PowerDNS Authoritative Server 4.2 Kuburitswa

zvakaitika kuburitswa kweane chiremera DNS server PowerDNS Authoritative Server 4.2, yakagadzirirwa kuronga kugoverwa kweDNS zone. By kupihwa vanogadzira mapurojekiti, PowerDNS Authoritative Server inoshanda ingangoita 30% yehuwandu hwehuwandu hwemadomasi muEurope (kana isu tichifunga chete madomasi ane DNSSEC masiginecha, ipapo 90%). Project code inoparadzirwa ne ine rezinesi pasi peGPLv2.

PowerDNS Authoritative Server inopa kugona kuchengetedza ruzivo rwedomendi mune akasiyana dhatabhesi, kusanganisira MySQL, PostgreSQL, SQLite3, Oracle, uye Microsoft SQL Server, pamwe neLDAP uye akajeka mameseji mafaera muBIND fomati. Kudzosa kwemhinduro kunogona kuwedzera kusefa (semuenzaniso, kusefa kunze spam) kana kutungamirwa nekubatanidza vako vanobata muLua, Java, Perl, Python, Ruby, C uye C ++. Pakati pezvimiro, pane zvakare maturusi ekuunganidza ari kure ehuwandu, zvinosanganisira kuburikidza neSNMP kana kuburikidza neWebhu API (iyo http server yakavakirwa mukati yehuwandu uye manejimendi), kutangazve ipapo, injini yakavakirwa-mukati yekubatanidza vanobata mumutauro weLua. , kugona kuenzanisa mutoro zvichienderana nenzvimbo yemutengi .

chikuru zvitsva:

• Added feature tsanangudzo zvinyorwa zvine vabati mumutauro weLua, nerubatsiro rwaunokwanisa kugadzira vabati vane ruzivo vanokoshesa AS, subnets, kuswedera kune mushandisi, nezvimwewo pakudzoka data. Tsigiro yeLua marekodhi yakaitwa kune ese ekuchengetedza kumashure, kusanganisira BIND uye LMDB. Semuyenzaniso, kutumira data uchifunga nezve cheki yekumashure yekuwanikwa kwevaenzi munzvimbo yekumisikidzwa, unogona ikozvino kutsanangura:

  @IN LUA A "ifportup(443, {'52.48.64.3', '45.55.10.200'})"

• Yakawedzera chishandiso chitsva ixfrdist, iyo inokubvumira kuendesa nzvimbo kubva kune ane mvumo sevha uchishandisa AXFR uye IXFR zvikumbiro, uchifunga nezve kukosha kweiyo data inotamiswa (kune imwe neimwe domain, iyo SOA nhamba inotariswa uye chete mitsva mitsva yenzvimbo inotorwa). Iyo yekushandisa inobvumidza iwe kuronga kuwiriranisa kwenzvimbo pane yakakura kwazvo nhamba yechipiri uye inodzokorodza maseva pasina kugadzira inorema pane yekutanga server;
• Mukugadzirira kutanga DNS mureza zuva 2020 Kukosha kweiyo udp-truncation-threshold parameter, iyo ine basa rekucheka mhinduro dzeUDP kumutengi, yakaderedzwa kubva pa1680 kusvika 1232, iyo inofanirwa kuderedza zvakanyanya mukana wekurasikirwa neUDP mapaketi. Iko kukosha kwe1232 kwakasarudzwa nokuti ndiyo yakawanda iyo saizi yemhinduro yeDNS, uchifunga nezve IPv6, inokodzera muhushoma hweMTU kukosha (1280);
• Yakawedzera dhatabhesi-yakavakirwa kuchengetedza backend LMDB. Iyo yekumashure inoenderana zvizere neDNSSEC, inogona kushandiswa tenzi uye nzvimbo dzevaranda, uye inopa kuita kurinani kupfuura mamwe akawanda ekumashure. Pakarepo kusunungurwa kusati kwasunungurwa, shanduko yakawedzerwa kune code yakavhiringidza kushanda kweLMDB backend (kugadzirisa nzvimbo dzevaranda uye kurodha kuburikidza nepdnsutil kwakashanda, asi mirairo yakadai se "pdnsutil edit-zone" yakamira kushanda. Matambudziko akarongwa kuti agadziriswe. mukusunungurwa kwekugadzirisa kunotevera;
• Yakadonhedza tsigiro yezvisina kunyorwa zvakanaka "autoserial" basa, izvo zvaitadzisa dzimwe nyaya kugadziriswa. Maererano nezvinodiwa RFC 8624 (GOST R 34.11-2012 yakatamira kuchikamu che "HAZVIFANIRI") DNSSEC haichatsigire GOST DS hashes uye ECC-GOST digital siginecha.

Sechiyeuchidzo, PowerDNS yatamira kumwedzi mitanhatu yekuvandudza, nekuburitswa kukuru kunotevera kwePowerDNS Authoritative Server inotarisirwa muna Kukadzi 2020. Zvigadziriso zvekuburitswa kwakakosha zvichagadziriswa gore rose, mushure mezvo zvigadziriso zvenjodzi zvichaburitswa kweimwe mwedzi mitanhatu. Saka, rutsigiro rwePowerDNS Authoritative Server 4.2 bazi richagara kusvika Ndira 2021.

Source: opennet.ru