{"id":72951,"date":"2020-03-06T02:42:09","date_gmt":"2020-03-05T23:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3"},"modified":"2020-03-06T02:42:09","modified_gmt":"2020-03-05T23:42:09","slug":"reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","title":{"rendered":"Sortie de PowerDNS Recursor 4.3 et KnotDNS 2.9.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.powerdns.com\/2020\/03\/03\/powerdns-recursor-4-3-0-released\/\">A eu lieu<\/a><\/noindex> lancement d'un serveur DNS en cache <noindex><a rel=\"nofollow\" href=\"https:\/\/www.powerdns.com\/recursor.html\">PowerDNS Recursor 4.3<\/a><\/noindex>, responsable de la transformation r\u00e9cursive des noms. PowerDNS Recursor est bas\u00e9 sur la m\u00eame base de code que PowerDNS Authoritative Server, mais les serveurs DNS r\u00e9cursifs et autoritatifs de PowerDNS \u00e9voluent dans des cycles de d\u00e9veloppement diff\u00e9rents et sont publi\u00e9s sous forme de produits distincts. Le code du projet <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PowerDNS\/pdns\">est distribu\u00e9<\/a><\/noindex> sous licence GPLv2. <\/p>\n<p>Le serveur fournit des outils pour la collecte \u00e0 distance de statistiques, prend en charge le red\u00e9marrage instantan\u00e9, dispose d'un moteur int\u00e9gr\u00e9 pour connecter des gestionnaires en Lua, prend en charge pleinement DNSSEC, DNS64, RPZ (Response Policy Zones) et permet l'int\u00e9gration de listes noires. Il est possible d'enregistrer les r\u00e9sultats de la r\u00e9solution sous forme de fichiers de zones BIND. Pour garantir des performances \u00e9lev\u00e9es, des m\u00e9canismes modernes de multiplexage de connexions sont utilis\u00e9s sous FreeBSD, Linux et Solaris (kqueue, epoll, \/dev\/poll), ainsi qu'un parseur DNS haute performance capable de traiter des dizaines de milliers de requ\u00eates simultan\u00e9es. <\/p>\n<p>Dans la nouvelle version :<\/p>\n<ul>\n<li class=\"l\"> Afin d'\u00e9viter les fuites d'informations sur le domaine demand\u00e9 et d'am\u00e9liorer la confidentialit\u00e9, le m\u00e9canisme <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#qname-minimization\">QNAME Minimization<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc7816\/\">RFC-7816<\/a><\/noindex>), fonctionnant en mode \u00ab relaxed \u00bb. L'essence du m\u00e9canisme est que le r\u00e9solveur ne mentionne pas le nom complet de l'h\u00f4te recherch\u00e9 dans ses requ\u00eates au serveur de noms en amont. Par exemple, lors de la d\u00e9termination de l'adresse pour l'h\u00f4te foo.bar.baz.com, le r\u00e9solveur enverra au serveur autoritaire pour la zone \u00ab .com \u00bb la requ\u00eate \u00ab QTYPE=NS, QNAME=baz.com \u00bb, sans mentionner \u00ab foo.bar \u00bb. La fonctionnalit\u00e9 en mode \u00ab relaxed \u00bb est d\u00e9j\u00e0 impl\u00e9ment\u00e9e.\n<li class=\"l\"> La fonctionnalit\u00e9 de journalisation des requ\u00eates sortantes vers le serveur autoritaire et de leurs r\u00e9ponses au format dnstap est impl\u00e9ment\u00e9e (une version avec l'option \u00ab --enable-dnstap \u00bb est requise pour l'utilisation).\n<li class=\"l\"> La gestion simultan\u00e9e de plusieurs requ\u00eates entrantes transmises via une connexion TCP est assur\u00e9e, avec renvoi des r\u00e9sultats d\u00e8s qu'ils sont pr\u00eats, et non dans l'ordre des requ\u00eates dans la file d'attente. La limite des requ\u00eates simultan\u00e9es est d\u00e9termin\u00e9e par le param\u00e8tre \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#max-concurrent-requests-per-tcp-connection\">max-concurrent-requests-per-tcp-connection<\/a><\/noindex>\u00bb.\n<li class=\"l\"> La technique pour suivre de nouveaux domaines est mise en \u0153uvre <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/nod_udr.html\">NOD<\/a><\/noindex> (Nouveau domaine observ\u00e9), qui peut \u00eatre utilis\u00e9 pour identifier des domaines suspects ou associ\u00e9s \u00e0 des activit\u00e9s malveillantes telles que la distribution de logiciels malveillants, le phishing et l'utilisation pour le contr\u00f4le de botnets. La m\u00e9thode est bas\u00e9e sur l'identification de domaines qui n'ont pas \u00e9t\u00e9 pr\u00e9c\u00e9demment consult\u00e9s et l'analyse de ces nouveaux domaines. Au lieu de suivre de nouveaux domaines sur l'ensemble de la base de toutes les domaines consult\u00e9s, dont le maintien exige des ressources consid\u00e9rables, NOD utilise une structure probabiliste <noindex><a rel=\"nofollow\" href=\"http:\/\/webdocs.cs.ualberta.ca\/~drafiei\/papers\/DupDet06Sigmod.pdf\">SBF<\/a><\/noindex> (Stable Bloom Filter), permettant de minimiser la consommation de m\u00e9moire et de CPU. Pour l'activation, il faut d\u00e9finir \u00ab new-domain-tracking=yes \u00bb dans les param\u00e8tres.