{"id":103112,"date":"2022-01-27T15:37:02","date_gmt":"2022-01-27T13:37:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https"},"modified":"2022-01-27T15:37:02","modified_gmt":"2022-01-27T13:37:02","slug":"vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https","title":{"rendered":"Vyd\u00e1n\u00ed DNS serveru BIND 9.18.0 s podporou DNS-over-TLS a DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou letech v\u00fdvoje p\u0159edstavil konsorcium ISC prvn\u00ed stabiln\u00ed verzi nov\u00e9 v\u00fdznamn\u00e9 v\u011btve DNS serveru BIND 9.18. Podpora t\u00e9to v\u011btve 9.18 bude zaji\u0161\u0165ov\u00e1na po dobu t\u0159\u00ed let a\u017e do druh\u00e9ho \u010dtvrtlet\u00ed 2025 v r\u00e1mci roz\u0161\u00ed\u0159en\u00e9ho cyklu \u00fadr\u017eby. Podpora v\u011btve 9.11 skon\u010d\u00ed v b\u0159eznu a v\u011btve 9.16 v polovin\u011b roku 2023. Pro v\u00fdvoj funkcionality dal\u0161\u00ed stabiln\u00ed verze BIND byla vytvo\u0159ena experiment\u00e1ln\u00ed v\u011btev BIND 9.19.0.    <\/p>\n<p>Verze BIND 9.18.0 se vyzna\u010duje implementac\u00ed podpory technologi\u00ed \u201eDNS p\u0159es HTTPS\u201c (DoH, DNS over HTTPS) a DNS p\u0159es TLS (DoT, DNS over TLS), stejn\u011b jako mechanismem XoT (XFR-over-TLS) pro bezpe\u010dn\u00fd p\u0159enos obsahu DNS z\u00f3n mezi servery (podporuje se jak odes\u00edl\u00e1n\u00ed, tak p\u0159\u00edjem z\u00f3n pomoc\u00ed XoT). P\u0159i spr\u00e1vn\u00e9m nastaven\u00ed nyn\u00ed m\u016f\u017ee jeden proces named obsluhovat nejen tradi\u010dn\u00ed DNS dotazy, ale tak\u00e9 dotazy zaslan\u00e9 pomoc\u00ed DNS-over-HTTPS a DNS-over-TLS. Klientsk\u00e1 podpora DNS-over-TLS je integrov\u00e1na do utilitky dig, kter\u00e1 m\u016f\u017ee b\u00fdt pou\u017eita k odesl\u00e1n\u00ed dotaz\u016f p\u0159es TLS p\u0159i pou\u017eit\u00ed p\u0159\u00edznaku \u201e+tls\u201c.     <\/p>\n<p>Implementace protokolu HTTP\/2, kter\u00fd se pou\u017e\u00edv\u00e1 v DoH, je zalo\u017eena na vyu\u017eit\u00ed knihovny nghttp2, kter\u00e1 je zahrnuta mezi voliteln\u00e9 z\u00e1vislosti p\u0159i sestavov\u00e1n\u00ed. Certifik\u00e1ty pro DoH a DoT mohou b\u00fdt poskytov\u00e1ny u\u017eivatelem nebo generov\u00e1ny automaticky p\u0159i spu\u0161t\u011bn\u00ed.         <\/p>\n<p>Zpracov\u00e1n\u00ed dotaz\u016f pomoc\u00ed DoH a DoT se aktivuje p\u0159id\u00e1n\u00edm voleb \u201ehttp\u201c a \u201etls\u201c do direktivy listen-on. Pro podporu neza\u0161ifrovan\u00e9ho DNS-over-HTTP je t\u0159eba v nastaven\u00edch uv\u00e9st \u201etls none\u201c. Kl\u00ed\u010de se definuj\u00ed v sekci \u201etls\u201c. Standardn\u00ed s\u00ed\u0165ov\u00e9 porty 853 pro DoT, 443 pro DoH a 80 pro DNS-over-HTTP mohou b\u00fdt p\u0159eps\u00e1ny pomoc\u00ed parametr\u016f tls-port, https-port a http-port. Nap\u0159\u00edklad:  <\/p>\n<p>     tls local-tls {         key-file \u201e\/path\/to\/priv_key.pem\u201c;         cert-file \u201e\/path\/to\/cert_chain.pem\u201c;     };     http local-http-server {        endpoints { \u201e\/dns-query\u201c;  };     };     options {        https-port 443;        listen-on port 443 tls local-tls http myserver {any;};     }        <\/p>\n<p>Mezi vlastnostmi implementace DoH v BIND se vyzna\u010duje mo\u017enost p\u0159esunut\u00ed \u0161ifrovac\u00edch operac\u00ed pro TLS na jin\u00fd server, co\u017e m\u016f\u017ee b\u00fdt nezbytn\u00e9 v situac\u00edch, kdy jsou TLS certifik\u00e1ty ulo\u017eeny