Ukukhishwa kweseva ye-DNS yokugcina isikhashana I-PowerDNS Recursor 4.7.0

Ukukhishwa kweseva ye-DNS yenqolobane ye-PowerDNS Recursor 4.7 kuyatholakala, enesibopho sokulungiswa kwamagama okuphindaphindayo. I-PowerDNS Recursor yakhelwe phezu kwesisekelo sekhodi esifanayo ne-PowerDNS Authoritative Server, kodwa amaseva e-DNS e-PowerDNS aphindaphindayo futhi anegunya athuthukiswa ngemijikelezo ehlukene yokuthuthukisa futhi akhululwa njengemikhiqizo ehlukene. Ikhodi yephrojekthi isatshalaliswa ngaphansi kwelayisensi ye-GPLv2.

Iseva ihlinzeka ngamathuluzi okuqoqwa kwezibalo ezikude, isekela ukuqalisa kabusha okusheshayo, inenjini eyakhelwe ngaphakathi yokuxhuma izibambi ngolimi lwesiLua, isekela ngokugcwele i-DNSSEC, i-DNS64, i-RPZ (Izindawo Zenqubomgomo Yezimpendulo), futhi ikuvumela ukuthi uxhume izinhlu ezivinjelwe. Kungenzeka ukurekhoda imiphumela yokulungiswa njengamafayela wendawo ye-BIND. Ukuqinisekisa ukusebenza okuphezulu, izindlela zesimanje zokuxhumanisa eziningi zisetshenziswa ku-FreeBSD, Linux kanye ne-Solaris (kqueue, epoll, /dev/poll), kanye nesihlaluli sephakethe se-DNS esisebenza kahle esikwazi ukucubungula amashumi ezinkulungwane zezicelo ezifanayo.

Enguqulweni entsha:

  • Kungenzeka ukwengeza amarekhodi engeziwe ezimpendulweni ezithunyelwe kuklayenti ukudlulisa ulwazi oluwusizo ngaphandle kwesidingo sokuthumela isicelo esihlukile (isibonelo, izimpendulo zesicelo serekhodi le-MX zingalungiselelwa ukunamathisela amarekhodi ahlobene A kanye ne-AAAA).
  • Izimfuneko ze-RFC 9156 zicatshangelwe ekusetshenzisweni kosekelo lwendlela yokunciphisa igama lombuzo (“QNAME minimisation”), okuvumela ukugcinwa kuyimfihlo okukhulayo ngokumisa ukuthumela igama eligcwele loqobo le-QNAME kuseva ekhuphukayo.
  • Ukuxazululwa kwamakheli e-IPv6 amaseva e-DNS angekho ohlwini lwamarekhodi e-GR (Glue Record) lapho umbhalisi edlulisela khona ulwazi olumayelana namaseva e-DNS asebenzisa isizinda ahlinzekwa ngawo.
  • Ukuqaliswa kokuhlolwa kokuqinisekiswa kwendlela eyodwa yosekelo lweseva ye-DNS yephrothokholi ye-DoT (DNS phezu kwe-TLS) kuyaphakanyiswa.
  • Kwengezwe ikhono lokubuyela emuva kurekhodi le-NS lomzali elisethiwe uma amaseva kusethi yerekhodi le-NS engasabeli.
  • Usekelo olungeziwe lokuhlola ukufaneleka kwamarekhodi e-ZONEMD RR (RFC 8976) atholwe kunqolobane.
  • Kwengezwe ikhono lokunamathisela izibambi ngolimi lwesiLua, okubizwa esigabeni sokuqedela ukulungiswa (isibonelo, kubabambi abanjalo ungashintsha impendulo ebuyiselwe kuklayenti).

Source: opennet.ru

Engeza amazwana