ืžืขืœื“ื•ื ื’ ืคื•ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ 4.2 ืื•ืŸ ื“ื ืก ืคืึธืŸ ื˜ืึธื’ 2020 ืื™ื ื™ืฆื™ืื˜ื™ื•ื•

ื ืึธืš ืึท ื™ืึธืจ ืื•ืŸ ืึท ื”ืึทืœื‘ ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ื“ืขืจืœืื ื’ื˜ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ืงืึทื˜ืฉื™ื ื’ ื“ื ืก ืกืขืจื•ื•ืขืจ PowerDNS Resource 4.2, ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ืจืขืงื•ืจืกื™ื•ื•ืข ื ืึธืžืขืŸ ืงืึทื ื•ื•ืขืจื–ืฉืึทืŸ. PowerDNS ืจืขืงื•ืจืกืึธืจ ืื™ื– ื’ืขื‘ื•ื™ื˜ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืงืึธื“ ื‘ืึทื–ืข ื•ื•ื™ PowerDNS Authoritative Server, ืึธื‘ืขืจ PowerDNS ืจืขืงื•ืจืกื™ื•ื•ืข ืื•ืŸ ืึทื˜ืึธืจืึทื˜ื™ื™ื˜ื™ื•ื• ื“ื ืก ืกืขืจื•ื•ืขืจืก ื–ืขื ืขืŸ ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš ืคืึทืจืฉื™ื“ืขื ืข ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืกื™ื™ืงืึทืœื– ืื•ืŸ ื–ืขื ืขืŸ ืจืขืœืขืึทืกืขื“ ื•ื•ื™ ื‘ืึทื–ื•ื ื“ืขืจ ืคึผืจืึธื“ื•ืงื˜ืŸ. ืคึผืจืึธื™ืขืงื˜ ืงืึธื“ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื•ืจืš ืœื™ื™ืกืึทื ืกื˜ ืื•ื ื˜ืขืจ GPLv2.

ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข ื™ืœื™ืžืึทื ื™ื™ืฅ ืึทืœืข ื™ืฉื•ื– ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื“ื ืก ืคึผืึทืงื™ืฅ ืžื™ื˜ EDNS ืคืœืึทื’ืก. ืขืœื˜ืขืจืข ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ ืื™ื™ื“ืขืจ 2016 ื”ืึธื‘ืŸ ื“ื™ ืคื™ืจ ืคื•ืŸ ืื™ื’ื ืึธืจื™ืจืŸ ืคึผืึทืงื™ืฅ ืžื™ื˜ ืึทื ืกืึทืคึผืึธืจื˜ื™ื“ EDNS ืคืœืึทื’ืก ืึธืŸ ืฉื™ืงืŸ ืึท ืขื ื˜ืคืขืจ ืื™ืŸ ื“ื™ ืึทืœื˜ ืคึฟืึธืจืžืึทื˜, ืึทื•ื•ืขืงื•ื•ืึทืจืคืŸ ื“ื™ EDNS ืคืœืึทื’ืก ื•ื•ื™ ืคืืจืœืื ื’ื˜ ื“ื•ืจืš ื“ื™ ืกืคึผืขืกื™ืคื™ืงืึทื˜ื™ืึธืŸ. ื‘ื™ื– ืึทื”ืขืจ, ื“ืขื ื ื™ื˜-ื ืึธืจืžืึทืœ ื ืึทื˜ื•ืจ ืื™ื– ื’ืขืฉื˜ื™ืฆื˜ ืื™ืŸ BIND ืื™ืŸ ื“ื™ ืคืึธืจืขื ืคื•ืŸ ืึท ื•ื•ืึธืจืงืึทืจืึธื•ื ื“, ืึธื‘ืขืจ ืื™ืŸ ื“ื™ ืคืึทืจื ืขื ืคื•ืŸ ื“ื•ืจื›ื’ืขืคื™ืจื˜ ืื™ืŸ ืคืขื‘ืจื•ืืจ ื™ื ื™ืฉืึทื˜ื™ื•ื•ื– ื“ื ืก ืคืึธืŸ ื˜ืึธื’, ื“ื ืก ืกืขืจื•ื•ืขืจ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื‘ืึทืฉืœืึธืกืŸ ืฆื• ืคืึทืจืœืึธื–ืŸ ื“ืขื ื›ืึทืง.

