]> git.ipfire.org Git - thirdparty/pdns.git/blame - docs/changelog/4.2.rst
Merge pull request #7259 from aerique/feature/4.2.x-changelog
[thirdparty/pdns.git] / docs / changelog / 4.2.rst
CommitLineData
0a94459a 1Changelogs for 4.2.x
2====================
3
4.. changelog::
5 :version: 4.2.0
6 :released: *unreleased*
7
8 .. change::
9 :tags: Improvements, Internals
10 :pullreq: 7245
11
12 Use a cache-able soa record for the serial check caused by a notify.
13
14 .. change::
15 :tags: Improvements
16 :pullreq: 6894
17
18 Improved Lua records - Added all selector, and backupSelector fallbacks.
19
20 .. change::
21 :tags: Bug Fixes
22 :pullreq: 6823
23 :tickets: 6821
24
25 On incoming NOTIFY load our serial from backend to have it available during slave-check.
26
27 Also log ourserial to ease debugging.
28
29 .. change::
30 :tags: Improvements, API, DNSSEC
31 :pullreq: 5988
32
33 API: Add TSIG key manipulation endpoints.
34
35 .. change::
36 :tags: Improvements
37 :pullreq: 7026
38
39 Configure ``--enable-pdns-option`` ``--with-third-party-module``.
40
41 .. change::
42 :tags: Improvements
43 :pullreq: 6731
44 :tickets: 6693
45
46 Address some known LUA Records issues:
47
48 * Better check input lists,
49 * Report lua wildcards errors,
50 * Exposes ``DNSName::getRawLabels`` in lua env,
51 * Better document LUA functions and objects.
52
53 .. change::
54 :tags: Improvements, API
55 :pullreq: 7233
56
57 Make API changes do a rectify by default, add an option to disable.
58
59 .. change::
60 :tags: Bug Fixes, Improvements
61 :pullreq: 6838
62 :tickets: 1355, 1366
63
64 Remove ``autoserial`` from the Authoritative Server. Serial 0 was a little bit too special in PowerDNS.
65
66 .. change::
67 :tags: Bug Fixes
68 :pullreq: 7228
69
70 Handle ANY queries with Lua records.
71
72 .. change::
73 :tags: Improvements
74 :pullreq: 6869
75
76 Remove ``out-of-zone-additional-processing`` setting.
77
78 .. change::
79 :tags: Bug Fixes
80 :pullreq: 7217
81
82 geoip: properly delete libGeoIP return values.
83
84 .. change::
85 :tags: Bug Fixes
86 :pullreq: 7067
87
88 SOA-check: reject NXDOMAIN response and check label of RR against qname.
89
90 .. change::
91 :tags: Improvements, DNSSEC
92 :pullreq: 6958
93
94 Improve RSA key warnings.
95
96 .. change::
97 :tags: Bug Fixes
98 :pullreq: 7201
99
100 Fix ``carbon-instance`` / ``carbon-namespace`` inconsistencies.
101
102 .. change::
103 :tags: <nil>
104 :pullreq: 7196
105 :tickets: 7195
106
107 geoipbackend: Allow empty content for ENT record.
108
109 .. change::
110 :tags: Tools, DNSSEC
111 :pullreq: 7187
112
113 pdnsutil.1 & settings:
114
115 * Add Ed25519 and Ed448,
116 * Document ECC keysizes,
117 * Remove old algos.
118
119 .. change::
120 :tags: Bug Fixes, API
121 :pullreq: 6871
122
123 Check DNSNames that should be hostnames.
124
125 .. change::
126 :tags: <nil>
127 :pullreq: 6959
128 :tickets: 2362, 6951
129
130 Add namespace and instance variable to carbon key.
131
132 .. change::
133 :tags: Bug Fixes, Packages
134 :pullreq: 7134
135
136 Fix up the BIND config files on upgrade.
137
138 .. change::
139 :tags: Bug Fixes
140 :pullreq: 7024
141
142 geoipbackend: Handle read error for config file.
