Sakin uwar garken Izini na PowerDNS 4.2

ya faru saki na uwar garken DNS mai iko PowerDNS Server mai izini 4.2, An tsara don tsara rarraba yankunan DNS. By bayarwa masu haɓaka aikin, PowerDNS Izini Server yana hidima kusan 30% na jimlar adadin yankuna a Turai (idan muka yi la'akari da yanki kawai tare da sa hannun DNSSEC, to 90%). Lambar aikin rarraba ta mai lasisi a ƙarƙashin GPLv2.

PowerDNS Izini Server yana ba da damar adana bayanan yanki a cikin maballin bayanai daban-daban, gami da MySQL, PostgreSQL, SQLite3, Oracle, da Microsoft SQL Server, haka kuma a cikin LDAP da fayilolin rubutu a sarari a cikin tsarin BIND. Hakanan ana iya tace dawowar martanin (misali, don tace spam) ko turawa ta hanyar haɗa masu sarrafa ku a cikin Lua, Java, Perl, Python, Ruby, C da C ++. Daga cikin fasalulluka, akwai kuma kayan aikin tattara ƙididdiga masu nisa, gami da ta SNMP ko ta API ɗin Yanar Gizo (an gina sabar http don ƙididdiga da gudanarwa), sake kunnawa nan take, ingin da aka gina don haɗa masu sarrafa a cikin yaren Lua. , da ikon daidaita nauyi dangane da yanayin yanki na abokin ciniki.

Main sababbin abubuwa:

• Ƙara iyawa ma'anar rubuce-rubuce tare da ma'aikata a cikin harshen Lua, tare da taimakon abin da za ku iya ƙirƙira nagartattun ma'aikata waɗanda ke la'akari da AS, ƙananan bayanai, kusanci ga mai amfani, da sauransu lokacin dawo da bayanai. An aiwatar da goyan bayan bayanan Lua don duk wuraren ajiyar ajiya, gami da BIND da LMDB. Misali, don aika bayanai da la'akari da binciken baya na kasancewar runduna a cikin tsarin yankin, yanzu zaku iya saka:

  @IN LUA A "ifportup(443, {'52.48.64.3', '45.55.10.200'})"

• An ƙara sabon kayan aiki ixfrdist, wanda ke ba ku damar canja wurin yankuna daga sabar mai iko ta amfani da buƙatun AXFR da IXFR, la'akari da dacewa da bayanan da aka canjawa wuri (ga kowane yanki, ana bincika lambar SOA kuma kawai ana sauke sabbin nau'ikan yankin). Mai amfani yana ba ku damar tsara aiki tare na yankuna akan adadi mai yawa na sabobin sakandare da masu maimaitawa ba tare da ƙirƙirar kaya mai nauyi akan uwar garken farko ba;
• A cikin shirye-shiryen shirin Ranar tutar DNS 2020 An rage darajar ma'auni na udp-truncation-threshold, wanda ke da alhakin datsa martanin UDP ga abokin ciniki, daga 1680 zuwa 1232, wanda ya kamata ya rage yiwuwar rasa fakitin UDP. An zaɓi darajar 1232 saboda ita ce matsakaicin girman girman amsawar DNS, la'akari da IPv6, ya dace da mafi ƙarancin ƙimar MTU (1280);
• An ƙara sabon maajiyar tushen bayanai LMDB. Ƙarshen baya yana da cikakkiyar yarda da DNSSEC, ana iya amfani da shi don masters da bawa, kuma yana ba da kyakkyawan aiki fiye da sauran masu goyon baya. Nan da nan kafin a saki, an ƙara wani canji a lambar da ta kawo cikas ga aikin LMDB backend (aiki yankunan bayi da lodawa ta hanyar pdnsutil, amma umarni irin su "pdnsutil edit-zone" sun daina aiki. An shirya gyara matsalolin. a cikin sakin gyara na gaba;
• An yi watsi da tallafi don aikin "autoserial" mara kyau, wanda ke hana warware wasu batutuwa. Dangane da bukatun RFC 8624 (GOST R 34.11-2012 ya koma sashin "MUST NOT") DNSSEC baya goyan bayan GOST DS hashes da ECC-GOST dijital sa hannu.

A matsayin tunatarwa, PowerDNS ya matsa zuwa tsarin ci gaba na wata shida, tare da babban sakin PowerDNS Izini Server na gaba da ake tsammanin a watan Fabrairu 2020. Za a haɓaka sabuntawa don mahimman sakewa a cikin shekara, bayan haka za a sake fitar da gyare-gyaren rashin lahani na wasu watanni shida. Don haka, goyan baya ga reshen Izini na PowerDNS 4.2 zai kasance har zuwa Janairu 2021.

source: budenet.ru