ืื™ืŸ PowerDNS, ื“ื™ ื”ื•ื™ืคึผื˜ ืคืจืื‘ืœืขืžืขืŸ ืื™ืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืคึผืึทืงื™ืฅ ืžื™ื˜ EDNS ื–ืขื ืขืŸ ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ืฆื•ืจื™ืง ืื™ืŸ 2017 ืื™ืŸ ืžืขืœื“ื•ื ื’ 4.1, ืื•ืŸ ืื™ืŸ ื“ื™ 2016 ืฆื•ื•ื™ื™ึทื’ ื‘ืืคืจื™ื™ื˜ ืื™ืŸ 4.0, ื™ื—ื™ื“ ื™ื ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ื– ืกืขืจืคื™ืกื˜ ื•ื•ืึธืก ืฉื˜ื™ื™ืขืŸ ืื•ื ื˜ืขืจ ืึท ื–ื™ื›ืขืจ ื’ืึทื ื’ ืคื•ืŸ ืฆื•ืฉื˜ืื ื“ืŸ ืื•ืŸ, ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ื˜ืึธืŸ ื ื™ื˜ ืึทืจื™ื™ึทื ืžื™ืฉื  ื–ื™ืš ืžื™ื˜ ื ืึธืจืžืึทืœ. ืึธืคึผืขืจืึทืฆื™ืข. ืื™ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ 4.2, ื•ื•ื™ ืื™ืŸ ื‘ื™ื ื“ืŸ 9.14, ืจื™ืžื•ื•ื•ื“ ื•ื•ืึธืจืงืึทืจืึธื•ื ื“ืก ืฆื• ืฉื˜ื™ืฆืŸ ืึทื˜ืึธืจืึทื˜ื™ื™ื˜ื™ื•ื• ืกืขืจื•ื•ืขืจืก ื•ื•ืึธืก ื™ื ืงืขืจืขืงื˜ืœื™ ืจื™ืกืคึผืึทื ื“ ืฆื• ืจื™ืงื•ื•ืขืก ืžื™ื˜ EDNS ืคืœืึทื’ืก. ื‘ื™ื– ืื™ืฆื˜, ืื•ื™ื‘ ื ืึธืš ืฉื™ืงืŸ ืึท ื‘ืงืฉื” ืžื™ื˜ EDNS ืคืœืึทื’ืก, ืขืก ืื™ื– ืงื™ื™ืŸ ืขื ื˜ืคืขืจ ื ืึธืš ืึท ื’ืขื•ื•ื™ืกืข ืฆื™ื™ื˜, ื“ื™ ื“ื ืก ืกืขืจื•ื•ืขืจ ื”ืึธื˜ ืื ื’ืขื ื•ืžืขืŸ ืึทื– ืขืงืกื˜ืขื ื“ืขื“ ืคืœืึทื’ืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ื’ืขืฉื˜ื™ืฆื˜ ืื•ืŸ ื’ืขืฉื™ืงื˜ ืึท ืฆื•ื•ื™ื™ื˜ืข ื‘ืขื˜ืŸ ืึธืŸ EDNS ืคืœืึทื’ืก. ื“ืขืจ ืึธืคึผืคื™ืจื•ื ื’ ืื™ื– ืื™ืฆื˜ ืคืึทืจืงืจื™ืคึผืœื˜ ื•ื•ื™ื™ึทืœ ื“ืขืจ ืงืึธื“ ืจื™ื–ืึทืœื˜ื™ื“ ืื™ืŸ ื’ืขื•ื•ืืงืกืŸ ืœื™ื™ื˜ืึทื ืกื™ ืจืขื›ื˜ ืฆื• ืคึผืึทืงืึทื˜ ืจื™ื˜ืจืึทื ืกืžื™ืฉืึทื ื–, ื’ืขื•ื•ืืงืกืŸ ื ืขืฅ ืžืึทืกืข ืื•ืŸ ืึทืžื‘ื™ื’ื™ื•ืึทื˜ื™ ื•ื•ืขืŸ ื ื™ื˜ ืจื™ืกืคึผืึทื ื“ื™ื ื’ ืจืขื›ื˜ ืฆื• ื ืขืฅ ืคื™ื™ืœื™ืขืจื–, ืื•ืŸ ืคึผืจื™ื•ื•ืขื ื˜ื™ื“ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ EDNS-ื‘ืื–ื™ืจื˜ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืึทื–ืึท ื•ื•ื™ DNS ืงืึธืึธืงื™ืขืก ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ DDoS ืื ืคืืœืŸ.

