{"id":36194,"date":"2019-10-31T22:10:13","date_gmt":"2019-10-31T19:10:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020\/"},"modified":"2019-10-31T22:10:13","modified_gmt":"2019-10-31T19:10:13","slug":"reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020","title":{"rendered":"Uvoln\u011bn\u00ed PowerDNS Recursor 4.2 a iniciativa DNS Flag Day 2020","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po roce a p\u016fl v\u00fdvoje <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.powerdns.com\/2019\/07\/15\/powerdns-recursor-4-2-0-released\/\">byl p\u0159edstaven<\/a><\/noindex> uvoln\u011bn\u00ed ke\u0161uj\u00edc\u00edho DNS serveru <noindex><a rel=\"nofollow\" href=\"https:\/\/www.powerdns.com\/recursor.html\">PowerDNS Recursor 4.2<\/a><\/noindex>, odpov\u00eddaj\u00edc\u00ed za rekurzivn\u00ed p\u0159etv\u00e1\u0159en\u00ed n\u00e1zv\u016f. PowerDNS Recursor je postaven na jedn\u00e9 k\u00f3dov\u00e9 z\u00e1kladn\u011b s PowerDNS Authoritative Server, ale rekurzivn\u00ed a autoritativn\u00ed DNS servery PowerDNS se vyv\u00edjej\u00ed v r\u00e1mci r\u016fzn\u00fdch v\u00fdvojov\u00fdch cykl\u016f a jsou vyd\u00e1v\u00e1ny jako samostatn\u00e9 produkty. K\u00f3d projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PowerDNS\/pdns\">distribuov\u00e1no<\/a><\/noindex> pod licenc\u00ed GPLv2. <\/p>\n<p>V nov\u00e9 verzi byly odstran\u011bny v\u0161echny pozn\u00e1mky t\u00fdkaj\u00edc\u00ed se zpracov\u00e1n\u00ed DNS paket\u016f s volbami EDNS. Ve star\u0161\u00edch verz\u00edch PowerDNS Recursor p\u0159ed rokem 2016 byla b\u011b\u017en\u00e1 praxe ignorovat pakety s nepodporovan\u00fdmi volbami EDNS, ani\u017e by se pos\u00edlala odpov\u011b\u010f ve star\u00e9m form\u00e1tu, zat\u00edmco byly vyhazov\u00e1ny EDNS volby, jak to vy\u017eaduje specifikace. D\u0159\u00edve toto nestandardn\u00ed chov\u00e1n\u00ed podporoval BIND jako obch\u00e1zen\u00ed, ale v r\u00e1mci <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49999\">prov\u00e1d\u011bn\u00e9<\/a><\/noindex> v \u00fanoru iniciativy <noindex><a rel=\"nofollow\" href=\"https:\/\/dnsflagday.net\/2020\/\">DNS flag day<\/a><\/noindex>, v\u00fdvoj\u00e1\u0159i DNS server\u016f se rozhodli vzd\u00e1t se tohoto hacku. <\/p>\n<p>V PowerDNS byly hlavn\u00ed probl\u00e9my p\u0159i zpracov\u00e1n\u00ed paket\u016f s EDNS odstran\u011bny ji\u017e v roce 2017 ve vyd\u00e1n\u00ed 4.1, zat\u00edmco v roce 2016 vydan\u00e1 v\u011btev 4.0 vykazovala ur\u010dit\u00e9 nekompatibility, kter\u00e9 vznikaly za ur\u010dit\u00fdch okolnost\u00ed a obvykle nebr\u00e1nily norm\u00e1ln\u00ed funkci. V PowerDNS Recursor 4.2, stejn\u011b jako v <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50372\">BIND 9.14<\/a><\/noindex>, byly odstran\u011bny obch\u00e1zen\u00ed podpory autoritativn\u00edch server\u016f, kter\u00e9 nespr\u00e1vn\u011b reagovaly na dotazy s volbami EDNS. Dosud, pokud po odesl\u00e1n\u00ed dotazu s volbami EDNS b\u011bhem ur\u010dit\u00e9 doby nedorazila odpov\u011b\u010f, DNS server pova\u017eoval, \u017ee roz\u0161\u00ed\u0159en\u00e9 volby nejsou podporov\u00e1ny, a odes\u00edlal opakovan\u00fd dotaz bez EDNS voleb. Toto chov\u00e1n\u00ed bylo nyn\u00ed deaktivov\u00e1no, proto\u017ee p\u0159\u00edtomnost takov\u00e9ho k\u00f3du vedla k prodlen\u00edm kv\u016fli opakovan\u00e9mu odes\u00edl\u00e1n\u00ed paket\u016f, zvy\u0161ov\u00e1n\u00ed z\u00e1t\u011b\u017ee na s\u00edti a nejednozna\u010dnosti v p\u0159\u00edpad\u011b nedostatku odpov\u011bdi kv\u016fli s\u00ed\u0165ov\u00fdm