KnotDNS 3.0.0 Sakin Sabar DNS

aka buga saki KnotDNS 3.0.0, uwar garken DNS mai iko mai girma (an ƙirƙira mai maimaitawa azaman aikace-aikacen daban) wanda ke goyan bayan duk damar DNS na zamani. Ana haɓaka aikin ta hanyar rajistar sunan Czech CZ.NIC, wanda aka rubuta a cikin C da rarraba ta mai lasisi a ƙarƙashin GPLv3.

KnotDNS yana bambanta ta hanyar mayar da hankali kan aiwatar da aikin tambaya mai girma, wanda yake amfani da aiwatar da zaren da yawa kuma galibi ba tare da toshewa ba wanda ke da kyau akan tsarin SMP. Siffofin kamar ƙarawa da share yankuna a kan tashi, canja wurin yankuna tsakanin sabobin, DDNS (sabuntawa mai ƙarfi), NSID (RFC 5001), EDNS0 da DNSSEC kari (ciki har da NSEC3), iyakance ƙimar amsawa (RRL).

A cikin sabon saki:

• Ƙara yanayin cibiyar sadarwa mai girma, aiwatarwa ta amfani da tsarin ƙasa XDP (Path Data eXpress), wanda ke ba da kayan aiki don sarrafa fakiti a matakin direban cibiyar sadarwa kafin a sarrafa ta ta hanyar cibiyar sadarwar kernel ta Linux. Don amfani da yanayin, Linux kernel 4.18 ko kuma daga baya ana buƙatar.
• Ƙara tallafi don Yankunan Kasidar, yana sauƙaƙa don kula da sabar DNS ta biyu. Lokacin da aka kunna wannan fasalin, maimakon bayyana rakodin daban-daban na kowane yanki na sakandare a kan uwar garken sakandare, ana canja wurin kataloji na yanki tsakanin sabobin firamare da na sakandare, bayan an ƙirƙiri shiyyoyin da aka ƙirƙira akan uwar garken farko kuma aka yi alama kamar yadda aka haɗa a cikin kas ɗin za su kasance ta atomatik. ƙirƙira akan uwar garken sakandare ba tare da buƙatar gyara saitunan fayiloli ba. An ƙaddamar da amfanin kcatalogprint don sarrafa katalogi.
• An ƙara sabon yanayin tabbatarwa na DNSSEC.
• Ƙara kzonesign mai amfani don samar da sa hannun dijital da hannu don DNSSEC.
• Ƙara kxdpgun mai amfani tare da aiwatar da babban aiki "DNS akan UDP" janareta na zirga-zirga don Linux.
• kdig yana ƙara tallafi don DNS akan HTTPS (DoH), wanda aka aiwatar ta amfani da GnuTLS da libnghttp2.
• Added goyon baya ga manual DNSSEC key management matsayin sokewa maɓallan KSK (Maɓallin Sa hannu)RFC 5011).
• Ƙarin tallafi don ƙayyadaddun ƙira na sa hannun dijital ta amfani da algorithms ECDSA (yana buƙatar GnuTLS 3.6.10 kuma daga baya don aiki).
• Ana ba da shawarar amintacciyar hanya don wariyar ajiya da maido da bayanan yankin DNS.
• An inganta aikin tsarin “ƙididdiga” sosai.
• Lokacin da kuka kunna yanayin mai zare da yawa na samar da sa hannu na dijital don yankunan DNS, ana tabbatar da daidaita wasu ƙarin ayyuka tare da yankuna.
• Inganta aikin caching da ingantaccen aikin tambaya.

source: budenet.ru