ืขืก ืื™ื– ื‘ืึทืฉืœืึธืกืŸ ืฆื• ื”ืึทืœื˜ืŸ ื“ื™ ื’ืขืฉืขืขื ื™ืฉ ื•ื•ื™ื™ึทื˜ืขืจ ื™ืึธืจ ื“ื ืก ืคืึธืŸ ื˜ืึธื’ 2020ื“ื™ื–ื™ื™ื ื“ ืฆื• ืคืึธืงื•ืก ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ึทื˜ ืื•ื™ืฃ ื‘ืึทืฉืœื•ืก ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ IP ืคืจืึทื’ืžืึทื ื˜ื™ื™ืฉืึทืŸ ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ื’ืจื•ื™ืก ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ. ื•ื•ื™ ืึท ื˜ื™ื™ืœ ืคื•ืŸ ื“ืขืจ ืื™ื ื™ืฆื™ืื˜ื™ื•ื• ืคึผืœืึทื ื ืขื“ ืคืึทืจืจื™ื›ื˜ืŸ ื“ื™ ืจืขืงืึทืžืขื ื“ื™ื“ ื‘ืึทืคืขืจ ืกื™ื–ืขืก ืคึฟืึทืจ EDNS ืฆื• 1200 ื‘ื™ื˜ืขืก, ืื•ืŸ ื–ืขืฅ ืคึผืจืึทืกืขืกื™ื ื’ ืจื™ืงื•ื•ืขืก ื“ื•ืจืš TCP ืื™ื– ืึท ืžื•ื–ืŸ-ื”ืึธื‘ืŸ ืฉื˜ืจื™ืš ืื•ื™ืฃ ืกืขืจื•ื•ืขืจืก. ืื™ืฆื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’ ืจื™ืงื•ื•ืขืก ื“ื•ืจืš UDP ืื™ื– ืคืืจืœืื ื’ื˜, ืื•ืŸ TCP ืื™ื– ื“ื™ื–ื™ื™ืจืึทื‘ืึทืœ, ืึธื‘ืขืจ ื ื™ืฉื˜ ืคืืจืœืื ื’ื˜ ืคึฟืึทืจ ืึธืคึผืขืจืึทืฆื™ืข (ื“ืขืจ ื ืึธืจืžืึทืœ ืจื™ืงื•ื•ื™ื™ืขืจื– ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ TCP). ืขืก ืื™ื– ืคืืจื’ืขืœื™ื™ื’ื˜ ืฆื• ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ื“ื™ ืึธืคึผืฆื™ืข ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ TCP ืคื•ืŸ ื“ื™ ืกื˜ืึทื ื“ืึทืจื˜ ืื•ืŸ ืกื˜ืึทื ื“ืขืจื“ื™ื™ื– ื“ื™ ื™ื‘ืขืจื’ืึทื ื’ ืคื•ืŸ ืฉื™ืงืŸ ืจื™ืงื•ื•ืขืก ืื™ื‘ืขืจ UDP ืฆื• ื ื™ืฆืŸ TCP ืื™ืŸ ืงืึทืกืขืก ื•ื•ืขืŸ ื“ื™ ื’ืขื’ืจื™ื ื“ืขื˜ EDNS ื‘ืึทืคืขืจ ื’ืจื™ื™ืก ืื™ื– ื ื™ืฉื˜ ื’ืขื ื•ื’.

ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ืคืืจื’ืขืœื™ื™ื’ื˜ ื•ื•ื™ ืึท ื˜ื™ื™ืœ ืคื•ืŸ ื“ืขืจ ืื™ื ื™ืฆื™ืื˜ื™ื•ื• ื•ื•ืขื˜ ืขืœื™ืžื™ื ื™ืจืŸ ืฆืขืžื™ืฉื•ื ื’ ืžื™ื˜ ื˜ืฉื•ื–ื™ื ื’ ื“ื™ EDNS ื‘ืึทืคืขืจ ื’ืจื™ื™ืก ืื•ืŸ ืกืึธืœื•ื•ืข ื“ื™ ืคึผืจืึธื‘ืœืขื ืคื•ืŸ ืคืจืึทื’ืžืึทื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื’ืจื•ื™ืก ื•ื“ืคึผ ืึทืจื˜ื™ืงืœืขืŸ, ื“ื™ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื•ื•ืึธืก ืึธืคื˜ ืคื™ืจื˜ ืฆื• ืคึผืึทืงืึทื˜ ืึธื ื•ื•ืขืจ ืื•ืŸ ื˜ื™ื™ืžืึทื•ืฅ ืื•ื™ืฃ ื“ื™ ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜. ืื•ื™ืฃ ื“ืขืจ ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜, ื“ื™ EDNS ื‘ืึทืคืขืจ ื’ืจื™ื™ืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืงืขืกื™ื™ื“ืขืจื“ื™ืง ืื•ืŸ ื’ืจื•ื™ืก ืจืขืกืคึผืึธื ืกืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขืฉื™ืงื˜ ื’ืœื™ื™ืš ืฆื• ื“ืขื ืงืœื™ืขื ื˜ ืื™ื‘ืขืจ TCP. ื•ื™ืกืžื™ื™ื“ืŸ ืฉื™ืงืŸ ื’ืจื•ื™ืก ืึทืจื˜ื™ืงืœืขืŸ ืื™ื‘ืขืจ UDP ื•ื•ืขื˜ ืื•ื™ืš ืœืึธื–ืŸ ืื™ืจ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ืื ืคืืœืŸ ืคึฟืึทืจ ืคืึทืจืกืึทืžื•ื ื’ ื“ื™ ื“ื ืก ืงืึทืฉ, ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ืคืจืึทื’ืžืึทื ื˜ื™ื“ ื•ื“ืคึผ ืคึผืึทืงื™ืฅ (ื•ื•ืขืŸ ืฉืคึผืึทืœื˜ืŸ ืื™ืŸ ืคืจืึทื’ืžืึทื ืฅ, ื“ื™ ืจื’ืข ืคืจืึทื’ืžืขื ื˜ ื˜ื•ื˜ ื ื™ืฉื˜ ืึทื ื˜ื”ืึทืœื˜ืŸ ืึท ื›ืขื“ืขืจ ืžื™ื˜ ืึท ืื™ื“ืขื ื˜ื™ื˜ืขื˜, ืึทื–ื•ื™ ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืึธืจื“ื–ืฉื“, ืคึฟืึทืจ ื•ื•ืึธืก ืขืก ืื™ื– ื’ืขื ื•ื’ ื‘ืœื•ื™ื– ืคึฟืึทืจ ื“ื™ ื˜ืฉืขืงืงืกืึทื ืฆื• ื’ืœื™ื™ึทื›ืŸ) .

PowerDNS ืจืขืงื•ืจืกืึธืจ 4.2 ื ืขืžื˜ ืื™ืŸ ื—ืฉื‘ื•ืŸ ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ ื’ืจื•ื™ืก ื•ื“ืคึผ ืคึผืึทืงื™ืฅ ืื•ืŸ ืกื•ื•ื™ื˜ืฉืึทื– ืฆื• ื ื•ืฆืŸ ื“ื™ EDNS ื‘ืึทืคืขืจ ื’ืจื™ื™ืก (ืขื“ื ืก-ืึทื•ื˜ื’ืึธื•ื™ื ื’-ื‘ื•ืคืกื™ื–ืข) ืคื•ืŸ 1232 ื‘ื™ื˜ืขืก, ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ื™ ื‘ื™ื– ืึทื”ืขืจ ื’ืขื•ื•ื™ื™ื ื˜ ืฉื™ืขื•ืจ ืคื•ืŸ 1680 ื‘ื™ื˜ืขืก, ื•ื•ืึธืก ื–ืึธืœ ื‘ืื˜ื™ื™ื˜ื™ืง ืจืขื“ื•ืฆื™ืจืŸ ื“ื™ ืœื™ืงืขืœื™ื”ืึธืึธื“ ืคื•ืŸ ืœื•ื–ื™ื ื’ ื•ื“ืคึผ ืคึผืึทืงื™ืฅ. . ื“ื™ ื•ื•ืขืจื˜ 1232 ืื™ื– ืื•ื™ืกื“ืขืจื•ื•ื™ื™ืœื˜ ื•ื•ื™ื™ึทืœ ืขืก ืื™ื– ื“ื™ ืžืึทืงืกื™ืžื•ื ืื™ืŸ ื•ื•ืึธืก ื“ื™ ื’ืจื™ื™ืก ืคื•ืŸ ื“ื™ ื“ื ืก ืขื ื˜ืคืขืจ, ื’ืขื ื•ืžืขืŸ ืื™ืŸ ื—ืฉื‘ื•ืŸ IPv6, ืคื™ืฅ ืื™ืŸ ื“ื™ ืžื™ื ื™ืžื•ื MTU ื•ื•ืขืจื˜ (1280). ื“ื™ ื•ื•ืขืจื˜ ืคื•ืŸ ื“ื™ ื˜ืจืึทื ืงืึทื˜ื™ืึธืŸ-ืฉื•ื•ืขืœ ืคึผืึทืจืึทืžืขื˜ืขืจ, ื•ื•ืึธืก ืื™ื– ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ื˜ืจื™ืžื™ื ื’ ืจืขืกืคึผืึธื ืกืขืก ืฆื• ื“ืขื ืงืœื™ืขื ื˜, ืื™ื– ืื•ื™ืš ืจื™ื“ื•ืกื˜ ืฆื• 1232.

