We are happy to announce the first release candidate of what will become dnsdist 1.7.0, with only one fix and one improvement since the second beta.
We fixed a crash introduced in 1.7.0-alpha1 that could occur when a DoH query was forwarded to a backend over TCP, DoT or DoH and the response was dropped by a rule.
We also improved the health-checks queries done over DoT so that we could use any cached TLS ticket when connecting to the server, but also save new tickets so that they can be used for later connections. That reduces the CPU load and improves response time on devices dealing with a low number of queries per second.
With the future 1.7.0 final release, the 1.4.x releases will be EOL and the 1.5.x and 1.6.x releases will go into critical security fixes only mode.