Ho lokolloa ha caching seva sa DNS PowerDNS Recursor 4.7.0

Ho lokolloa ha caching DNS server PowerDNS Recursor 4.7 e teng, e ikarabellang bakeng sa ho fetola mabitso a mangata. PowerDNS Recursor e hahiloe holim'a motheo oa khoutu e le 'ngoe le PowerDNS Authoritative Server, empa li-server tsa DNS tsa PowerDNS tse pheta-phetoang le tse nang le matla li hlahisoa ka li-cycle tse fapaneng tsa nts'etsopele 'me li lokolloa e le lihlahisoa tse arohaneng. Khoutu ea projeke e ajoa tlasa laesense ea GPLv2.

Seva e fana ka lisebelisoa bakeng sa pokello ea lipalo-palo e hole, e ts'ehetsa ho qala bocha hang-hang, e na le enjene e hahelletsoeng bakeng sa ho hokahanya li-handers ka puo ea Lua, e ts'ehetsa ka botlalo DNSSEC, DNS64, RPZ (Libaka tsa Leano la Karabelo), mme e u lumella ho hokahanya li-blacklist. Hoa khonahala ho hatisa liphetho tsa qeto joalo ka lifaele tsa libaka tsa BIND. Ho netefatsa ts'ebetso e phahameng, mekhoa ea sejoale-joale ea ho kopanya li-multiplexing e sebelisoa ho FreeBSD, Linux le Solaris (kqueue, epoll, /dev/poll), hammoho le pakete ea DNS e sebetsang hantle haholo e khonang ho sebetsana le likopo tse likete tse mashome tse tšoanang.

Khatisong e ncha:

  • Hoa khoneha ho eketsa litlaleho tse eketsehileng ho likarabo tse rometsoeng ho mofani ho fana ka tlhahisoleseding e molemo ntle le tlhokahalo ea ho romela kopo e fapaneng (mohlala, likarabo ho kopo ea rekoto ea MX li ka lokisoa ho hokela litlaleho tse amanang le A le AAAA).
  • Litlhoko tsa RFC 9156 li hlokometsoe ts'ebetsong ea ts'ehetso ea mokhoa oa ho fokotsa lebitso la potso ("QNAME minimisation"), e lumellang ho eketsa lekunutu ka ho emisa ho romela lebitso le feletseng la QNAME ho seva sa holimo.
  • Qeto ea liaterese tsa IPv6 tsa li-server tsa DNS tse sa thathamisitsoeng ho lirekoto tsa GR (Glue Record) tseo mongolisi a fetisang tlhahisoleseling mabapi le li-server tsa DNS tse sebeletsang domain name li fanoa.
  • Ho khothaletsoa ho kenya tšebetsong teko ea mokhoa o le mong oa ho tšehetsa li-server tsa DNS bakeng sa protocol ea DoT (DNS over TLS).
  • E ekelitse bokhoni ba ho khutlela ho rekoto ea motsoali ea NS e behiloeng haeba li-server ho ngoana NS rekoto e behiloeng li sa arabele.
  • Ts'ehetso e ekelitsoeng bakeng sa ho lekola bonnete ba lirekoto tsa ZONEMD RR (RFC 8976) tse fumanoeng ho cache.
  • E ekelitse bokhoni ba ho hokela batšoantšisi ka puo ea Lua, e bitsoang sethaleng sa ho phethela qeto (mohlala, ho batho ba joalo o ka fetola karabo e khutliselitsoeng ho moreki).

Source: opennet.ru

Eketsa ka tlhaloso