{"id":72951,"date":"2020-03-06T02:42:09","date_gmt":"2020-03-05T23:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3"},"modified":"2020-03-06T02:42:09","modified_gmt":"2020-03-05T23:42:09","slug":"reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","title":{"rendered":"Lansarea PowerDNS Recursor 4.3 \u0219i KnotDNS 2.9.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.powerdns.com\/2020\/03\/03\/powerdns-recursor-4-3-0-released\/\">A avut loc<\/a><\/noindex> lansare a unui server DNS caching <noindex><a rel=\"nofollow\" href=\"https:\/\/www.powerdns.com\/recursor.html\">PowerDNS Recursor 4.3<\/a><\/noindex>, care se ocup\u0103 de transformarea recursiv\u0103 a numelui. PowerDNS Recursor este construit pe aceea\u0219i baz\u0103 de cod cu PowerDNS Authoritative Server, dar serverele DNS recursive \u0219i autoritative PowerDNS evolueaz\u0103 \u00een cadrul unor cicluri diferite de dezvoltare \u0219i sunt lansate sub form\u0103 de produse separate. Codul proiectului <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/PowerDNS\/pdns\">se r\u0103sp\u00e2nde\u0219te<\/a><\/noindex> sub licen\u021ba GPLv2. <\/p>\n<p>Serverul ofer\u0103 mijloace pentru colectarea statisticilor de la distan\u021b\u0103, suport\u0103 repornirea instantanee, are un motor integrat pentru conectarea handler-elor \u00een limbajul Lua, suport\u0103 complet DNSSEC, DNS64, RPZ (Zone de Politic\u0103 de R\u0103spuns), permite conectarea listelor negre. Exist\u0103 posibilitatea de a \u00eenregistra rezultatele rezolv\u0103rii sub form\u0103 de fi\u0219iere de zone BIND. Pentru a asigura o performan\u021b\u0103 ridicat\u0103, sunt utilizate mecanisme moderne de multiplexare a conexiunilor \u00een FreeBSD, Linux \u0219i Solaris (kqueue, epoll, \/dev\/poll), precum \u0219i un parser DNS de \u00eenalt\u0103 performan\u021b\u0103 capabil s\u0103 proceseze zeci de mii de cereri paralele. <\/p>\n<p>\u00cen noua versiune:<\/p>\n<ul>\n<li class=\"l\"> Pentru a preveni scurgerile de informa\u021bii despre domeniul solicitat \u0219i a cre\u0219te confiden\u021bialitatea, mecanismul a fost inclus \u00een mod implicit. <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#qname-minimization\">Minimizarea QNAME<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc7816\/\">RFC-7816<\/a><\/noindex>), func\u021bion\u00e2nd \u00een modul &#171;relaxed&#187;. Esen\u021ba mecanismului const\u0103 \u00een faptul c\u0103 rezolutorul nu men\u021bioneaz\u0103 numele complet al gazdei c\u0103utate \u00een solicit\u0103rile sale c\u0103tre serverul de nume superior. De exemplu, atunci c\u00e2nd determin\u0103 adresa pentru gazda foo.bar.baz.com, rezolutorul va trimite serverului autoritar pentru domeniul &#171;.com&#187; o solicitare &#171;QTYPE=NS,QNAME=baz.com&#187;, f\u0103r\u0103 a men\u021biona &#171;foo.bar&#187;. \u00cen forma actual\u0103, modul &#171;relaxed&#187; este implementat.\n<li class=\"l\"> A fost implementat\u0103 posibilitatea de a face jurnalizarea solicit\u0103rilor ie\u0219itoare c\u0103tre serverul autoritar \u0219i a r\u0103spunsurilor \u00een format dnstap (pentru utilizare, este necesar\u0103 o construc\u021bie cu op\u021biunea &#171;&#8212;enable-dnstap&#187;.\n<li class=\"l\"> S-a asigurat procesarea simultan\u0103 a mai multor solicit\u0103ri de intrare transmise prin conexiunea TCP, cu returnarea rezultatelor pe m\u0103sur\u0103 ce devin disponibile, \u0219i nu \u00een ordinea \u00een care au fost primite \u00een coad\u0103. Limita solicit\u0103rilor simultane este definit\u0103 de configurare &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/settings.html#max-concurrent-requests-per-tcp-connection\">max-concurrent-requests-per-tcp-connection<\/a><\/noindex>&#171;.\n<li class=\"l\"> A fost implementat\u0103 tehnica de urm\u0103rire a noilor domenii <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.powerdns.com\/recursor\/nod_udr.html\">NOD<\/a><\/noindex> (Domeniu Observat Recent), care poate fi utilizat\u0103 pentru identificarea domeniilor suspecte sau a domeniilor asociate cu activit\u0103\u021bi d\u0103un\u0103toare, cum ar fi desf\u0103\u0219urarea de programe mali\u021bioase, participarea la phishing \u0219i utilizarea pentru controlul botnet-urilor. Metoda se bazeaz\u0103 pe identificarea domeniilor la care nu s-a apelat anterior \u0219i analiza acestor noi domenii. \u00cen loc de a urm\u0103ri noile domenii din baza de date complet\u0103 a tuturor domeniilor vizitate vreodat\u0103, men\u021binerea c\u0103reia necesit\u0103 resurse semnificative, \u00een NOD se aplic\u0103 o structur\u0103 probabilistic\u0103 <noindex><a rel=\"nofollow\" href=\"http:\/\/webdocs.cs.ualberta.ca\/~drafiei\/papers\/DupDet06Sigmod.pdf\">SBF<\/a><\/noindex> (Stable Bloom Filter), care permite minimizarea consumului de memorie \u0219i CPU. Pentru a activa aceast\u0103 op\u021biune \u00een configur\u0103ri, trebuie specificat &#171;new-domain-tracking=yes&#187;.