143
144 .. change::
145 :tags: Improvements
146 :pullreq: 7069
147
148 Use unique pointers in the OpenSSL signer.
149
150 .. change::
151 :tags: API, Removed Features
152 :pullreq: 7025
153
154 Remove ``api-logfile`` flag and grep API endpoint.
155
156 .. change::
157 :tags: Improvements
158 :pullreq: 6962
159
160 Store ``NetmaskTree`` nodes in a set for faster removal.
161
162 .. change::
163 :tags: New Features
164 :pullreq: 6969
165
166 Adds the glorious log-log histograms.
167
168 .. change::
169 :tags: Bug Fixes
170 :pullreq: 7017
171
172 Make sure we escape ``127`` in TXT records.
173
174 .. change::
175 :tags: Bug Fixes
176 :pullreq: 4598
177
178 Add support for NONE SOA-EDIT kind.
179
180 .. change::
181 :tags: Tools
182 :pullreq: 6997
183
184 Name threads in the programs.
185
186 .. change::
187 :tags: Improvements
188 :pullreq: 6727
189
190 ALIAS: Respond SERVFAIL on non-NOERRORs from resolver.
191
192 .. change::
193 :tags: Improvements
194 :pullreq: 6910
195
196 Add support for OpenSSL 1.1.1's ed25519 and ed448 for signing and verifying.
197
198 .. change::
199 :tags: Improvements
200 :pullreq: 6822
201
202 Add incremental ``slave-check`` backoff also for failed AXFR.
203
204 .. change::
205 :tags: Bug Fixes
206 :pullreq: 6923
207
208 Respond correctly to DS query at delegation in unsigned zone.
209
210 .. change::
211 :tags: Improvements
212 :pullreq: 6975
213
214 Enhance query-logging with timing for MySQL, PostgreSQL and SQLite.
215
216 .. change::
217 :tags: Improvements
218 :pullreq: 6811
219
220 Apply ALIAS scopemask after chasing.
221
222 .. change::
223 :tags: Improvements
224 :pullreq: 6948
225
226 Fix compilation with LibreSSL 2.7.0+.
227
228 .. change::
229 :tags: Bug Fixes
230 :pullreq: 6917
231
232 Release memory in case of error in the OpenSSL ECDSA constructor.
233
234 .. change::
235 :tags: Bug Fixes
236 :pullreq: 6913
237 :tickets: 6912
238
239 Actually truncate truncated responses.
240
241 .. change::
242 :tags: Improvements, Packages
243 :pullreq: 6921
244
245 Remove GOST and Botan support.
246
247 .. change::
248 :tags: Improvements, API
249 :pullreq: 6668
250
251 Add zone lookup by ``/zones?zone=example.org``.
252
253 .. change::
254 :tags: Bug Fixes
255 :pullreq: 6858
256
257 RFC2136 fixes.
258
259 .. change::
260 :tags: Improvements
261 :pullreq: 6825
262
263 Add option ``send-signed-notify`` to send NOTIFYs without TSIG signature.
264
265 .. change::
266 :tags: Removed Features, API
267 :pullreq: 6845
268
269 Drop ``api-readonly`` configuration setting.
270
271 .. change::
272 :tags: Bug Fixes
273 :pullreq: 6857
274
275 Remove SOA-check backoff on incoming NOTIFY and fix ``d_lock`` handling.
276
277 .. change::
278 :tags: Bug Fixes, Tools
279 :pullreq: 6859
280
281 Make ``edit-zone`` catch zoneparser exceptions as well.
282
283 .. change::
284 :tags: Improvements, Tools
285 :pullreq: 6843
286
287 ``check-all-zones``: find duplicate zones and SOAs.
288
289 .. change::
290 :tags: Bug Fixes
291 :pullreq: 6834
292
293 ``check-zone``: allow null MX, SRV.
