release , een hoogpresterende autoritatieve DNS-server (de resolver is uitgevoerd als een aparte applicatie) die alle moderne DNS-functionaliteiten ondersteunt. Het project wordt ontwikkeld door het Tsjechische registratiesysteem CZ.NIC, is geschreven in C, en onder GPLv3-licentie.
KnotDNS is focused on high-performance query processing, utilizing a multi-threaded, mostly non-blocking implementation that scales well on SMP systems. Features include dynamic addition and removal of zones, zone transfer between servers, DDNS (dynamic updates), NSID (RFC 5001), EDNS0 extensions, and DNSSEC (including NSEC3), as well as response rate limiting (RRL).
In de nieuwe release:
- Complete support for various serial number (SOA) calculations for zones on master and slave servers is implemented, with digital signature zone assurance on slave servers;
- The geoip module has been updated to support records with wildcard templates;
- A new setting ‘rrsig-pre-refresh’ has been added for reducing the frequency of zone digital signature assurance events for DNSSEC;
- A ‘tcp-reuseport’ option has been added to set the SO_REUSEPORT(_LB) mode for TCP sockets;
- The ‘tcp-io-timeout’ setting has been added to limit the time for incoming input/output operations over TCP;
- Significantly increased performance for zone content modification operations;
- Support for reconfiguration of network interfaces and handlers has been discontinued as it cannot be carried out after privilege dropping by the process;
- The implementation of DNS Cookies has been revised to fully comply with the draft specification draft-ietf-dnsop-server-cookies;
- By default, the limit on the number of TCP connections is now capped at half the system limit on the number of file descriptors, with the number of open files set to 1048576;
- When selecting the number of handlers to run, the number of CPUs is now used, but not less than 10;
- Many options have been renamed, for example, ‘server.tcp-reply-timeout’ to ‘server.tcp-remote-io-timeout’, ‘server.max-tcp-clients’ to ‘server.tcp-max-clients’, ‘template.journal-db’ to ‘database.journal-db’, etc. Support for old names will be maintained at least until the next major release.
Bron: opennet.ru