v\u00fdpadk\u016fm, a tak\u00e9 br\u00e1nilo zav\u00e1d\u011bn\u00ed EDNS funkc\u00ed, jako je pou\u017eit\u00ed DNS Cookies na ochranu proti DDoS \u00fatok\u016fm. <\/p>\n<p>V p\u0159\u00ed\u0161t\u00edm roce bylo rozhodnuto uskute\u010dnit akci <noindex><a rel=\"nofollow\" href=\"https:\/\/dnsflagday.net\/2020\/\">DNS flag day 2020<\/a><\/noindex>, jeho\u017e c\u00edlem je zam\u011b\u0159it pozornost na <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/draft-bonica-intarea-frag-fragile-03\">\u0159e\u0161en\u00ed<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.potaroo.net\/ispcol\/2017-08\/xtn-hdrs.html\">probl\u00e9mech<\/a><\/noindex> s IP fragmentac\u00ed p\u0159i zpracov\u00e1n\u00ed velk\u00fdch DNS zpr\u00e1v. V r\u00e1mci iniciativy <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.dns-oarc.net\/pipermail\/dns-operations\/2019-May\/018721.htm\">pl\u00e1nuje<\/a><\/noindex>  stanovit doporu\u010den\u00e9 velikosti buffer\u016f pro EDNS na \u00farove\u0148 1200 bajt\u016f, a tak\u00e9  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/dns-violations\/dnsflagday\/issues\/89\">p\u0159e\u0159adit<\/a><\/noindex> zpracov\u00e1n\u00ed dotaz\u016f p\u0159es TCP jako obligatorn\u011b podporovan\u00e9 na serverech. V sou\u010dasnosti je povinn\u00e1 podpora zpracov\u00e1n\u00ed dotaz\u016f p\u0159es UDP, a TCP je \u017e\u00e1douc\u00ed, ale nen\u00ed povinn\u00e9 pro fungov\u00e1n\u00ed (standard p\u0159edepsal mo\u017enost vypnout TCP). Navrhuje se odstranit z standardu mo\u017enost vypnut\u00ed TCP a standardizovat p\u0159echod od odes\u00edl\u00e1n\u00ed dotaz\u016f p\u0159es UDP k pou\u017eit\u00ed TCP v p\u0159\u00edpadech, kdy stanoven\u00e1 velikost bufferu EDNS nesta\u010d\u00ed.<\/p>\n<p>Navrhovan\u00e9 zm\u011bny v r\u00e1mci iniciativy odstran\u00ed zmatek p\u0159i v\u00fdb\u011bru velikosti buferu EDNS a vy\u0159e\u0161\u00ed probl\u00e9m s fragmentac\u00ed velk\u00fdch UDP zpr\u00e1v, jejich\u017e zpracov\u00e1n\u00ed \u010dasto vede ke ztr\u00e1t\u011b paket\u016f a \u010dasov\u00fdm prodlev\u00e1m na stran\u011b klienta. Na stran\u011b klienta bude velikost buferu EDNS konstantn\u00ed a velk\u00e9 odpov\u011bdi budou okam\u017eit\u011b zas\u00edl\u00e1ny klientovi p\u0159es TCP. Vylou\u010den\u00ed zas\u00edl\u00e1n\u00ed velk\u00fdch zpr\u00e1v p\u0159es UDP tak\u00e9 umo\u017en\u00ed blokovat <noindex><a rel=\"nofollow\" href=\"https:\/\/indico.dns-oarc.net\/event\/31\/contributions\/692\/attachments\/660\/1115\/fujiwara-5.pdf\">\u00fatok\u016fm<\/a><\/noindex> utoky na DNS cache, zalo\u017een\u00e9 na manipulaci s fragmentovan\u00fdmi UDP pakety (p\u0159i fragmentaci druh\u00fd fragment neobsahuje hlavi\u010dku s identifik\u00e1torem, a proto m\u016f\u017ee b\u00fdt fal\u0161ov\u00e1n tak, aby byla zn\u00e1ma pouze kontroln\u00ed suma).<\/p>\n<p>Ve verzi PowerDNS Recursor 4.2 byly zohledn\u011bny probl\u00e9my s velk\u00fdmi UDP pakety a do\u0161lo k p\u0159echodu na pou\u017e\u00edv\u00e1n\u00ed velikosti buferu EDNS (edns-outgoing-bufsize) o velikosti 1232 bajt\u016f, m\u00edsto d\u0159\u00edve pou\u017e\u00edvan\u00e9ho limitu 1680 bajt\u016f, co\u017e by m\u011blo v\u00fdznamn\u011b sn\u00ed\u017eit pravd\u011bpodobnost ztr\u00e1ty UDP paket\u016f. Hodnota 1232 byla zvolena, proto\u017ee je maximem, p\u0159i kter\u00e9m velikost DNS odpov\u011bdi v\u010detn\u011b IPv6 odpov\u00edd\u00e1 minim\u00e1ln\u00ed hodnot\u011b MTU (1280). Tak\u00e9 byla sn\u00ed\u017eena hodnota parametru truncation-threshold, kter\u00fd odpov\u00edd\u00e1 za zkracov\u00e1n\u00ed odpov\u011bd\u00ed klientovi.