ืื ื“ืขืจืข ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ 4.2:

  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืžืขืงืึทื ื™ื–ืึทื ืฉื˜ื™ืฆืŸ XPF (X-Proxied-For), ื•ื•ืึธืก ืื™ื– ื“ืขืจ ื“ื ืก ืขืงื•ื•ื™ื•ื•ืึทืœืขื ื˜ ืคื•ืŸ ื“ื™ X-Forwarded-For HTTP ื›ืขื“ืขืจ, ืึทืœืึทื•ื™ื ื’ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ IP ืึทื“ืจืขืก ืื•ืŸ ืคึผืึธืจื˜ ื ื•ืžืขืจ ืคื•ืŸ ื“ืขืจ ืึธืจื™ื’ื™ื ืขืœ ืจื™ืงื•ื•ืขืกื˜ืขืจ ืฆื• ืคืึธืจื•ื•ืขืจื“ื™ื“ ื“ื•ืจืš ื™ื ื˜ืขืจืžื™ื“ื™ื™ื˜ ืคึผืจืึทืงืกื™ื– ืื•ืŸ ืžืึทืกืข ื‘ืึทืœืึทื ืกืขืจื– (ืึทื–ืึท ื•ื•ื™ dnsdist) . ืฆื• ื’ืขื‘ืŸ XPF ืขืก ื–ืขื ืขืŸ ืึธืคึผืฆื™ืขืก "xpf-allow-from"ืื•ืŸ"xpf-rr-ืงืึธื“";
  • ื™ืžืคึผืจื•ื•ื•ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ EDNS ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืงืœื™ืขื ื˜ ืกื•ื‘ื ืขื˜ (ECS), ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื˜ืจืึทื ืกืžื™ืกื™ืข ืื™ืŸ ื“ื ืก ืคึฟืจืื’ืŸ ืฆื• ืึทืŸ ืึทื˜ืึธืจืึทื˜ื™ื™ื˜ื™ื•ื• ื“ื ืก ืกืขืจื•ื•ืขืจ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ืกื•ื‘ื ืขื˜ ืคื•ืŸ ื•ื•ืึธืก ื“ื™ ืขืจืฉื˜ ื‘ืขื˜ืŸ ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืฆื•ื–ืืžืขืŸ ื“ื™ ืงื™ื™ื˜ ืื™ื– ืคึผื•ื™ื–ืึทื ื“ (ื“ืึทื˜ืŸ ื•ื•ืขื’ืŸ ื“ืขืจ ืงืœื™ืขื ื˜ ืก ืžืงื•ืจ ืกื•ื‘ื ืขื˜ ืื™ื– ื ื™ื™ื˜ื™ืง ืคึฟืึทืจ ื“ื™ ืขืคืขืงื˜ื™ื•ื• ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืื™ื ื”ืึทืœื˜ ืขืงืกืคึผืจืขืก ื ืขื˜ื•ื•ืึธืจืงืก) . ื“ื™ ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’ ืžื•ืกื™ืฃ ืกืขื˜ื˜ื™ื ื’ืก ืคึฟืึทืจ ืกืขืœืขืงื˜ื™ื•ื• ืงืึธื ื˜ืจืึธืœ ืื™ื‘ืขืจ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ EDNS ืงืœื™ืขื ื˜ ืกื•ื‘ื ืขื˜: "ecs-add-forยป ืžื™ื˜ ืึท ืจืฉื™ืžื” ืคื•ืŸ ื ืขืฅ ืžืึทืกืงืก ืคึฟืึทืจ ื•ื•ืึธืก ื“ื™ IP ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ECS ืื™ืŸ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืจื™ืงื•ื•ืขืก. ืคึฟืึทืจ ืึทื“ืจืขืกืขืก ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ืคืึทืœืŸ ืื™ืŸ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ืžืึทืกืงืก, ื“ื™ ืึทืœื’ืขืžื™ื™ื ืข ืึทื“ืจืขืก ืกืคึผืขืกื™ืคื™ืขื“ ืื™ืŸ ื“ื™ ื“ื™ืจืขืงื˜ื™ื•ื• "ecs-scope-zero-address". ื“ื•ืจืš ื“ื™ ื“ื™ืจืขืงื˜ื™ื•ื• "ื ื•ืฆืŸ-ื™ื ืงืึทืžื™ื ื’-ืขื“ื ืก-ืกื•ื‘ื ืขื˜ยป ืื™ืจ ืงืขื ืขืŸ ื“ืขืคื™ื ื™ืจืŸ ืกื•ื‘ื ืขืฅ ืคึฟื•ืŸ ื•ื•ืึธืก ื™ื ืงืึทืžื™ื ื’ ืจื™ืงื•ื•ืขืก ืžื™ื˜ ืึธื ื’ืขืคื™ืœื˜ ECS ื•ื•ืึทืœื•ืขืก ื•ื•ืขื˜ ื ื™ืฉื˜ ื–ื™ื™ืŸ ืจื™ืคึผืœื™ื™ืกื˜;
  • ืคึฟืึทืจ ืกืขืจื•ื•ืขืจืก ืคึผืจืึทืกืขืกื™ื ื’ ืึท ื’ืจื•ื™ืก ื ื•ืžืขืจ ืคื•ืŸ ืจื™ืงื•ื•ืขืก ืคึผืขืจ ืกืขืงื•ื ื“ืข (ืžืขืจ ื•ื•ื™ 100 ื˜ื•ื™ื–ื ื˜), ื“ื™ ื“ื™ืจืขืงื˜ื™ื•ื• "ื“ื™ืกื˜ืจื™ื‘ื™ืึทื˜ืขืจ-ืคึฟืขื“ืขื", ื•ื•ืึธืก ื“ื™ื˜ืขืจืžืึทื ื– ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืคึฟืขื“ืขื ืคึฟืึทืจ ืจื™ืกื™ื•ื•ื™ื ื’ ื™ื ืงืึทืžื™ื ื’ ืจื™ืงื•ื•ืขืก ืื•ืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ื˜ื™ื ื’ ื–ื™ื™ ืฆื•ื•ื™ืฉืŸ ืึทืจื‘ืขื˜ืขืจ ืคึฟืขื“ืขื (ืžืึทื›ื˜ ื–ื™ื ืขืŸ ื‘ืœื•ื™ื– ื•ื•ืขืŸ ื ื™ืฆืŸ ื“ื™ "pdns-distributes-queries = ื™ืึธ").
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืฆื™ื‘ื•ืจ-ืกืึทืคื™ืงืก-ืจืฉื™ืžื”-ื˜ืขืงืข ืฆื• ื“ืขืคื™ื ื™ืจืŸ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื˜ืขืงืข ืžื™ื˜ ืจืฉื™ืžื” ืคื•ืŸ ืฆื™ื‘ื•ืจ ืกืึทืคื™ืงืก ื“ืึธื•ืžื™ื™ื ื– ืื™ืŸ ื•ื•ืึธืก ื™ื•ื–ืขืจื– ืงืขื ืขืŸ ืคืึทืจืฉืจื™ื™ึทื‘ืŸ ื–ื™ื™ืขืจ ืกื•ื‘ื“ืึธืžืึทื™ื ืก, ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ื™ ืจืฉื™ืžื” ื’ืขื‘ื•ื™ื˜ ืื™ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ.

