dnsdist 1.4.0

Nov 20, 2019

After five release candidates, we are thrilled to finally announce the release of dnsdist 1.4.0 !

This new major version has been used in production by several large operators since the first release candidate, including the new DNS over HTTPS feature, providing invaluable feedback.

This release has very few changes since the previous release candidate:

  • names blocked by a SMT dynamic block are now lowercased (8524) ;
  • we went back to selecting the cipher suites based on the server preference instead of the client by default (8526) ;
  • some typo, documentation and help messages have been fixed (8531, 8440, 8509).

For those new to the 1.4.0 train, the main changes between 1.3.3 and 1.4.0 are:

  • a new, much more scalable way of handling DNS over TCP and DNS over TLS (DoT) connections, with a lot of new metrics and options like OCSP stapling ;
  • support for DNS over HTTPS (DoH) ;
  • a new experimental feature, the ability to look into a Key-Value store like CDB or LMDB and to route a query based on the result of this lookup ;
  • new rules and actions to deal with unexpected EDNS version (Dmitry Alenichev) ;
  • a new QNameSetRule rule, along with the DNSNameSet object, to match exact qnames instead of doing suffix matching (Andrey Domas) ;
  • a new ContinueAction has been added as well, allowing to keep processing rules even after calling a normally terminal action, like PoolAction ;
  • we also added a few convenience functions to pseudonymize IP addresses, as several users reported that they needed it to be GDPR-compliant ;
  • the health check mechanism has been improved with the new checkInterval, checkTimeout and rise parameters, thanks notably to “1848” ;
  • and, finally, we also improved the existing LogAction to make it much more useful for debugging and accounting purposes.

Please see the upgrade guide before upgrading from 1.3.x to 1.4.0, as a few things have been cleaned up and might require updating your existing configuration.

We want to once again thank everyone that contributed to the testing of the previous release candidates!

Please see the dnsdist website for the more complete changelog and the current documentation.

Release tarballs are available on the downloads website.

Several packages are also available in our repository.

About the author

Remi Gacogne

Remi Gacogne

Senior Developer at PowerDNS

Categories

Related Articles

PowerDNS Authoritative Server 4.9.0

This is release 4.9.0 of the Authoritative Server. It brings a few new features, and a collection of small improvements and...

Peter van Dijk Mar 15, 2024

Improving DNSdist performance with AF_XDP

This is the second in a series of three blog posts we are publishing about recent innovative developments with respect to...

Neil Cook Mar 15, 2024

PowerDNS DNSdist 1.9.1

We released PowerDNS DNSdist 1.9.1 today. This version brings no functional changes, and only bumps the version of the...

Remi Gacogne Mar 14, 2024

PowerDNS Recursor: Extended DNS Errors Help You Troubleshooting

This is the seventh episode of a series of blog posts we are publishing, mostly around recent developments with respect to...

Otto Moerbeek Mar 12, 2024