Hi everybody, We are pleased to announce the availability the PowerDNS Recursor 4.0.0 Beta 1. This release has two important improvements in the DNSSEC implementation: a better fallback to non-DNSSEC when dealing with old and non-compliant authoritative servers and a new default DNSSEC mode where DNSSEC is supported but no validation will take place.
With this release, we believe the DNSSEC support can be marked as "functional, but experimental" and it is suitable for inclusion in acceptance and production environments. There are some other small bug fixes as well, here's the full changelog (changelog with clickable links is available[1]): Improvements - #3866 Increase max FDs in systemd unit file - #3905 Add a dnssec=process-no-validate option and make it default Bug fixes - #3875 Disable DNSSEC for domain where the auth responds with FORMERR or NOTIMP - #3881 Fix the noEdnsOutQueries counter - #3892 support clock_gettime for platforms that require -lrt As always, the PowerDNS Recursor can be downloaded from our downloads site[2], where you can get the tarball[3](sig[4]) and packages for several platforms are available from the repositories[5]. Best regards and happy testing, Pieter and the PowerDNS team 1 - https://doc.powerdns.com/md/changelog/#powerdns-recursor-400-beta1 2 - https://downloads.powerdns.com/releases 3 - https://downloads.powerdns.com/releases/powerdns-recursor-4.0.0-beta1.tar.bz2 4 - https://downloads.powerdns.com/releases/powerdns-recursor-4.0.0-beta1.tar.bz2.sig 5 - https://repo.powerdns.com/ -- Pieter Lexis PowerDNS.COM BV -- https://www.powerdns.com
pgpEBcKgNFZ4M.pgp
Description: OpenPGP digital signature
_______________________________________________ Pdns-dev mailing list Pdns-dev@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-dev