{"id":72951,"date":"2020-03-06T02:42:09","date_gmt":"2020-03-05T23:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3"},"modified":"2020-03-06T02:42:09","modified_gmt":"2020-03-05T23:42:09","slug":"reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","title":{"rendered":"Vabanemine PowerDNS Recursor 4.3 ja KnotDNS 2.9.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.powerdns.com\/2020\/03\/03\/powerdns-recursor-4-3-0-released\/\">On toimunud<\/a><\/noindex> vahetuste DNS-serveri v\u00e4ljaanne <noindex><a rel=\"nofollow\" href=\"https:\/\/www.powerdns.com\/recursor.html\">PowerDNS Recursor 4.3<\/a><\/noindex>, mis vastutab rekursiivsete nimede t\u00f5lgete eest. PowerDNS Recursor on ehitatud samale koodibaasile nagu PowerDNS Autoriteetne Server, kuid rekursiivsed ja autoriteetsed DNS-serverid PowerDNS-i raames arenevad erinevate arendusts\u00fcklite raames ja neid v\u00e4lja antakse eraldi toodetena. Projekti kood <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PowerDNS\/pdns\">GNU \u00dcldine Avaliku litsentsi alusel.<\/a><\/noindex> GPLv2 litsentsi all. <\/p>\n<p>Server pakub vahendeid kaugtasu kogumiseks, toetab kohest taask\u00e4ivitamist, omab sisseehitatud mootori Lua-keeles t\u00f6\u00f6tlejate \u00fchendamiseks, toetab t\u00e4ielikult DNSSEC, DNS64, RPZ (Response Policy Zones) ja v\u00f5imaldab mustade loendite lisamist. On v\u00f5imalik salvestada lahendamise tulemusi BIND-i tsoonifailidena. K\u00f5rge j\u00f5udluse tagamiseks kasutatakse FreeBSD, Linuxi ja Solaris'i kaasaegseid \u00fchenduste multiplexerimise mehhanisme (kqueue, epoll, \/dev\/poll) ning k\u00f5rge j\u00f5udlusega DNS-pakettide parsijat, mis suudab t\u00f6\u00f6delda k\u00fcmneid tuhandeid paralleelseid p\u00e4ringuid. <\/p>\n<p>Uues versioonis:<\/p>\n<ul>\n<li class=\"l\"> Kuna v\u00e4ltida teabe leket k\u00fcsitud domeeni kohta ja suurendada privaatsust, on vaikimisi lubatud mehhanism. <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#qname-minimization\">QNAME minimiseerimine<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc7816\/\">RFC-7816<\/a><\/noindex>), t\u00f6\u00f6tades \u00abrelaxed\u00bb re\u017eiimis. Mehhanismi olemus seisneb selles, et resolver ei maini otsitava hosti t\u00e4isnime oma p\u00e4ringutes \u00fclemisele domeeniserverile. N\u00e4iteks, kui m\u00e4\u00e4ratakse aadress hostile foo.bar.baz.com, siis saadab resolver autoriteetsesse tsooni \u00ab.com\u00bb serverisse p\u00e4ringu \u00abQTYPE=NS,QNAME=baz.com\u00bb, mainimata \u00abfoo.bar\u00bb. Praeguses vormis on rakendatud t\u00f6\u00f6tamine \u00abrelaxed\u00bb re\u017eiimis.\n<li class=\"l\"> On rakendatud v\u00f5imalus logida v\u00e4ljaminevaid p\u00e4ringuid autoriteetsesse serverisse ja nende vastuseid formaadis dnstap (kasutamiseks on vajalik koostamine valikuga \u00ab--enable-dnstap\u00bb.\n<li class=\"l\"> Tagatud on mitme samal ajal sissetuleva p\u00e4ringu t\u00f6\u00f6tlemine, mis edastatakse TCP \u00fchenduse kaudu, andes tulemusi v\u00e4lja vastavalt nende valmimisele, mitte j\u00e4rjekorras. Samal ajal t\u00f6\u00f6deldavate p\u00e4ringute piir on m\u00e4\u00e4ratud seadistusega \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#max-concurrent-requests-per-tcp-connection\">max-concurrent-requests-per-tcp-connection<\/a><\/noindex>&#171;.\n<li class=\"l\"> Rakendatud on uute domeenide j\u00e4lgimise tehnika. <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/nod_udr.html\">NOD<\/a><\/noindex> (Uus j\u00e4lgitud domeen), mida saab kasutada kahtlaste domeenide v\u00f5i domeenide tuvastamiseks, mis on seotud pahatahtliku tegevusega, nagu pahavara levitamine, kalastamine ja botnetide haldamine. Meetod p\u00f5hineb domeenide m\u00e4\u00e4ratlemisel, millega varem pole \u00fchendust olnud, ja nende uute domeenide anal\u00fc\u00fcsil. Uute domeenide j\u00e4lgimise asemel kogu kunagi vaadatud domeenide andmebaasi p\u00f5hjal, mille haldamine n\u00f5uab m\u00e4rkimisv\u00e4\u00e4rseid ressursse, rakendab NOD t\u00f5en\u00e4osusstruktuuri. <noindex><a rel=\"nofollow\" href=\"http:\/\/webdocs.cs.ualberta.ca\/~drafiei\/papers\/DupDet06Sigmod.pdf\">SBF<\/a><\/noindex> (Stable Bloom Filter), mis v\u00f5imaldab minimeerida m\u00e4lu ja CPU tarbimist. Selle sissel\u00fclitamiseks tuleb seadetes m\u00e4rkida \u00abnew-domain-tracking=yes\u00bb.