Welcome to the PowerDNS Blog

Peter van Dijk on Oct 08, 2018

The root KSK rollover is currently planned for 1600 UTC on the 11th of October 2018 – a few days from now. If you are using PowerDNS Recursor for DNSSEC validation, please keep reading! During the KSK rollover, t...

Bert Hubert on Sep 10, 2018

With some care, it turns out to be possible to spoof fake DNS responses using fragmented datagrams. While preparing a presentation for XS4ALL back in 2009, I found out how this could be done, but I never got roun...

Pieter Lexis on Aug 31, 2018

We’ve just released PowerDNS Recursor version 4.1.4, this is a maintenance release with no major changes. One new setting was added, this is the max-udp-queries-per-round, which controls the maximum amount of mes...

Remi Gacogne on May 22, 2018

This release improves the stability and resiliency of the RPZ implementation, prevents metrics gathering from slowing down the processing of DNS queries and fixes an issue related to the cleaning of EDNS Client S...

Erik Winkels on Mar 29, 2018

This release improves the stability and resiliency of the RPZ implementation and fixes several issues related to EDNS Client Subnet. The full changelog looks like this: New Features #6344: Add FFI version of gett...

Peter van Dijk on Mar 22, 2018

In a coordinated effort between PowerDNS, ISC, CZ.NIC and NLnetlabs, starting Feb 1 2019, workarounds for severely broken EDNS setups will be removed from our collective body of software. For the PowerDNS Recurso...

Erik Winkels on Jan 22, 2018

This is the second release in the 4.1 train with a fix for the following DNSSEC security advisory: PowerDNS Security Advisory 2018-01: Correctly handle ancestor delegation NSEC{,3} for children (CVE-2018-1000003)...

Erik Winkels on Dec 11, 2017

Today we announce the release of the PowerDNS Recursor 4.0.8 which contains a fix for the following security advisory: PowerDNS Security Advisory 2017-08: Crafted CNAME answer can cause a denial of service (CVE-2...

Erik Winkels on Dec 04, 2017

This is a major release containing significant speedups (both in throughput and latency), enhanced capabilities and a highly conformant and robust DNSSEC validation implementation that is ready for heavy producti...

Peter van Dijk on Nov 27, 2017

Today we announce the release of both the PowerDNS Authoritative Server 4.0.5 and Recursor 4.0.7 which contain a lot of backports from the 4.1.x branch. These releases also drop support for Botan 1.10 in favor of...