Ukukhutshwa kwe-caching ye-DNS iseva ye-PowerDNS Recursor 4.7.0

Ukukhutshwa kwe-caching yeseva ye-DNS i-PowerDNS Recursor 4.7 iyafumaneka, enoxanduva lokulungiswa kwegama eliphindaphindayo. I-PowerDNS Recursor yakhelwe kwisiseko sekhowudi efanayo ne-PowerDNS Authoritative Server, kodwa i-PowerDNS i-recursive ne-recursive servers ye-DNS iphuhliswa ngemijikelo eyahlukeneyo yophuhliso kwaye ikhutshwe njengemveliso eyahlukileyo. Ikhowudi yeprojekthi isasazwa phantsi kwelayisensi ye-GPLv2.

Umncedisi unikezela ngezixhobo zokuqokelela okude kwezibalo, isekela ukuqalisa kwakhona kwangoko, inenjini eyakhelweyo yokudibanisa abaphathi ngolwimi lwesiLua, ixhasa ngokupheleleyo i-DNSSEC, i-DNS64, i-RPZ (iMimandla yoMgaqo-nkqubo wokuPhendula), kwaye ikuvumela ukuba udibanise uluhlu lwabamnyama. Kuyenzeka ukurekhoda iziphumo zesisombululo njengefayile yendawo ye-BIND. Ukuqinisekisa ukusebenza okuphezulu, iindlela zale mihla zokudityaniswa koqhagamshelo zisetyenziswa kwiFreeBSD, Linux kunye neSolaris (kqueue, epoll, /dev/poll), kunye nomgangatho ophezulu wepakethi yeDNS parser ekwaziyo ukucubungula amashumi amawaka ezicelo ezifanayo.

Kwinguqulelo entsha:

  • Kunokwenzeka ukuba ungeze iirekhodi ezongezelelweyo kwiimpendulo ezithunyelwe kumxhasi ukuhambisa ulwazi oluluncedo ngaphandle kwesidingo sokuthumela isicelo esahlukileyo (umzekelo, iimpendulo kwisicelo serekhodi ye-MX zinokuqulunqwa ukuze zifake iirekhodi ezinxulumene ne-A kunye ne-AAAA).
  • Iimfuno ze-RFC 9156 zithathelwe ingqalelo ekuphunyezweni kwenkxaso yendlela yokunciphisa igama lombuzo ("i-QNAME minimisation"), evumela ukwandisa ubumfihlo ngokuyeka ukuthumela igama elipheleleyo le-QNAME kwiseva ephezulu.
  • Isisombululo seedilesi ze-IPv6 zeeseva ze-DNS ezingadweliswanga kwiirekhodi ze-GR (Glue Record) apho umbhalisi adlulisa ulwazi malunga neeseva ze-DNS ezikhonza i-domain zinikezelwa.
  • Ukuphunyezwa komfuniselo wokuqinisekiswa kwendlela enye yenkxaso yeseva ye-DNS yeprotocol ye-DoT (i-DNS phezu kwe-TLS) iyacetywa.
  • Kongezwe amandla okubuyela umva kwirekhodi ye-NS yomzali eseti ukuba abancedisi kumntwana iseti yerekhodi ye-NS abaphenduli.
  • Inkxaso eyongeziweyo yokujonga ukunyaniseka kweerekhodi ze-ZONEMD RR (RFC 8976) ezifunyenwe kwi-cache.
  • Ukongezwa amandla okunamathisela abaphathi ngolwimi lwesiLua, ebizwa kwinqanaba lokugqiba isisombululo (umzekelo, kubaphathi abanjalo unokutshintsha impendulo ebuyiselwe kumxhasi).

umthombo: opennet.ru

Yongeza izimvo