na jin\u00e9m syst\u00e9mu (nap\u0159\u00edklad v infrastruktu\u0159e s webov\u00fdmi servery) a spravov\u00e1ny jin\u00fdm person\u00e1lem. Podpora ne\u0161ifrovan\u00e9ho DNS-over-HTTP byla implementov\u00e1na pro usnadn\u011bn\u00ed debuggingu a jako \u00farove\u0148 pro p\u0159ed\u00e1n\u00ed na jin\u00fd server v intern\u00ed s\u00edti (pro p\u0159esun \u0161ifrov\u00e1n\u00ed na samostatn\u00fd server). Na extern\u00edm serveru pro generov\u00e1n\u00ed TLS provozu m\u016f\u017ee b\u00fdt pou\u017eit nginx, podobn\u011b jako je organizov\u00e1no obalov\u00e1n\u00ed HTTPS pro webov\u00e9 str\u00e1nky.    <\/p>\n<p>Dal\u0161\u00ed vlastnost\u00ed je integrace DoH jako obecn\u00e9ho transportu, kter\u00fd m\u016f\u017ee b\u00fdt pou\u017eit nejen pro zpracov\u00e1n\u00ed po\u017eadavk\u016f klient\u016f na resolver, ale tak\u00e9 p\u0159i v\u00fdm\u011bn\u011b dat mezi servery, p\u0159i p\u0159ed\u00e1v\u00e1n\u00ed z\u00f3n autoritativn\u00edm DNS serverem a p\u0159i zpracov\u00e1n\u00ed jak\u00fdchkoliv po\u017eadavk\u016f podporovan\u00fdch jin\u00fdmi DNS transporty.      <\/p>\n<p>Mezi nev\u00fdhody, kter\u00e9 lze kompenzovat vypnut\u00edm sestaven\u00ed s DoH\/DoT nebo p\u0159esunut\u00edm \u0161ifrov\u00e1n\u00ed na jin\u00fd server, pat\u0159\u00ed celkov\u00e9 slo\u017eitosti k\u00f3du \u2014 do sestavy se p\u0159id\u00e1v\u00e1 zabudovan\u00fd HTTP server a TLS knihovna, kter\u00e9 potenci\u00e1ln\u011b mohou obsahovat zranitelnosti a slou\u017eit jako dal\u0161\u00ed vektory pro \u00fatoky. Tak\u00e9 p\u0159i pou\u017eit\u00ed DoH se zvy\u0161uje objem provozu.    <\/p>\n<p>P\u0159ipom\u00edn\u00e1me, \u017ee DNS-over-HTTPS m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 pro vylou\u010den\u00ed \u00fanik\u016f informac\u00ed o dotazovan\u00fdch n\u00e1zvech hostitel\u016f p\u0159es DNS servery poskytovatel\u016f, pro boj s MITM \u00fatoky a podvodem DNS provozu (nap\u0159\u00edklad p\u0159i p\u0159ipojen\u00ed k ve\u0159ejn\u00fdm Wi-Fi), pro odol\u00e1v\u00e1n\u00ed blokac\u00edm na \u00farovni DNS (DNS-over-HTTPS nem\u016f\u017ee nahradit <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"199\">VPN<\/a> v oblasti obch\u00e1zen\u00ed blokac\u00ed, realizovan\u00fdch na \u00farovni DPI) nebo pro organizaci pr\u00e1ce v p\u0159\u00edpad\u011b nemo\u017enosti p\u0159\u00edm\u00e9ho p\u0159\u00edstupu k DNS server\u016fm (nap\u0159\u00edklad p\u0159i pr\u00e1ci p\u0159es proxy). Pokud jsou v b\u011b\u017en\u00e9 situaci DNS dotazy p\u0159\u00edmo odes\u00edl\u00e1ny na ur\u010dit\u00e9 v konfiguraci syst\u00e9mu DNS servery, pak v p\u0159\u00edpad\u011b DNS-over-HTTPS je po\u017eadavek na ur\u010den\u00ed <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/lir\/ipv4\/\"   title=\"IP adres\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"697\">IP adres<\/a> hostitele enkapsulov\u00e1n v HTTPS provozu a odesl\u00e1n na HTTP server, na n\u011bm\u017e resolver zpracov\u00e1v\u00e1 po\u017eadavky prost\u0159ednictv\u00edm Web API.     <\/p>\n<p>\u201eDNS over TLS\u201c se li\u0161\u00ed od \u201eDNS over HTTPS\u201c pou\u017eit\u00edm standardn\u00edho protokolu DNS (obvykle pou\u017e\u00edv\u00e1 s\u00ed\u0165ov\u00fd port 853), zabalen\u00e9ho do \u0161ifrovan\u00e9ho komunika\u010dn\u00edho kan\u00e1lu, kter\u00fd je vytvo\u0159en pomoc\u00ed protokolu TLS s ov\u011b\u0159en\u00edm hostitele prost\u0159ednictv\u00edm TLS\/SSL certifik\u00e1t\u016f, vydan\u00fdch certifika\u010dn\u00ed autoritou. Existuj\u00edc\u00ed standard DNSSEC pou\u017e\u00edv\u00e1 \u0161ifrov\u00e1n\u00ed pouze pro autentizaci klienta a serveru, ale nechr\u00e1n\u00ed provoz p\u0159ed odposlouch\u00e1v\u00e1n\u00edm a nezaru\u010duje d\u016fv\u011brnost dotaz\u016f.         <\/p>\n<p>N\u011bkter\u00e9 dal\u0161\u00ed novinky:  <\/p>\n<ul>\n<li class=\"l\"> Byly p\u0159id\u00e1ny nastaven\u00ed tcp-receive-buffer, tcp-send-buffer, udp-receive-buffer a udp-send-buffer pro ur\u010den\u00ed velikosti buffer\u016f pou\u017e\u00edvan\u00fdch p\u0159i odes\u00edl\u00e1n\u00ed a p\u0159ij\u00edm\u00e1n\u00ed po\u017eadavk\u016f p\u0159es TCP a UDP. Na p\u0159epln\u011bn\u00fdch serverech zv\u00fd\u0161en\u00ed vstupn\u00edch buffer\u016f pom\u016f\u017ee vyhnout se ztr\u00e1t\u011b paket\u016f v okam\u017eiku \u0161pi\u010dkov\u00e9ho provozu, zat\u00edmco sn\u00ed\u017een\u00ed pom\u016f\u017ee zbavit se ucp\u00e1n\u00ed pam\u011bti star\u00fdmi po\u017eadavky.\n<li class=\"l\"> Byla p\u0159id\u00e1na nov\u00e1 kategorie log\u016f \u00bbrpz-passthru\u00ab, kter\u00e1 umo\u017e\u0148uje samostatn\u011b zaznamen\u00e1vat \u010dinnosti proch\u00e1zen\u00ed RPZ (Response Policy Zones).\n<li class=\"l\"> Do sekce response-policy byla p\u0159id\u00e1na mo\u017enost \u00bbnsdname-wait-recurse\u00ab, kdy p\u0159i nastaven\u00ed na hodnotu \u00bbno\u00ab se pravidla RPZ NSDNAME aplikuj\u00ed pouze tehdy, jsou-li pro po\u017eadavek nalezeny autoritativn\u00ed servery jmen v cache, jinak se pravidlo RPZ NSDNAME ignoruje, ale informace se z\u00edsk\u00e1vaj\u00ed na pozad\u00ed a pou\u017e\u00edvaj\u00ed se pro n\u00e1sleduj\u00edc\u00ed po\u017eadavky.\n<li class=\"l\"> Pro z\u00e1znamy s typy HTTPS a SVCB byla implementov\u00e1na zpracov\u00e1n\u00ed sekce \u00bbADDITIONAL\u00ab.\n<li class=\"l\"> Byly p\u0159id\u00e1ny konfigurovateln\u00e9 typy pravidel update-policy \u2014 krb5-subdomain-self-rhs a ms-subdomain-self-rhs, kter\u00e9 umo\u017e\u0148uj\u00ed omezit aktualizaci z\u00e1znam\u016f SRV a PTR. V bloc\u00edch update-policy byla tak\u00e9 p\u0159id\u00e1na mo\u017enost nastaven\u00ed omezen\u00ed po\u010dtu z\u00e1znam\u016f, kter\u00e9 jsou specifick\u00e9 pro ka\u017ed\u00fd typ.\n<li class=\"l\"> Do v\u00fdstupu n\u00e1stroje dig byly p\u0159id\u00e1ny informace o p\u0159enosov\u00e9m protokolu (UDP, TCP, TLS, HTTPS) a p\u0159edpon\u00e1ch DNS64. Pro \u00fa\u010dely lad\u011bn\u00ed byla do dig p\u0159id\u00e1na mo\u017enost ur\u010den\u00ed konkr\u00e9tn\u00edho identifik\u00e1toru dotazu (dig +qid=).\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora pro knihovnu OpenSSL 3.0.\n<li class=\"l\"> Aby se vy\u0159e\u0161ily probl\u00e9my s IP fragmentac\u00ed p\u0159i zpracov\u00e1n\u00ed velk\u00fdch DNS zpr\u00e1v, kter\u00e9 byly ozna\u010deny iniciativou DNS Flag Day 2020, byl z resolveru odstran\u011bn k\u00f3d, kter\u00fd upravoval velikost bufferu EDNS v p\u0159\u00edpad\u011b absence odpov\u011bdi na dotaz. Velikost bufferu EDNS je nyn\u00ed nastavena na konstantn\u00ed (edns-udp-size) pro v\u0161echny odchoz\u00ed dotazy.\n<li class=\"l\"> Syst\u00e9m sestaven\u00ed byl p\u0159eveden na pou\u017eit\u00ed sady autoconf, automake a libtool.\n<li class=\"l\"> Podpora soubor\u016f z\u00f3n ve form\u00e1tu \u00bbmap\u00ab (masterfile-format map) byla ukon\u010dena. U\u017eivatel\u016fm tohoto form\u00e1tu se doporu\u010duje p\u0159ev\u00e9st z\u00f3ny na form\u00e1t raw pomoc\u00ed n\u00e1stroje named-compilezone.