NSD 4.1.22rc1 pre-release
"W.C.A. Wijngaards" <[email protected]>
| Newsgroups | gmane.network.dns.nsd.general |
|---|---|
| Message-ID | <[email protected]> |
Hi, NSD 4.1.22rc1 pre-release is available: https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.22.tar.gz sha256 1f9230316e2e3d45c7fc2578dcbda3cc0ef28d9352c284446d4b4b1f4417408a pgp https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.22.tar.gz.asc This release fixes a bug where zone transfers would not succeed, because of an error in the selective NSEC3 allocation (introduced in 4.1.18). The refuse ANY query feature now sends truncated answers over UDP and allows TCP queries. This is the same size response on UDP as the refusal but allows the query to succeed over TCP for genuine queriers that fallback to that transport mechanism. The release contains a speed up for TCP processing that should NSD better at handling large numbers of incoming TCP connections. 4.1.22 ================ FEATURES: - refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal. - Use accept4 to speed up answer of TCP queries, on Linux and FreeBSD. BUG FIXES: - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. - Fix to use same condition for nsec3 hash allocation and free. Best regards, Wouter _______________________________________________ nsd-users mailing list [email protected] https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAlsVGhEACgkQn28cLX4E X41TrhAArxubN2dN49GMMUJO1NDsxbGz3z2ekMK5xs6StPIz6X4KCtCHv2B3dRVU Lw+gNb7n2UF1QH/fYNnS9Mr3NJ3Dq49jHTZdBtYobfCltmchNs4BQ7BwxoBSafyx PhBeQyc943UWPpJwPFs+Gl26b4BNOy+KcM0YxsWh7BFVHLmnewYwgheOf2J/AHqi JdFigfm2SWaGP7rWsR+n4ZDDCOMwnn0pRpf0GZHEbbNJr9iAFXbveIwy0GLGpAFD czuLXan825n6khZ9gwmlAqCTaJgx9I2X16itQQz3SCngV18PYlvc3J2takFki/eh W2NybwPey/ymuF5+qi5hbbNZKfOH8m3d/bKb/p3bKGGG6mRD1FGs6UyTMkkbhCBF 5PsqVt9eA/taJmkaKLqqlN3a9vpryzJV0rMxhVUNG5yBKAexbSdX5C0AFLapSj5L cWvULRXE+KESzAhQZzqdoe51s4suvfffnH7/qJErIwFSEx7IyEHjRDM5mtSTauvV don9tiQxb3pKHvz6kZ29dKsdrz1efEiIoNpI65FiIktJQARFeFIuNdiykRZNRHyG It06ik2TW15dJjzjjockFnpCa366I0XOaDixQe1V6Akg3rR08uHKYvDksSmetEL7 /zmeXHHJ8j7xLOhjTtHEdhm62pUNvmgqlxSZsDG4m1WMgEW0KNQ= =kMGv -----END PGP SIGNATURE-----