{
  lib,
  stdenv,
  fetchurl,
  pkg-config,
  systemd,
  boost,
  libsodium,
  libedit,
  re2,
  net-snmp,
  lua,
  protobuf,
  openssl,
  zlib,
  h2o,
  nghttp2,
  nixosTests,
}:

stdenv.mkDerivation rec {
  pname = "dnsdist";
  version = "1.9.10";

  src = fetchurl {
    url = "https://downloads.powerdns.com/releases/dnsdist-${version}.tar.bz2";
    hash = "sha256-An3b3uaVxaWXKAV7/EHFsaaR+hx6XokniwnzVTJfvtY=";
  };

  patches = [
    # Disable tests requiring networking:
    # "Error connecting to new server with address 192.0.2.1:53: connecting socket to 192.0.2.1:53: Network is unreachable"
    ./disable-network-tests.patch
  ];

  nativeBuildInputs = [
    pkg-config
    protobuf
  ];
  buildInputs = [
    systemd
    boost
    libsodium
    libedit
    re2
    net-snmp
    lua
    openssl
    zlib
    h2o
    nghttp2
  ];

  configureFlags = [
    "--with-libsodium"
    "--with-re2"
    "--enable-dnscrypt"
    "--enable-dns-over-tls"
    "--enable-dns-over-https"
    "--with-protobuf=yes"
    "--with-net-snmp"
    "--disable-dependency-tracking"
    "--enable-unit-tests"
    "--enable-systemd"
    "--with-boost=${boost.dev}"
  ];

  doCheck = true;

  enableParallelBuilding = true;

  passthru.tests = {
    inherit (nixosTests) dnsdist;
  };

  meta = with lib; {
    description = "DNS Loadbalancer";
    mainProgram = "dnsdist";
    homepage = "https://dnsdist.org";
    license = licenses.gpl2Only;
    maintainers = with maintainers; [ jojosch ];
  };
}