<\/p>\n<p>Dal\u0161\u00ed zm\u011bny ve verzi PowerDNS Recursor 4.2:<\/p>\n<ul>\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora mechanismu <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/draft-bellis-dnsop-xpf-04\">XPF<\/a><\/noindex> (X-Proxied-For), co\u017e je ekvivalent HTTP hlavi\u010dky X-Forwarded-For pro DNS, kter\u00fd umo\u017e\u0148uje p\u0159en\u00e1\u0161et informace o IP adrese a portu p\u016fvodn\u00edho inici\u00e1tora po\u017eadavku, p\u0159esm\u011brovan\u00e9ho p\u0159es mezilehl\u00e9 proxy a vyva\u017eova\u010de z\u00e1t\u011b\u017ee (nap\u0159\u00edklad dnsdist). Pro aktivaci XPF jsou k dispozici mo\u017enosti &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#xpf-allow-from\">xpf-allow-from<\/a><\/noindex>\u201e a \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#xpf-rr-code\">xpf-rr-code<\/a><\/noindex>&#171;;\n<li class=\"l\"> Byla vylep\u0161ena podpora roz\u0161\u00ed\u0159en\u00ed EDNS <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc7871.html\">Client Subnet<\/a><\/noindex> (ECS), kter\u00e1 umo\u017e\u0148uje p\u0159ed\u00e1vat v DNS dotazech autoritativn\u00edmu DNS serveru informace o pods\u00edti, ze kter\u00e9 byl odesl\u00e1n p\u016fvodn\u00ed po\u017eadavek (data o p\u016fvodn\u00ed pods\u00edti klienta jsou nezbytn\u00e1 pro efektivn\u00ed fungov\u00e1n\u00ed s\u00edt\u00ed poskytov\u00e1n\u00ed obsahu). V nov\u00e9 verzi byly p\u0159id\u00e1ny nastaven\u00ed pro selektivn\u00ed kontrolu vyu\u017eit\u00ed EDNS Client Subnet: &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#ecs-add-for\">ecs-add-for<\/a><\/noindex>&#187; se seznamem s\u00ed\u0165ov\u00fdch masek, pro kter\u00e9 bude IP pou\u017eita v ECS v odchoz\u00edch po\u017eadavc\u00edch. Pro adresy, kter\u00e9 nespadnou do uveden\u00fdch masek, bude pou\u017eit obecn\u00fd adres, uveden\u00fd v direktiv\u011b &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#ecs-scope-zero-address\">ecs-scope-zero-address<\/a><\/noindex>&#171;. Prost\u0159ednictv\u00edm direktivy &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#use-incoming-edns-subnet\">use-incoming-edns-subnet<\/a><\/noindex>&#187; lze definovat pods\u00edt\u011b, z kter\u00fdch nebudou nahrazov\u00e1ny zapln\u011bn\u00e9 hodnoty ECS ve vstupn\u00edch po\u017eadavc\u00edch;\n<li class=\"l\"> Pro servery zpracov\u00e1vaj\u00edc\u00ed velk\u00e9 mno\u017estv\u00ed po\u017eadavk\u016f za sekundu (v\u00edce ne\u017e 100 tis\u00edc) byla navr\u017eena direktiva &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#distributor-threads\">distributor-threads<\/a><\/noindex>&#171;, kter\u00e1 ur\u010duje po\u010det vl\u00e1ken pro p\u0159\u00edjem vstupn\u00edch po\u017eadavk\u016f a jejich rozd\u011blen\u00ed mezi pracovn\u00ed vl\u00e1kna (m\u00e1 smysl pouze p\u0159i pou\u017eit\u00ed re\u017eimu &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#pdns-distributes-queries\">pdns-distributes-queries=yes<\/a><\/noindex>\u201e).\n<li class=\"l\"> P\u0159id\u00e1no nastaven\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/settings.html#public-suffix-list-file\">public-suffix-list-file<\/a><\/noindex> pro ur\u010den\u00ed vlastn\u00edho souboru s <noindex><a rel=\"nofollow\" href=\"https:\/\/publicsuffix.org\/\">seznamem ve\u0159ejn\u00fdch sufix\u016f<\/a><\/noindex> dom\u00e9n, ve kter\u00fdch mohou u\u017eivatel\u00e9 registrovat sv\u00e9 subdom\u00e9ny, m\u00edsto integrovan\u00e9ho seznamu v PowerDNS Recursor.