ื“ื™ PowerDNS ืคึผืจื•ื™ืขืงื˜ ืื•ื™ืš ืึทื ืึทื•ื ืกื˜ ืึท ืžืึทืš ืฆื• ืึท ื–ืขืงืก-ื—ื•ื“ืฉ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืฆื™ืงืœ, ืžื™ื˜ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื”ื•ื™ืคึผื˜ ืžืขืœื“ื•ื ื’ ืคื•ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ 4.3 ื’ืขืจื™ื›ื˜ ืื™ืŸ ื™ืื ื•ืืจ 2020. ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืคึฟืึทืจ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืจื™ืœื™ืกื™ื– ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืื™ื‘ืขืจ ื“ื™ ื™ืึธืจ, ื ืึธืš ื•ื•ืึธืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคื™ืงืกื™ื– ื•ื•ืขื˜ ื–ื™ื™ืŸ ืจืขืœืขืึทืกืขื“ ืคึฟืึทืจ ื ืึธืš ื–ืขืงืก ื—ื“ืฉื™ื. ื“ืขืจ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ PowerDNS ืจืขืงื•ืจืกืึธืจ 4.2 ืฆื•ื•ื™ื™ึทื’ ื•ื•ืขื˜ ื“ื•ื™ืขืจืŸ ื‘ื™ื– ื™ืื ื•ืืจ 2021. ืขื ืœืขื›ืข ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืฆื™ืงืœ ื–ืขื ืขืŸ ื’ืขืžืื›ื˜ ืคึฟืึทืจ PowerDNS Authoritative Server, ื•ื•ืึธืก ืื™ื– ื’ืขืจื™ื›ื˜ ืฆื• ืžืขืœื“ื•ื ื’ 4.2 ืื™ืŸ ื“ืขื ืœืขื‘ืŸ ืฆื•ืงื•ื ืคึฟื˜.

ื”ื•ื™ืคึผื˜ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ PowerDNS ืจืขืงื•ืจืกืึธืจ:

  • ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ื–ืึทืžืœื•ื ื’ ืคื•ืŸ ื•ื•ื™ื™ึทื˜ ืกื˜ืึทื˜ื™ืกื˜ื™ืง;
  • ืจืขื’ืข ืจื™ืกื˜ืึทืจื˜;
  • ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืžืึธื˜ืึธืจ ืคึฟืึทืจ ืงืึทื ืขืงื˜ื™ื ื’ ื”ืึทื ื“ืœืขืจืก ืื™ืŸ ื“ื™ Lua ืฉืคึผืจืึทืš;
  • ื’ืึทื ืฅ DNSSEC ืฉื˜ื™ืฆืŸ ืื•ืŸ ื“ื ืกืงืกื ื•ืžืงืก;
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ RPZ (ืจืขืกืคึผืึธื ืกืข ืคึผืึธืœื™ื˜ื™ืง ื–ืึธื ืขืก) ืื•ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื“ืขืคื™ื ื™ืจืŸ ื‘ืœืึทืงืœื™ืกื˜;
  • ืึทื ื˜ื™-ืกืคึผืึธืึธืคื™ื ื’ ืžืขืงืึทื ื™ื–ืึทืžื–;
  • ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืจืขืงืึธืจื“ื™ืจืŸ ืจืขื–ื•ืœื˜ืื˜ืŸ ื•ื•ื™ BIND ื–ืึธื ืข ื˜ืขืงืขืก.
  • ืฆื• ืขื ืฉื•ืจ ื”ื•ื™ืš ืคืึธืจืฉื˜ืขืœื•ื ื’, ืžืึธื“ืขืจืŸ ืงืฉืจ ืžื•ืœื˜ื™ืคึผืœืขืงืกื™ื ื’ ืžืขืงืึทื ื™ื–ืึทืžื– ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ FreeBSD, Linux ืื•ืŸ Solaris (kqueue, epoll, /dev/poll), ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืึท ื”ื•ื™ืš-ืคืึธืจืฉื˜ืขืœื•ื ื’ ื“ื ืก ืคึผืึทืงืึทื˜ ืคึผืึทืจืกืขืจ ื•ื•ืึธืก ืื™ื– ื‘ื™ื›ื•ืœืช ืฆื• ืคึผืจืึทืกืขืกื™ื ื’ ื˜ืขื ืก ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ืคึผืึทืจืึทืœืขืœ ืจื™ืงื•ื•ืขืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’