{"id":72951,"date":"2020-03-06T02:42:09","date_gmt":"2020-03-05T23:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3"},"modified":"2020-03-06T02:42:09","modified_gmt":"2020-03-05T23:42:09","slug":"reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","title":{"rendered":"Udgivelse af PowerDNS Recursor 4.3 og KnotDNS 2.9.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.powerdns.com\/2020\/03\/03\/powerdns-recursor-4-3-0-released\/\">Har fundet sted<\/a><\/noindex> udgivelsen af den cachede DNS-server <noindex><a rel=\"nofollow\" href=\"https:\/\/www.powerdns.com\/recursor.html\">PowerDNS Recursor 4.3<\/a><\/noindex>, som er ansvarlig for rekursiv navneomdannelse. PowerDNS Recursor er bygget p\u00e5 et f\u00e6lles kodegrundlag med PowerDNS Authoritative Server, men de rekursive og autoritative DNS-servere fra PowerDNS udvikles under forskellige udviklingscyklusser og frigives som separate produkter. Koden for projektet <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PowerDNS\/pdns\">distribueres<\/a><\/noindex> er under GPLv2-licensen. <\/p>\n<p>Serveren leverer v\u00e6rkt\u00f8jer til fjernindsamling af statistik, underst\u00f8tter \u00f8jeblikkelig genstart, har en indbygget motor til tilslutning af h\u00e5ndterere p\u00e5 Lua, underst\u00f8tter fuldt ud DNSSEC, DNS64, RPZ (Response Policy Zones) og giver mulighed for tilslutning af sortlister. Der er mulighed for at gemme resultaterne af opl\u00f8sning som BIND-zonerfiler. For at sikre h\u00f8j ydeevne anvendes moderne mekanismer til forbindelsesmultiplexing i FreeBSD, Linux og Solaris (kqueue, epoll, \/dev\/poll), samt en h\u00f8jtydende parser til DNS-pakker, der kan h\u00e5ndtere titusinder af parallelle foresp\u00f8rgsler. <\/p>\n<p>I den nye version:<\/p>\n<ul>\n<li class=\"l\"> For at forhindre l\u00e6kager af oplysninger om det forespurgte dom\u00e6ne og forbedre privatlivets fred, er mekanismen <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#qname-minimization\">QNAME Minimization<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc7816\/\">RFC-7816<\/a><\/noindex>), der fungerer i \"relaxed\" tilstand. Mekanismen er, at resolveren ikke n\u00e6vner det fulde navn p\u00e5 den \u00f8nskede v\u00e6rt i sine foresp\u00f8rgsler til den overordnede navneserver. For eksempel, n\u00e5r adressen for v\u00e6rten foo.bar.baz.com bestemmes, sender resolveren en foresp\u00f8rgsel til den autoritative server for zonen \".com\" med \"QTYPE=NS,QNAME=baz.com\", uden at n\u00e6vne \"foo.bar\". Den nuv\u00e6rende implementering fungerer i \"relaxed\" tilstand.\n<li class=\"l\"> Muligheden for at registrere udg\u00e5ende foresp\u00f8rgsler til den autoritative server og svarene p\u00e5 disse i dnstap-format er implementeret (for brug kr\u00e6ves en bygning med indstillingen \"--enable-dnstap\").\n<li class=\"l\"> Samtidig behandling af flere indg\u00e5ende foresp\u00f8rgsler, der sendes via TCP-forbindelse, er sikret, med returnering af resultater, s\u00e5 snart de er klar, i stedet for i r\u00e6kkef\u00f8lge af foresp\u00f8rgslerne i k\u00f8en. Gr\u00e6nsen for samtidige foresp\u00f8rgsler bestemmes af indstillingen \"<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#max-concurrent-requests-per-tcp-connection\">max-concurrent-requests-per-tcp-connection<\/a><\/noindex>&#171;.\n<li class=\"l\"> Der er implementeret en teknik til sporing af nye dom\u00e6ner <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/nod_udr.html\">NOD<\/a><\/noindex> (Newly Observed Domain), som kan bruges til at identificere mist\u00e6nkelige dom\u00e6ner eller dom\u00e6ner relateret til ondsindet aktivitet, s\u00e5som spredning af malware, deltagelse i phishing og brug til botnetstyring. Metoden er baseret p\u00e5 at identificere dom\u00e6ner, som tidligere ikke er blevet tilg\u00e5et, og analysere disse nye dom\u00e6ner. I stedet for at spore nye dom\u00e6ner ved at have en fuld database af alle tidligere bes\u00f8gte dom\u00e6ner, hvilket kr\u00e6ver betydelige ressourcer, anvender NOD en sandsynlighedsstruktur <noindex><a rel=\"nofollow\" href=\"http:\/\/webdocs.cs.ualberta.ca\/~drafiei\/papers\/DupDet06Sigmod.pdf\">SBF<\/a><\/noindex> (Stable Bloom Filter), der hj\u00e6lper med at minimere forbruget af hukommelse og CPU. For at aktivere dette skal indstillingen \"new-domain-tracking=yes\" angives.