\n<li class=\"l\"> Systemd all k\u00e4ivitatuna t\u00f6\u00f6tab PowerDNS Recursor n\u00fc\u00fcd privileegide puudumisega kasutaja pdns-recursor all, mitte root. Systemid, kus ei ole systemd ega chroot, kasutavad n\u00fc\u00fcd vaikimisi haldussoketi ja pid-faili salvestamiseks kausta \/var\/run\/pdns-recursor.\n<\/ul>\n<p>Lisaks toetab <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/2020-03-03-version-293.html\">avaldatud<\/a><\/noindex> v\u00e4ljalase <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/\">KnotDNS 2.9.3<\/a><\/noindex>, k\u00f5rge j\u00f5udlusega autoriteetse DNS-serveri (rekursiivne on eraldi rakendus), mis toetab k\u00f5iki kaasaegseid DNS-i v\u00f5imalusi. Projekti arendab T\u0161ehhi nimeregister CZ.NIC, kirjutatud C-keeles ja <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/CZ-NIC\/knot\">GNU \u00dcldine Avaliku litsentsi alusel.<\/a><\/noindex> GPLv3 litsentsi alusel. <\/p>\n<p>KnotDNS eristub k\u00f5rge p\u00e4ringut\u00f6\u00f6tluse j\u00f5udluse poolest, rakendades mitme l\u00f5ime ja peamiselt mittesulatavat teostust, mis on h\u00e4sti skaaleeritav SMP-s\u00fcsteemidel. Pakutakse selliseid v\u00f5imalusi nagu tsoonide reaalajas lisamine ja eemaldamine, tsoonide edastamine serverite vahel, DDNS (d\u00fcnaamilised v\u00e4rskendused), NSID (RFC 5001), EDNS0 laiendused ja DNSSEC (sealhulgas NSEC3), vastuste intensiivsuse piiramise v\u00f5imalused (RRL). <\/p>\n<p>Uues v\u00e4ljaandes:<\/p>\n<ul>\n<li class=\"l\"> Lisatud on seadistus \u2018remote.block-notify-after-transfer\u2019 s\u00f5numite NOTIFY saatmise keelamiseks;\n<li class=\"l\"> Eksperimentaalne Ed448 algoritmi tugi DNSSE-s on rakendatud (n\u00f5uab GnuTLS 3.6.12+ ja veel mitte v\u00e4lja lastud <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lysator.liu.se\/~nisse\/nettle\/\">Nettle 3.6+<\/a><\/noindex>);\n<li class=\"l\"> Keymgr-sse on lisatud parameeter \u2018local-serial\u2019, et saada v\u00f5i seadistada KASP andmebaasis SOA-seeria number allkirjastatud tsooni jaoks;\n<li class=\"l\"> Keymgr-is on lisatud Ed25519 ja Ed448 v\u00f5tmete impordi tugi DNS-serveri BIND formaadis;\n<li class=\"l\"> Seadistus \u2018server.tcp-io-timeout\u2019 vaikimisi suurendatud 500 ms-ni ning \u2018database.journal-db-max-size\u2019 v\u00e4hendatud 512 MiB-ni 32-bitiste s\u00fcsteemide puhul.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52488\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 PowerDNS Recursor 4.3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043c\u0451\u043d. PowerDNS Recursor \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 \u0441 PowerDNS Authoritative Server, \u043d\u043e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b PowerDNS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72951","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 PowerDNS Recursor 4.3 ja KnotDNS 2.9.3 v\u00e4ljaanne | ProHoster","description":"Ilmus DNS-serveri, mis salvestab vahem\u00e4lu","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-05T23:42:09+00:00","article:modified_time":"2020-03-05T23:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72951","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:42:53","updated":"2022-10-04 21:14:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=72951"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72951\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=72951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=72951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=72951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}