Welcome to the PowerDNS Blog
DNSSEC validation for the Recursor
The PowerDNS Recursor has a proven track record — it has been serving recursive answers for millions of users for many years, with very few complaints. To preserve this robustness that people have come to rely on...
Recursor 3.5.2 released
Released June 7th, 2013 Downloads: Official download page native RHEL5/6 packages from Kees Monshouwer This is a stability and bugfix update to 3.5.1. It contains important fixes that improve operation for certai...
Contributing PowerDNS tests: unit tests
Each and every PowerDNS change is tested by our Jenkins continuous integration setup, as hosted on https://autotest.powerdns.com. The more tests we have, the more valuable this setup becomes, and in this post you...
Recursor 3.5.1 released
We’re happy to announce our first release from GitHub instead of SVN! This is a stability and bugfix update to 3.5. It contains important fixes that improve operation for certain domains. Changes since 3.5: We no...
Adding new DNS record types to PowerDNS software
Our friends from NLNetLabs recently described how to add new record types to NSD, which I think is a great idea. Especially if this enables the community to add their favorite record types for us! Here are the fu...
On binding datagram (UDP) sockets to the ANY addresses
This story goes back a long time. For around 10 years now, people have been requesting that PowerDNS learn how to automatically listen on all available IP addresses. And for slightly less than that time, we’ve be...
A few quick notes on making an application FULLY IPv6 compliant
Over the past decade, PowerDNS has become ever more IPv6 compliant, and I think that since a year or so, we fixed every last issue. So why did it take so long? Just creating an AF_INET6 socket and binding it shou...
Random points of contention
I’m working on some high performance code which needs to scale to many, many CPUs. Against better judgement, I decided to use threads again, but to steer clear from anything that needs locking. I’ve previously fo...
On SRP – some implementation notes and a critical review
Some time ago, Dan Kaminsky mentioned the Secure Remote Password protocol (SRP) on Twitter. As I find certificates to be cumbersome, I’m always interested in solutions to setup trusted communications without them...
Four million pings only – aka 1 dimensional DNS radar
Quick post as I have no time to work on this for now. Ages ago I read a book, I think by Arthur C. Clarke, where powerful atomic bombs were used to generate radar pulses so powerful, the return signal was used to...