\n<li class=\"l\"> Podpora star\u00fdch ovlada\u010d\u016f DLZ (Dynamically Loadable Zones) byla ukon\u010dena a na jejich m\u00edsto p\u0159i\u0161ly moduly DLZ.\n<li class=\"l\"> Podpora sestaven\u00ed a spu\u0161t\u011bn\u00ed pro platformu Windows byla ukon\u010dena. Posledn\u00ed v\u011btv\u00ed, kterou lze nainstalovat na Windows, z\u016fst\u00e1v\u00e1 BIND 9.16.                   <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56589\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043d\u0441\u043e\u0440\u0446\u0438\u0443\u043c ISC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.18. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u0435\u0442\u043a\u0438 9.18 \u0431\u0443\u0434\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0434\u043e 2 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u0435\u0442\u043a\u0438 9.11 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u0441\u044f \u0432 \u043c\u0430\u0440\u0442\u0435, \u0430 \u0432\u0435\u0442\u043a\u0438 9.16 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 2023 \u0433\u043e\u0434\u0430. \u0414\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 BIND [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103112","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043d\u0441\u043e\u0440\u0446\u0438\u0443\u043c ISC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.18.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.18.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DNS-over-TLS \u0438 DNS-over-HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043d\u0441\u043e\u0440\u0446\u0438\u0443\u043c ISC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.18.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-27T13:37:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-01-27T13:37:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed DNS serveru BIND 9.18.0 s podporou DNS-over-TLS a DNS-over-HTTPS | ProHoster","description":"Po dvou letech v\u00fdvoje konsorcium ISC p\u0159edstavilo prvn\u00ed stabiln\u00ed verzi nov\u00e9 v\u00fdznamn\u00e9 v\u011btve DNS serveru BIND 9.18.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.18.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DNS-over-TLS \u0438 DNS-over-HTTPS | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043d\u0441\u043e\u0440\u0446\u0438\u0443\u043c ISC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.18.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dns-servera-bind-9-18-0-s-podderzhkoj-dns-over-tls-i-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-27T13:37:02+00:00","article:modified_time":"2022-01-27T13:37:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103112","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-27 13:38:09","updated":"2026-02-08 20:24:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=103112"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103112\/revisions"}],"predecessor-version":[{"id":157888,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103112\/revisions\/157888"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=103112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=103112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=103112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}