\n<\/ul>\n<p>Projekt PowerDNS tak\u00e9 ozn\u00e1mil p\u0159echod na \u0161estim\u011bs\u00ed\u010dn\u00ed v\u00fdvojov\u00fd cyklus, podle kter\u00e9ho se o\u010dek\u00e1v\u00e1 dal\u0161\u00ed v\u00fdznamn\u00e9 vyd\u00e1n\u00ed PowerDNS Recursor 4.3 v lednu 2020. Aktualizace pro v\u00fdznamn\u00e1 vyd\u00e1n\u00ed budou vyv\u00edjena po cel\u00fd rok, po kter\u00e9m budou dal\u0161\u00edch \u0161est m\u011bs\u00edc\u016f vyd\u00e1v\u00e1na opravy zranitelnost\u00ed. T\u00edm p\u00e1dem podpora v\u011btve PowerDNS Recursor 4.2 potrv\u00e1 do ledna 2021. Podobn\u00e9 zm\u011bny ve v\u00fdvojov\u00e9m cyklu byly p\u0159ijaty pro produkt PowerDNS Authoritative Server, vyd\u00e1n\u00ed 4.2, kter\u00e9 se o\u010dek\u00e1v\u00e1 v bl\u00edzk\u00e9 dob\u011b.<\/p>\n<p>Hlavn\u00ed vlastnosti PowerDNS Recursor:<\/p>\n<ul>\n<li class=\"l\"> N\u00e1stroje pro vzd\u00e1len\u00fd sb\u011br statistik;\n<li class=\"l\"> Okam\u017eit\u00e9 restartov\u00e1n\u00ed;\n<li class=\"l\"> Vestav\u011bn\u00fd engine pro p\u0159ipojen\u00ed zpracovatel\u016f v jazyce Lua;\n<li class=\"l\"> \u00dapln\u00e1 podpora DNSSEC a <noindex><a rel=\"nofollow\" href=\"https:\/\/doc.powerdns.com\/recursor\/dns64.html\">DNS64<\/a><\/noindex>;\n<li class=\"l\"> Podpora RPZ (Response Policy Zones) a mo\u017enost definice \u010dern\u00fdch seznam\u016f;\n<li class=\"l\"> Mechanizmy boje proti spoofingu;\n<li class=\"l\"> Mo\u017enost zaznamen\u00e1vat v\u00fdsledky resolvov\u00e1n\u00ed ve form\u011b z\u00f3nov\u00fdch soubor\u016f BIND.\n<li class=\"l\"> Pro zaji\u0161t\u011bn\u00ed vysok\u00e9ho v\u00fdkonu se pou\u017e\u00edvaj\u00ed modern\u00ed mechanismy multiplexerov\u00e1n\u00ed p\u0159ipojen\u00ed ve FreeBSD, Linuxu a Solaris (kqueue, epoll, \/dev\/poll), a tak\u00e9 vysoce v\u00fdkonn\u00fd parser DNS paket\u016f, schopn\u00fd zpracov\u00e1vat des\u00edtky tis\u00edc paraleln\u00edch po\u017eadavk\u016f.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51102\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 PowerDNS Recursor 4.2, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043c\u0451\u043d. PowerDNS Recursor \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 \u0441 PowerDNS Authoritative Server, \u043d\u043e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b PowerDNS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36194","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.2 \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 DNS flag day 2020 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:10:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed PowerDNS Recursor 4.2 a iniciativa DNS flag day 2020 | ProHoster","description":"Po roce a p\u016fl v\u00fdvoje byla p\u0159edstavena verze cacheovac\u00edho DNS serveru","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.2 \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 DNS flag day 2020 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-powerdns-recursor-4-2-i-initsiativa-dns-flag-day-2020","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:13+00:00","article:modified_time":"2019-10-31T19:10:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36194","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:23:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:49:42","updated":"2026-01-22 02:23:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36194"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36194\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}