{"id":72951,"date":"2020-03-06T02:42:09","date_gmt":"2020-03-05T23:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3"},"modified":"2020-03-06T02:42:09","modified_gmt":"2020-03-05T23:42:09","slug":"reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","title":{"rendered":"PowerDNS Recursor 4.3 ja KnotDNS 2.9.3 v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.powerdns.com\/2020\/03\/03\/powerdns-recursor-4-3-0-released\/\">Toimus<\/a><\/noindex> vahem\u00e4lus hoidva DNS-serveri v\u00e4ljaanne <noindex><a rel=\"nofollow\" href=\"https:\/\/www.powerdns.com\/recursor.html\">PowerDNS Recursor 4.3<\/a><\/noindex>, mis vastutab nime rekurssi muutmise eest. PowerDNS Recursor p\u00f5hineb samal koodibaasil kui PowerDNS autoriteetne server, kuid PowerDNS-i rekurssi ja autoriteetsed DNS-serverid arenevad eraldi arendus- ja v\u00e4ljaandmists\u00fcklites ning neid v\u00e4ljastatakse eraldi toodetena. Projekti kood <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PowerDNS\/pdns\">levitatakse<\/a><\/noindex> on GPLv2 litsentsi all. <\/p>\n<p>Server pakub kaugstatistika kogumise vahendeid, toetab kohest taask\u00e4ivitamist, sisaldab sisseehitatud mootorit Lua keeles t\u00f6\u00f6tlejate \u00fchendamiseks, toetab t\u00e4ielikult DNSSEC, DNS64, RPZ (Response Policy Zones) ja lubab mustade nimekirjade \u00fchendamist. On v\u00f5imalik salvestada lahendamise tulemusi BIND ala failide kujul. Tootlikkuse tagamiseks kasutatakse t\u00e4nap\u00e4evaseid \u00fchenduste mitmekordistamise mehhanisme FreeBSD, Linuxi ja Solaris (kqueue, epoll, \/dev\/poll), samuti t\u00f5husat DNS-pakettide parsi, mis suudab t\u00f6\u00f6delda k\u00fcmneid tuhandeid paralleelseid p\u00e4ringuid. <\/p>\n<p>Uues versioonis:<\/p>\n<ul>\n<li class=\"l\"> Teabe lekkimise v\u00e4ltimiseks k\u00fcsitava domeeni kohta ja privaatsuse suurendamiseks on vaikimisi sisse l\u00fclitatud mehhanism <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#qname-minimization\">QNAME minimiseerimine<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc7816\/\">RFC-7816<\/a><\/noindex>), t\u00f6\u00f6tades \"relaxed\" re\u017eiimis. Mehhanismi olemus on see, et resolver ei maini t\u00e4ielikku otsitava hosti nime oma p\u00e4ringutes \u00fclemisele domeeninime serverile. N\u00e4iteks, kui m\u00e4\u00e4rata aadress hostile foo.bar.baz.com, saadab resolver autoriteetsele \".com\" tsooni serverile p\u00e4ringu \"QTYPE=NS,QNAME=baz.com\", mainimata \"foo.bar\". Praegu on rakendatud t\u00f6\u00f6 \"relaxed\" re\u017eiimis.\n<li class=\"l\"> On rakendatud v\u00f5imalus v\u00e4liste p\u00e4ringute ajalugu autoriteetsele serverile ja nendele vastuste logimiseks dnstrap formaadis (kasutamiseks on vajalik kogumine valikuga \"--enable-dnstap\").\n<li class=\"l\"> Tagatud on mitme samaaegse sissetuleva p\u00e4ringu t\u00f6\u00f6tlemine, mis edastatakse TCP \u00fchenduse kaudu, tulemuste tagastamisega valmimise j\u00e4rjekorras, mitte p\u00e4ringute j\u00e4rgmises j\u00e4rjekorras. Samaaegsete p\u00e4ringute piir on m\u00e4\u00e4ratud seadistusega \"<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#max-concurrent-requests-per-tcp-connection\">max-concurrent-requests-per-tcp-connection<\/a><\/noindex>&#171;.\n<li class=\"l\"> Rakendatud on uute domeenide j\u00e4lgimise tehnika <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/nod_udr.html\">NOD<\/a><\/noindex> (Newly Observed Domain), mida saab kasutada kahtlaste domeenide v\u00f5i domeenide tuvastamiseks, mis on seotud pahatahtliku tegevusega, nagu pahavara levitamine, Phishing ja botnetide juhtimine. Meetod p\u00f5hineb domeenide m\u00e4\u00e4ratlemisel, mille poole pole varem p\u00f6\u00f6rdutud, ja nende uute domeenide anal\u00fc\u00fcsimisel. Uute domeenide j\u00e4lgimiseks ei j\u00e4lgita k\u00f5iki kunagi k\u00fclastatud domeene, mis n\u00f5uaks m\u00e4rkimisv\u00e4\u00e4rseid ressursse, vaid NOD-s rakendatakse t\u00f5en\u00e4osusstruktuuri <noindex><a rel=\"nofollow\" href=\"http:\/\/webdocs.cs.ualberta.ca\/~drafiei\/papers\/DupDet06Sigmod.pdf\">SBF<\/a><\/noindex> (Stabiilne Bloom Filter), mis v\u00f5imaldab minimiseerida m\u00e4lu ja CPU tarbimist. Selle aktiveerimiseks tuleks seades m\u00e4\u00e4rata \"new-domain-tracking=yes\".