\n<li class=\"l\"> Lors du d\u00e9marrage sous systemd, le processus PowerDNS Recursor s'ex\u00e9cute d\u00e9sormais sous un utilisateur non privil\u00e9gi\u00e9 pdns-recursor au lieu de root. Pour les syst\u00e8mes sans systemd et sans chroot, le r\u00e9pertoire par d\u00e9faut pour le socket de gestion et le fichier pid est d\u00e9sormais \/var\/run\/pdns-recursor.\n<\/ul>\n<p>De plus, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/2020-03-03-version-293.html\">publi\u00e9e<\/a><\/noindex> la sortie <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/\">KnotDNS 2.9.3<\/a><\/noindex>, un serveur DNS autoritaire \u00e0 haute performance (le r\u00e9solveur est ex\u00e9cut\u00e9 en tant qu'application s\u00e9par\u00e9e), prenant en charge toutes les fonctionnalit\u00e9s modernes de DNS. Le projet est d\u00e9velopp\u00e9 par le registre de noms tch\u00e8que CZ.NIC, \u00e9crit en C et <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/CZ-NIC\/knot\">est distribu\u00e9<\/a><\/noindex> sous licence GPLv3. <\/p>\n<p>KnotDNS se distingue par son orientation vers une haute performance de traitement des requ\u00eates, utilisant une mise en \u0153uvre multithread\u00e9e, en grande partie non bloquante, bien \u00e9volutive sur les syst\u00e8mes SMP. Des fonctionnalit\u00e9s telles que l'ajout et la suppression de zones \u00e0 la vol\u00e9e, le transfert de zones entre serveurs, DDNS (mises \u00e0 jour dynamiques), NSID (RFC 5001), extensions EDNS0 et DNSSEC (y compris NSEC3), et des limitations de l'intensit\u00e9 des r\u00e9ponses (RRL) sont fournies. <\/p>\n<p>Dans cette nouvelle version :<\/p>\n<ul>\n<li class=\"l\"> Un param\u00e8tre \u2018remote.block-notify-after-transfer\u2019 a \u00e9t\u00e9 ajout\u00e9 pour d\u00e9sactiver l'envoi des messages NOTIFY ;\n<li class=\"l\"> Mise en \u0153uvre d'un support exp\u00e9rimental pour l'algorithme Ed448 dans DNSSE (n\u00e9cessite GnuTLS 3.6.12+ et non encore publi\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lysator.liu.se\/~nisse\/nettle\/\">Nettle 3.6+<\/a><\/noindex>);\n<li class=\"l\"> Dans keymgr, un param\u00e8tre \u2018local-serial\u2019 a \u00e9t\u00e9 ajout\u00e9 pour r\u00e9cup\u00e9rer ou d\u00e9finir dans la base de donn\u00e9es KASP le num\u00e9ro de s\u00e9rie SOA pour la zone sign\u00e9e ;\n<li class=\"l\"> Dans keymgr, ajout du support pour l'importation de cl\u00e9s Ed25519 et Ed448 au format du serveur DNS BIND;\n<li class=\"l\"> La valeur par d\u00e9faut du param\u00e8tre \u2018server.tcp-io-timeout\u2019 a \u00e9t\u00e9 augment\u00e9e \u00e0 500 ms, tandis que \u2018database.journal-db-max-size\u2019 a \u00e9t\u00e9 r\u00e9duite \u00e0 512 MiB sur les syst\u00e8mes 32 bits.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52488\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 PowerDNS Recursor 4.3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043c\u0451\u043d. PowerDNS Recursor \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 \u0441 PowerDNS Authoritative Server, \u043d\u043e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b PowerDNS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72951","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Lancement de PowerDNS Recursor 4.3 et KnotDNS 2.9.3 | ProHoster","description":"Le lancement d'un serveur DNS de mise en cache a eu lieu","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-05T23:42:09+00:00","article:modified_time":"2020-03-05T23:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72951","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:42:53","updated":"2022-10-04 21:14:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/72951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=72951"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/72951\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=72951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=72951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=72951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}