Skip to content

Welcome to the PowerDNS Blog

PowerDNS Security Status Polling

PowerDNS Security Status Polling

PowerDNS software sadly sometimes has critical security bugs. Even though we send out notifications of these via all channels available, our recent security releases have taught us that not everybody actually fin...

Security Update: PowerDNS Recursor 3.6.1

Security Update: PowerDNS Recursor 3.6.1

Hi everybody, We regret that we have to announce a PowerDNS Recursor security release: Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely CVE: CVE-2014-3614 Affected: All deployments...

Recursor 3.6.0 released

Recursor 3.6.0 released

Note Downloads: Official download page native RHEL5/6 packages from Kees Monshouwer This is a performance, feature and bugfix update to 3.5/3.5.3. It contains important fixes for slightly broken domain names, whi...

Recursor 3.6.0 Release Candidate 1

Recursor 3.6.0 Release Candidate 1

RC1 released May 30th, 2014 Downloads: pdns-recursor-3.6.0-rc1.tar.bz2 semistatic packages native RHEL5/6 packages from Kees Monshouwer This is a performance, feature and bugfix update to 3.5/3.5.3. It contains i...

A surprising discovery on converting IPv6 addresses: we no longer prefer getaddrinfo()

A surprising discovery on converting IPv6 addresses: we no longer prefer ge...

Yesterday, we were contacted by PowerDNS user James Baer who noted strange crashes in PowerDNS (on Linux) upon adding thousands and thousands of IP addresses to his system. Notably, PowerDNS did not even use any ...

Further DoS guidance, packages and patches available

Further DoS guidance, packages and patches available

Hi everybody, Sadly, further DoS attacks are plaguing the world of DNS, which is bad for the targets of those DoS attacks, but also for us DNS operators that help originate them. This post has guidance on how to ...

Related to recent DoS attacks: Recursor configuration file guidance

Related to recent DoS attacks: Recursor configuration file guidance

Hi everybody, Over the past week we’ve been contacted by a few users reporting their PowerDNS Recursor became unresponsive under a moderate denial of service attack, one which PowerDNS should be expected to weath...

On Ragel and char types

On Ragel and char types

In which I spend a lot of time proving a platform difference is not actually a platform difference, and eventually end up proven wrong. PowerDNS make check/testrunner output on Debian 7.0/s390x: test-dnsrecords_c...

Recursor 3.5.3 released

Recursor 3.5.3 released

Downloads: Official download page native RHEL5/6 packages from Kees Monshouwer This is a bugfix and performance update to 3.5.2. It brings serious performance improvements for dual stack users. Changes since 3.5....

DNSSEC validation for the Recursor

DNSSEC validation for the Recursor

The PowerDNS Recursor has a proven track record — it has been serving recursive answers for millions of users for many years, with very few complaints. To preserve this robustness that people have come to rely on...