\n<li class=\"l\"> C\u00e2nd este lansat sub gestionarea systemd, procesul PowerDNS Recursor este acum executat sub utilizatorul f\u0103r\u0103 privilegii pdns-recursor \u00een loc de root. Pentru sistemele f\u0103r\u0103 systemd \u0219i f\u0103r\u0103 chroot, \u00een mod implicit, directorul pentru stocarea socket-ului de control \u0219i a fi\u0219ierului pid este acum \\\/var\\\/run\\\/pdns-recursor.\n<\/ul>\n<p>\u00cen plus, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/2020-03-03-version-293.html\">publicat<\/a><\/noindex> lansare <noindex><a rel=\"nofollow\" href=\"https:\/\/www.knot-dns.cz\/\">KnotDNS 2.9.3<\/a><\/noindex>, un server DNS autoritar de \u00eenalt\u0103 performan\u021b\u0103 (rezolutorul este implementat ca o aplica\u021bie separat\u0103), care suport\u0103 toate func\u021bionalit\u0103\u021bile moderne ale DNS. Proiectul este dezvoltat de registrul ceh de nume CZ.NIC, scris \u00een limbajul C \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/CZ-NIC\/knot\">se r\u0103sp\u00e2nde\u0219te<\/a><\/noindex> sub licen\u021ba GPLv3. <\/p>\n<p>KnotDNS se distinge prin orientarea sa c\u0103tre o \u00eenalt\u0103 performan\u021b\u0103 \u00een procesarea cererilor, av\u00e2nd o implementare multi-threaded, majoritatea fiind non-blocant\u0103, bine scalabil\u0103 pe sistemele SMP. Se ofer\u0103 posibilit\u0103\u021bi precum ad\u0103ugarea \u0219i eliminarea zonelor \u00een timp real, transferul zonelor \u00eentre servere, DDNS (actualiz\u0103ri dinamice), NSID (RFC 5001), extensii EDNS0 \u0219i DNSSEC (inclusiv NSEC3), restric\u021bii privind intensitatea r\u0103spunsurilor (RRL). <\/p>\n<p>\u00cen noua versiune:<\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 configurarea &#8216;remote.block-notify-after-transfer&#8217; pentru a dezactiva trimiterea mesajelor NOTIFY;\n<li class=\"l\"> A fost implementat suport experimental pentru algoritmul Ed448 \u00een DNSSE (necesit\u0103 GnuTLS 3.6.12+ \u0219i versiunea care nu a fost \u00eenc\u0103 lansat\u0103 Nettle 3.6+; <noindex><a rel=\"nofollow\" href=\"https:\/\/www.lysator.liu.se\/~nisse\/nettle\/\">Nettle 3.6+<\/a><\/noindex>);\n<li class=\"l\"> \u00cen keymgr a fost ad\u0103ugat parametrul &#8216;local-serial&#8217; pentru a ob\u021bine sau a seta \u00een baza de date KASP num\u0103rul de serie SOA pentru zona semnat\u0103;\n<li class=\"l\"> \u00cen keymgr a fost ad\u0103ugat\u0103 suportul pentru importul cheilor Ed25519 \u0219i Ed448 \u00een formatul serverului DNS BIND;\n<li class=\"l\"> Valoarea configura\u021biei &#8216;server.tcp-io-timeout&#8217; a fost crescut\u0103 \u00een mod implicit la 500 ms, iar &#8216;database.journal-db-max-size&#8217; a fost redus\u0103 la 512 MiB pe sistemele pe 32 de bi\u021bi.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52488\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 PowerDNS Recursor 4.3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043c\u0451\u043d. PowerDNS Recursor \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 \u0441 PowerDNS Authoritative Server, \u043d\u043e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0439 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b PowerDNS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72951","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-05T23:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea PowerDNS Recursor 4.3 \u0219i KnotDNS 2.9.3 | ProHoster","description":"A avut loc lansarea serverului DNS caching","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 PowerDNS Recursor 4.3 \u0438 KnotDNS 2.9.3 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0448\u0435\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-powerdns-recursor-4-3-i-knotdns-2-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-05T23:42:09+00:00","article:modified_time":"2020-03-05T23:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72951","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:42:53","updated":"2022-10-04 21:14:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/72951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=72951"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/72951\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=72951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=72951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=72951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}