KnotDNS 3.0.0 DNS Server Kutulutsidwa

Lofalitsidwa kumasula KnotDNS 3.0.0, seva yovomerezeka ya DNS yogwira ntchito kwambiri (recursor idapangidwa ngati pulogalamu yosiyana) yomwe imathandizira mphamvu zonse zamakono za DNS. Ntchitoyi ikupangidwa ndi Czech name registry CZ.NIC, yolembedwa mu C ndi wogawidwa ndi zololedwa pansi pa GPLv3.

KnotDNS imasiyanitsidwa ndi kuyang'ana kwake pakukonza kwamafunso apamwamba, komwe imagwiritsa ntchito njira zambiri komanso zosatsekereza zomwe zimayendera bwino pamakina a SMP. Zinthu monga kuwonjezera ndi kuchotsa madera pa ntchentche, kusamutsa madera pakati pa ma seva, DDNS (zosintha zosintha), NSID (RFC 5001), EDNS0 ndi DNSSEC zowonjezera (kuphatikiza NSEC3), kuchepetsa kuyankha (RRL) kumaperekedwa.

M'kutulutsa kwatsopano:

• Wowonjezera mawonekedwe apamwamba a netiweki, ogwiritsidwa ntchito pogwiritsa ntchito subsystem XDP (eXpress Data Path), yomwe imapereka zida zosinthira mapaketi pamlingo wa driver driver musanasankhidwe ndi Linux kernel network stack. Kuti mugwiritse ntchito mawonekedwe, Linux kernel 4.18 kapena mtsogolo ikufunika.
• Thandizo lowonjezera la Catalog Zones, kupangitsa kukhala kosavuta kusunga ma seva achiwiri a DNS. Izi zikayatsidwa, m'malo mofotokozera ma rekodi osiyana a gawo lililonse lachiwiri pa seva yachiwiri, kalozera wa zone amasamutsidwa pakati pa ma seva a pulayimale ndi achiwiri, pambuyo pake magawo omwe adapangidwa pa seva yoyamba ndikuzindikiridwa ngati akuphatikizidwa m'kabukhulo adzangochitika zokha. adapangidwa pa seva yachiwiri popanda kufunikira kosintha mafayilo. Chothandizira cha kcatalog chaperekedwa kuti chisamalire ma catalog.
• Yawonjezera njira yotsimikizira ya DNSSEC.
• Chowonjezera cha kzonesign chopangira pamanja siginecha ya digito ya DNSSEC.
• Chowonjezera cha kxdpgun ndikukhazikitsa "DNS pa UDP" jenereta yamagalimoto ya Linux.
• kdig imawonjezera chithandizo cha DNS pa HTTPS (DoH), yogwiritsidwa ntchito pogwiritsa ntchito GnuTLS ndi libnghttp2.
• Thandizo lowonjezera pakuwongolera makiyi a DNSSEC kubweza udindo makiyi KSK (Kiyi Yosayina) (RFC 5011).
• Thandizo lowonjezera pakupanga masiginecha a digito pogwiritsa ntchito ma algorithms a ECDSA (amafunika GnuTLS 3.6.10 ndi pambuyo pake kuti agwire ntchito).
• Njira yotetezeka yosunga zobwezeretsera ndikubwezeretsa zone ya DNS ikuperekedwa.
• Kuchita kwa gawo la "mawerengero" kwasintha kwambiri.
• Mukatsegula njira yamitundu yambiri yopangira ma siginecha a digito pamagawo a DNS, kufananiza kwa ntchito zina zowonjezera ndi madera kumatsimikizika.
• Kuchita bwino kwa caching ndikuwongolera kwamafunso.

Source: opennet.ru