We released PowerDNS DNSdist 1.9.2 today. This release fixes several issues:
- HTTP/1.1 was wrongly selected over HTTP/2 when a DNS over HTTPS client advertised both HTTP versions in ALPN and listed HTTP/1.1 first, and the nghttp2 provider was used
- The first connection to the DNSdist console done over IPv6 was rejected
- A failure of the first lazy health-check was not properly handled
- A crash might have occurred if an incoming DNS over HTTPS connection timed out right before the corresponding outgoing query to a backend did, and the nghttp2 provider was used
- DNS over HTTPS connections and queries counters were not working properly with the nghttp2 provider
- Incoming TCP connections from a client were not always closed right away after an error
- Outgoing TCP connections to a backend were not always closed right away after a timeout
- The Docker image was printing the DNSdist configuration to the terminal by default, including secrets, which might not have been expected
- It was not possible to return a "no server available" result from a custom Lua FFI load-balancing policy
- Several compilation warnings have been fixed
Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.
The release tarball and its signature are available on the downloads website, and packages for several distributions are available from our repository.