\n<li class=\"l\"> Systemd haldajaga k\u00e4ivitamisel t\u00f6\u00f6tab PowerDNS Recursor n\u00fc\u00fcd \u00f5igusteta kasutajana pdns-recursor, mitte rootina. Systemd ja chroot'i puudumisel kasutatakse vaikimisi haldussocket'i ja pid-faili jaoks kausta \/var\/run\/pdns-recursor.\n<\/ul>\n<p>Lisaks, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/2020-03-03-version-293.html\">avaldati<\/a><\/noindex> vabastus <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/\">KnotDNS 2.9.3<\/a><\/noindex>, k\u00f5rge j\u00f5udlusega autoriteetne DNS-server (rekursor on eraldi rakenduses), mis toetab k\u00f5iki kaasaegseid DNS-i v\u00f5imalusi. Projekti arendab T\u0161ehhi nime registreerija CZ.NIC, kirjutatud C keeles ja <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/CZ-NIC\/knot\">levitatakse<\/a><\/noindex> ja GPLv3 litsentsi alusel. <\/p>\n<p>KnotDNS-i iseloomustab k\u00f5rge p\u00e4ringute t\u00f6\u00f6tlemise j\u00f5udlus, mille saavutamiseks kasutatakse mitme l\u00f5ime, peamiselt mitteblokeerivat rakendust, mis on h\u00e4sti skaleeritav SMP-s\u00fcsteemidel. Pakutakse selliseid v\u00f5imalusi nagu tsoonide kiire lisamine ja eemaldamine, tsoonide edastamine serverite vahel, DDNS (d\u00fcnaamilised v\u00e4rskendused), NSID (RFC 5001), EDNS0 laiendused ning DNSSEC (sealhulgas NSEC3), vastuste intensiivsuse piiramise v\u00f5imalused (RRL). <\/p>\n<p>Uues v\u00e4ljaandes:<\/p>\n<ul>\n<li class=\"l\"> Lisatud seadistus 'remote.block-notify-after-transfer' NOTIFY teadet saatmise keelamiseks.\n<li class=\"l\"> Eksperimentaalne tugi Ed448 algoritmile DNSSE-s on rakendatud (vajalik GnuTLS 3.6.12+ ja veel mitte v\u00e4lja antud <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lysator.liu.se\/~nisse\/nettle\/\">Nettle 3.6+<\/a><\/noindex>);\n<li class=\"l\"> Keymgr-is on lisatud parameeter 'local-serial', et saada v\u00f5i seadistada KASP andmebaasis allkirjastatud tsooni seerianumber.\n<li class=\"l\"> Keymgris on lisatud toetus Ed25519 ja Ed448 v\u00f5tmete importimiseks BIND DNS-serveri formaadis;\n<li class=\"l\"> Seadistuse 'server.tcp-io-timeout' v\u00e4\u00e4rtus on vaikimisi suurendatud 500 ms-ni, ja 'database.journal-db-max-size' on v\u00e4hendatud 512 MiB-ni 32-bitiste s\u00fcsteemide jaoks.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52488\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 PowerDNS Recursor 4.3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043c\u0451\u043d. PowerDNS Recursor \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 \u0441 PowerDNS Authoritative Server, \u043d\u043e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b PowerDNS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72951","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47PowerDNS Recursor 4.3 ja KnotDNS 2.9.3 v\u00e4ljalase | ProHoster","description":"V\u00e4lja tuli vahem\u00e4luga DNS-server","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-05T23:42:09+00:00","article:modified_time":"2020-03-05T23:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72951","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:42:53","updated":"2022-10-04 21:14:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=72951"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72951\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=72951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=72951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=72951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}