\n<li class=\"l\"> N\u00e5r det k\u00f8res med systemd, k\u00f8rer PowerDNS Recursor nu som en ikke-privilegeret bruger pdns-recursor i stedet for root. For systemer uden systemd og uden chroot bruges som standard mappen \/var\/run\/pdns-recursor til at gemme kontrolsocket og pid-fil.\n<\/ul>\n<p>Derudover, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/2020-03-03-version-293.html\">udgivet<\/a><\/noindex> udgivelse <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/\">KnotDNS 2.9.3<\/a><\/noindex>, en h\u00f8jtydende autoritativ DNS-server (recursoren er implementeret som et separat program), der underst\u00f8tter alle moderne DNS-funktioner. Projektet udvikles af den tjekkiske dom\u00e6nregistrator CZ.NIC, er skrevet i C og <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/CZ-NIC\/knot\">distribueres<\/a><\/noindex> under GPLv3 licens. <\/p>\n<p>KnotDNS adskiller sig ved sin fokus p\u00e5 h\u00f8j ydeevne ved behandlingen af foresp\u00f8rgsler, til hvilket form\u00e5l der benyttes en flertr\u00e5det, og for det meste ikke-blokerende implementering, der er godt skalerbar p\u00e5 SMP-systemer. Der tilbydes funktioner som tilf\u00f8jelse og sletning af zoner on-the-fly, overf\u00f8rsel af zoner mellem servere, DDNS (dynamisk opdatering), NSID (RFC 5001), EDNS0-udvidelser og DNSSEC (inklusiv NSEC3), samt begr\u00e6nsning af svarintensitet (RRL). <\/p>\n<p>I den nye version:<\/p>\n<ul>\n<li class=\"l\"> Indstillingen 'remote.block-notify-after-transfer' er blevet tilf\u00f8jet for at deaktivere sendelse af NOTIFY-beskeder;\n<li class=\"l\"> Implementeret eksperimentel support for Ed448 algoritmen i DNSSE (kr\u00e6ver GnuTLS 3.6.12+ og en endnu ikke frigivet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lysator.liu.se\/~nisse\/nettle\/\">Nettle 3.6+<\/a><\/noindex>);\n<li class=\"l\"> I keymgr er parameteren 'local-serial' blevet tilf\u00f8jet for at hente eller indstille det seriens SOA-nummer for den signerede zone i KASP-databasen;\n<li class=\"l\"> I keymgr er der tilf\u00f8jet support til import af Ed25519- og Ed448-n\u00f8gler i BIND DNS-serverformat;\n<li class=\"l\"> Standardv\u00e6rdien for indstillingen 'server.tcp-io-timeout' er blevet \u00f8get til 500 ms, mens 'database.journal-db-max-size' er blevet reduceret til 512 MiB p\u00e5 32-bit systemer.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Kilde: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52488\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 PowerDNS Recursor 4.3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043c\u0451\u043d. PowerDNS Recursor \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 \u0441 PowerDNS Authoritative Server, \u043d\u043e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b PowerDNS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72951","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af PowerDNS Recursor 4.3 og KnotDNS 2.9.3 | ProHoster","description":"Udgivet en cache DNS-server","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-05T23:42:09+00:00","article:modified_time":"2020-03-05T23:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72951","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:42:53","updated":"2022-10-04 21:14:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/72951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=72951"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/72951\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=72951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=72951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=72951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}