-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
This is the release of unbound 1.2.1 It works with ldns-1.5.0, also just released. Get it at http://unbound.net/downloads/unbound-1.2.1.tar.gz SHA1 996aea210b24f8c4bd1aa7a9584bc5b70b989b1b SHA256 1f95ca2904dfb813bf52f15156a8c769b365deb92fa7b995344062dea966dc29 (or use unbound.nlnetlabs.nl if our mirror has not updated yet). This is mainly a bugfix release. The deadlock fix is serious, the features are really fixes for smoother operation. Also note another fix for libevent 1.3andolder - there was a call to a thread unsafe routine. Features * negative caching for failed queries. Queries that failed (because the entire domain is down) are cached for a very short time (seconds), this lowers the load generated by the failed queries. If the failure is local, like out of memory, it is not cached. * stop resolving AAAAs promiscuously when they are in the negative cache, together with the negative caching feature (just above) this dampens the spikiness of the requestlist size. * unbound-host -4 and -6 options. Stops annoying ipv6 errors when debugging with unbound-host -4 -d ... * honor QUIET=no on make commandline (or QUIET=yes ). Bug Fixes * Fixed server deadlock. Added cycle detection for NS-check, addr-check, root-prime and stub-prime queries in the iterator. * [bugzilla: 229 ] fixup configure checks for compilation with Solaris sun studio cc compiler, ./configure CC=/opt/SUNWspro/bin/cc * fixup warnings emitted by sun studio compiler. * the TTL comparison for the cache used different comparisons, causing many cache responses that used the iterator and validator state machines unnecessarily. Fixed. * Fixed occasional SERVFAIL response when EDNS traffic is dropped for a domain. Set retry from 4 to 5 so that EDNS drop retry is part of the first query resolve attempt, and cached error does not stop EDNS fallback. * removed debug prints in code that protects against bad referrals. * fix bug where unbound could crash using libevent 1.3 and older. * more quiet about ipv6 network failures, i.e. when ipv6 is not available (network unreachable). Debug still printed on high verbosity. * printout more detailed errors on ssl certificate loading failures. * builtin IANA allocated portlist updated (these ports are avoided). Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkmRNB4ACgkQkDLqNwOhpPjcpACgsCcjvWLoWsW8AySHrZJu5syH LvoAnAtb1ywedse66+m8zT15+XPDOBl5 =mkt7 -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
