Utgitt DNS-server KnotDNS 2.9.0

Published versjon KnotDNS 2.9.0, høypresterande autoritativ DNS-server (rekursoren er implementert som ein sjølvstendig applikasjon) som støttar alle moderne DNS-funksjonar. Prosjektet vert utvikla av det tsjekkiske domeneregistret CZ.NIC, og er skrive i C og distribueres er lisensiert under GPLv3.

KnotDNS er fokusert på høy ytelse i forespørselshåndtering, med bruk av flertråding samt for det meste ikke-blokkerende implementering, som er godt skalerbar på SMP-systemer. Det tilbys funksjoner som sanntids legge til og fjerne soner, overføring av soner mellom servere, DDNS (dynamiske oppdateringer), NSID (RFC 5001), EDNS0-utvidelser og DNSSEC (inkludert NSEC3), samt begrensninger for intensitet av svar (RRL).

I den nye utgaven:

• Full support for various serial number (SOA) calculations for zones on master and slave servers has been implemented, with zone signing by digital signature on the slave server.
• Support for wildcard records has been added to the geoip module.
• A new setting ‘rrsig-pre-refresh’ has been added for DNSSEC to reduce the frequency of zone signing events.
• The setting ‘tcp-reuseport’ has been added to enable SO_REUSEPORT(_LB) mode for TCP sockets.
• The setting ‘tcp-io-timeout’ has been added to limit the time for incoming I/O operations over TCP.
• The performance of zone content modification operations has been significantly increased.
• Support for reconfiguration of network interfaces and handlers has been discontinued, as it cannot be performed after privilege dropping by the process.
• The implementation of DNS Cookies has been redesigned to fully comply with the draft specification draft-ietf-dnsop-server-cookies.
• By default, the restriction on the number of TCP connections is now limited to half of the system limit for the number of file descriptors, and the number of open files is set to 1048576.
• When choosing the number of handlers to run, the CPU count is now used, but is not less than 10.
• Many options have been renamed, for example ‘server.tcp-reply-timeout’ to ‘server.tcp-remote-io-timeout’, ‘server.max-tcp-clients’ to ‘server.tcp-max-clients’, ‘template.journal-db’ to ‘database.journal-db’, and so on. Support for old names will be maintained for at least the next major release.

Kilde: opennet.ru