This release improves the stability and resiliency of the RPZ implementation, prevents metrics gathering from slowing down the processing of DNS queries and fixes an issue related to the cleaning of EDNS Client Subnet entries from the cache.
The full changelog looks like this:
Improvements
- #6550, #6562: Add a subtree option to the API cache flush endpoint.
- #6566: Use a separate, non-blocking pipe to distribute queries.
- #6567: Move carbon/webserver/control/stats handling to a separate thread.
- #6583: Add _raw versions for QName / ComboAddresses to the FFI API.
- #6611, #6130: Update copyright years to 2018 (Matt Nordhoff).
- #6474, #6596, #6478: Fix a warning on botan >= 2.5.0.
Bug Fixes
- #6313: Count a lookup into an internal auth zone as a cache miss.
- #6467: Don’t increase the DNSSEC validations counters when running with process-no-validate.
- #6469: Respect the AXFR timeout while connecting to the RPZ server.
- #6418, #6179: Increase MTasker stacksize to avoid crash in exception unwinding (Chris Hofstaedtler).
- #6419, #6086: Use the SyncRes time in our unit tests when checking cache validity (Chris Hofstaedtler).
- #6514, #6630: Add -rdynamic to C{,XX}FLAGS when we build with LuaJIT.
- #6588, #6237: Delay the loading of RPZ zones until the parsing is done, fixing a race condition.
- #6595, #6542, #6516, #6358, #6517: Reorder includes to avoid boost L conflict.
The tarball is available on downloads.powerdns.com (signature) and packages for CentOS 6 and 7, Debian Jessie and Stretch, Ubuntu Artful, Bionic, Trusty and Xenial are available from repo.powerdns.com.
Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.