kusunungura , yakakwira-inoshanda inotenderwa DNS server (iyo recursor inoitwa seyakasiyana application) inotsigira ese emazuva ano maDNS maficha. Iyo purojekiti inogadzirwa neCzech zita registry CZ.NIC, yakanyorwa muC uye ane rezinesi pasi peGPLv3.
KnotDNS inoratidzirwa nekutarisa kune yakakwira query process performance, iyo inoshandisa yakawanda-shinda uye kazhinji isingavharidzike kuita iyo inoyera zvakanaka paSMP masisitimu. Zvimiro zvakaita sekuwedzera nekubvisa nzvimbo panhunzi, kuendesa nzvimbo pakati pemaseva, DDNS (dynamic updates), NSID (RFC 5001), EDNS0 uye DNSSEC ekuwedzera (kusanganisira NSEC3), chiyero chekupindura (RRL) chinopihwa.
Mukuburitswa kutsva:
- Yakawedzerwa yakakwirira-inoshanda network mode, inoshandiswa uchishandisa subsystem (eXpress Data Path), iyo inopa maturusi ekugadzirisa mapaketi padanho rekutyaira network isati yagadziriswa neLinux kernel network stack. Kuti ushandise iyo modhi, Linux kernel 4.18 kana gare gare inodiwa.
- Yakawedzera rutsigiro rweCatalog Zones, zvichiita kuti zvive nyore kuchengetedza yechipiri DNS maseva. Kana chimiro ichi chagoneswa, pachinzvimbo chekutsanangura marekodhi akaparadzana enzvimbo yega yega yechipiri sevhavhavhavha, kabhuku kenzvimbo inotamiswa pakati pemasevha ekutanga neesekondari, mushure mezvo nzvimbo dzakagadzirwa pane yekutanga server uye yakamakwa sekubatanidzwa mukatalogi inozobva yangoerekana yavapo. yakagadzirwa pane yechipiri server pasina kudikanwa kwekugadzirisa mafaera ekugadzirisa. Iyo kkatalog utility inokurudzirwa kuti iite kataroji manejimendi.
- Yakawedzera imwe itsva DNSSEC verification mode.
- Yakawedzera kzonesign utility yekugadzira nemaoko siginecha yedhijitari yeDNSSEC.
- Yakawedzera kxdpgun utility nekuita kwepamusoro-kuita "DNS pamusoro peUDP" traffic jenareta yeLinux.
- kdig inowedzera tsigiro yeDNS pamusoro peHTTPS (DoH), inoshandiswa uchishandisa GnuTLS uye libnghttp2.
- Yakawedzerwa rutsigiro rwebhuku DNSSEC kiyi manejimendi makiyi KSK (Kiyi yekusaina kiyi) ().
- Yakawedzerwa tsigiro ye deterministic chizvarwa chedhijitari siginicha uchishandisa ECDSA algorithms (inoda GnuTLS 3.6.10 uye gare gare kushanda).
- Nzira yakachengeteka yekuchengetedza uye kudzoreredza DNS zone data inokurudzirwa.
- Kuita kwe "statistics" module kwakagadziridzwa zvakanyanya.
- Kana iwe uchigonesa iyo yakawanda-yakarukwa nzira yekugadzira masiginecha edhijitari yenzvimbo dzeDNS, kufanana kwemamwe mashandisirwo ane mazoni kunovimbiswa.
- Kuvandudzwa kwecaching kunyatsoshanda uye nekuvandudza query performance.
Source: opennet.ru