::make_shared<ARecordContent>(ComboAddress("1::2:3:4")));
  authRecords.emplace_back(dr);

  std::vector<std::shared_ptr<const RRSIGRecordContent>> signatures;
  signatures.emplace_back(std::dynamic_pointer_cast<RRSIGRecordContent>(RRSIGRecordContent::make("DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xx ItRJUUim+SrJywAmLKe+48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44 usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcAplV9OYWhxi+CxmxZU5 8vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3 WMootO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6Ghkd SpLsRxArUhvoVgtnh0LkAV7TsajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGv LiGkIQ==")));

  time_t now = time(nullptr);
  time_t ttd = now + 30;

  DNSName power("powerdns.com.");
  DNSRecord dr0;
  ComboAddress dr0Content("192.0.2.40");
  dr0.d_name = power;
  dr0.d_type = QType::A;
  dr0.d_class = QClass::IN;
  dr0.setContent(std::make_shared<ARecordContent>(dr0Content));
  dr0.d_ttl = static_cast<uint32_t>(ttd);
  dr0.d_place = DNSResourceRecord::ANSWER;
  std::vector<DNSRecord> rset0;
  rset0.push_back(dr0);

  const ComboAddress nobody;
  const ComboAddress somebody("::1");
  const ComboAddress authAddress{"::2"};
  const time_t ttl_time = 90;

  DNSName aname = DNSName("hello ");
  MRC.replace(now, aname, QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, boost::none, vState::Insecure, authAddress, false, ttl_time);
  MRC.replace(now, aname, QType(QType::AAAA), rset0, signatures, authRecords, true, authZone, boost::none, boost::none, vState::Insecure, authAddress, false, ttl_time);

  std::vector<DNSRecord> retrieved;
  MemRecursorCache::AuthRecs authRecs;
  MemRecursorCache::SigRecs sigs;
  bool variable = false;
  vState state = vState::Indeterminate;
  bool wasAuth = false;
  DNSName fromZone;
  ComboAddress fromAuth;
  if (MRC.get(now, aname, QType(QType::ANY), MemRecursorCache::None, &retrieved, somebody, boost::none, &sigs, &authRecs, &variable, &state, &wasAuth, &fromZone, &fromAuth) > 0) {
    BOOST_CHECK_EQUAL(retrieved.size(), 2U);
  }
}

#if 0
volatile bool g_ret; // make sure the optimizer does not get too smart
uint64_t g_totalRuns;
volatile bool g_stop;

static void alarmHandler(int /* unused */)
{
  g_stop = true;
}

template <typename C>
void doRun(const C& cmd, int mseconds = 100)
{
  itimerval timer{};
  timer.it_value.tv_sec = mseconds / 1000;
  timer.it_value.tv_usec = 1000 * (mseconds % 1000);
  timer.it_interval.tv_sec = 0;
  timer.it_interval.tv_usec = 0;

  signal(SIGPROF, alarmHandler);
  setitimer(ITIMER_PROF, &timer, nullptr);

  unsigned int runs = 0;
  g_stop = false;
  CPUTime start{};
  start.start();
  while (runs++, !g_stop) {
    cmd();
  }
  double delta = static_cast<double>(start.ndiff()) / 1000000000.0;
  boost::format fmt("'%s' %.02f seconds: %.1f runs/s, %.02f us/run");

  cerr << (fmt % cmd.getName() % delta % (runs / delta) % (delta * 1000000.0 / runs)) << endl;
  g_totalRuns += runs;
}

struct NOPTest
{
  [[nodiscard]] static string getName()
  {
    return "null test";
  }

  void operator()() const
  {
  }
};

struct RecordsSpeedTest
{
  [[nodiscard]] static string getName()
  {
    return "RecordsSpeedTest";
  }

  void operator()() const
  {
    MemRecursorCache::resetStaticsForTests();
    MemRecursorCache MRC;

    const DNSName authZone(".");
    MemRecursorCache::AuthRecsVec authRecords;
    DNSRecord dr;
    dr.d_place = DNSResourceRecord::ANSWER;
    dr.d_name = DNSName("hi");
    dr.d_type = QType::AAAA;
    dr.d_ttl = 3600;
    dr.setContent(std::make_shared<ARecordContent>(ComboAddress("1::2:3:4")));
    authRecords.emplace_back(dr);
    time_t now = time(nullptr);
    time_t ttd = now + 30;

    MemRecursorCache::SigRecsVec signatures;
    signatures.emplace_back(std::dynamic_pointer_cast<RRSIGRecordContent>(RRSIGRecordContent::make("DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xx ItRJUUim+SrJywAmLKe+48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44 usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcAplV9OYWhxi+CxmxZU5 8vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3 WMootO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6Ghkd SpLsRxArUhvoVgtnh0LkAV7TsajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGv LiGkIQ==")));

    DNSName power("powerdns.com.");
    DNSRecord dr0;
    ComboAddress dr0Content("192.0.2.40");
    dr0.d_name = power;
    dr0.d_type = QType::A;
    dr0.d_class = QClass::IN;
    dr0.setContent(std::make_shared<ARecordContent>(dr0Content));
    dr0.d_ttl = static_cast<uint32_t>(ttd);
    dr0.d_place = DNSResourceRecord::ANSWER;
    std::vector<DNSRecord> rset0;
    rset0.push_back(dr0);

    const ComboAddress nobody;
    const ComboAddress somebody("::1");
    const time_t ttl_time = 90;
    const size_t expected = 100;

    for (size_t counter = 0; counter < expected; ++counter) {
      DNSName a = DNSName("hello ") + DNSName(std::to_string(counter));
      BOOST_CHECK_EQUAL(DNSName(a.toString()), a);

      MRC.replace(now, a, QType(QType::A), rset0, signatures, authRecords, true, authZone, boost::none, boost::none, vState::Insecure, somebody, false, ttl_time);
    }

    BOOST_CHECK_EQUAL(MRC.size(), expected);

    size_t matches = 0;

    const size_t runs = 1000;
    for (size_t run = 0; run < runs; run++) {
      for (size_t counter = 0; counter < expected; ++counter) {
        std::vector<DNSRecord> retrieved;
        MemRecursorCache::AuthRecs authRecs;
        MemRecursorCache::SigRecs sigs;
        bool variable = false;
        vState state = vState::Indeterminate;
        bool wasAuth = false;
        DNSName fromZone;
        ComboAddress from;
        if (MRC.get(now, DNSName("hello ") + DNSName(std::to_string(counter)), QType(QType::A), MemRecursorCache::None, &retrieved, somebody, boost::none, &sigs, &authRecs, &variable, &state, &wasAuth, &fromZone, &from) > 0) {
          matches++;
        }
      }
    }
    BOOST_CHECK_EQUAL(matches, runs * expected);
  }
};

BOOST_AUTO_TEST_CASE(test_speed)
{
  doRun(NOPTest());
  doRun(RecordsSpeedTest());
}
#endif

BOOST_AUTO_TEST_SUITE_END()