release , a high-performance authoritative DNS server (the resolver is implemented as a separate application), supporting all modern DNS features. The project is developed by the Czech domain registry CZ.NIC, written in C and under the GPLv3 license.
KnotDNS is designed for high performance in query processing, employing a multi-threaded, and largely non-blocking implementation, well-scalable on SMP systems. Features include on-the-fly zone addition and removal, zone transfer between servers, DDNS (dynamic updates), NSID (RFC 5001), EDNS0 extensions, and DNSSEC (including NSEC3), along with response rate limiting (RRL).
In the new release:
- A high-performance networking mode has been implemented using the eXpress Data Path subsystem, which provides means for packet processing at the network driver level before being handled by the Linux kernel network stack. This mode requires Linux kernel 4.18 or newer. Support for Catalog Zones has been added, simplifying the maintenance of secondary DNS servers. With this feature enabled, instead of defining individual records on the secondary server for each secondary zone, a transfer of the zone catalog is organized between the primary and secondary servers. Zones created on the primary server and marked as part of the catalog will automatically be created on the secondary server without the need to modify configuration files. A utility called kcatalogprint has been proposed to manage the catalog.
- A new DNSSEC validation mode has been added.
- The utility kzonesign has been introduced for manually generating digital signatures for DNSSEC.
- The utility kxdpgun has been added, featuring a high-performance DNS over UDP traffic generator for Linux.
- Support for DNS over HTTPS (DoH) has been added to kdig, implemented using GnuTLS and libnghttp2.
- In the manual DNSSEC key management mode, support for revocation status has been added.
- Support for KSK (Key Signing Key) keys (RFC 5011) has been added. A secure method for backing up and restoring DNS zone data has been suggested.).
- When enabling the multi-threaded mode for generating digital signatures for DNS zones, some additional operations with zones have been parallelized.
- Cache efficiency has been improved and request processing performance has been enhanced.
- The Astra Linux group plans to invest 3 billion rubles in the Linux ecosystem.
- The release of KnotDNS 3.0.0 has been published.
- 🥇Release of DNS server KnotDNS 3.0.0 | ProHoster
Source: opennet.ru