294
295 .. change::
296 :tags: Bug Fixes
297 :pullreq: 6844
298
299 Workaround MariaDB pretending to be MySQL.
300
301 .. change::
302 :tags: Improvements
303 :pullreq: 6824
304
305 Add the serials when logging the final result of a slave check.
306
307 .. change::
308 :tags: Bug Fixes, API
309 :pullreq: 6780, 6816
310
311 Make sure that we use strict weak records ordering in the API.
312 (Doing this avoids concurrent records / comments iteration from running out of sync.)
313
314 .. change::
315 :tags: Bug Fixes
316 :pullreq: 6738
317
318 Reset the TSIG state between queries.
319
320 .. change::
321 :tags: Improvements, Tools
322 :pullreq: 6774
323
324 calidns: Accurate qps targets.
325
326 .. change::
327 :tags: <nil>
328 :pullreq: 6769
329
330 LuaWrapper: Disable maybe uninitialized warnings with boost optional.
331
332 .. change::
333 :tags: Bug Fixes
334 :pullreq: 6495
335
336 Only parse ``resolv.conf`` once - this avoids race conditions.
337
338 .. change::
339 :tags: Improvements
340 :pullreq: 6730
341
342 Implement a smarter dedup for filling packets in auth.
343
344 .. change::
345 :tags: Improvements, Tools
346 :pullreq: 6691
347
348 pdns_control notify: Handle slave w/o renotify properly.
349
350 .. change::
351 :tags: Improvements, Tools
352 :pullreq: 6653
353
354 pdnsutil: Occlusion and auth check improvements.
355
356 .. change::
357 :tags: Bug Fixes
358 :pullreq: 6655
359
360 Sign CDS/CDNSKEY RRsets with the KSK.
361
362 .. change::
363 :tags: Improvements
364 :pullreq: 6658
365
366 luawrapper: Report caught ``std::exception`` as ``lua_error``.
367
368 .. change::
369 :tags: Bug Fixes
370 :pullreq: 6686
371
372 Initialize some missed qtypes: WKS, SMIMEA.
373
374 .. change::
375 :tags: Bug Fixes
376 :pullreq: 6677
377
378 geoipbackend: Check ``GeoIP_id_by_addr_gl`` and ``GeoIP_id_by_addr_v6_gl`` return value.
379
380 .. change::
381 :tags: Bug Fixes
382 :pullreq: 6499
383
384 stubresolver: Improve locking.
385
386 .. change::
387 :tags: Improvements
388 :pullreq: 6633
389
390 Reject duplicate RRsets in patchZone.
391
392 .. change::
393 :tags: Bug Fixes, API
394 :pullreq: 6647
395
396 Remove ENTs when "replacing" new records.
397
398 .. change::
399 :tags: Bug Fixes
400 :pullreq: 6648
401
402 gmysql: Use future-proof statement for transaction isolation.
403
404 .. change::
405 :tags: Improvements, API
406 :pullreq: 6649
407
408 API export function output change to add IN to the output.
409
410 .. change::
411 :tags: Improvements, API
412 :pullreq: 6662
413 :tickets: 6652
414
415 Send correct response codes for the CryptoKey endpoints.
416
417 .. change::
418 :tags: Improvements
419 :pullreq: 6659
420
421 Ensure ALIAS answers over TCP have correct name.
422
423 .. change::
424 :tags: Bug Fixes, Tools
425 :pullreq: 6617
426
427 calidns: Don't issue socket buffer or SCHED_FIFO warnings in quiet mode.
428
429 .. change::
430 :tags: Bug Fixes, API
431 :pullreq: 6614
432
433 Restrict creation of OPT and TSIG rrsets.
434
435 .. change::
436 :tags: Improvements
437 :pullreq: 6561
438
439 Fix some minor issues for presigned (large) bind zones.
440
441 .. change::
442 :tags: Tools
443 :pullreq: 6582
444
445 dnsreplay: Add more checks against bogus PCAP.
446
447 .. change::
448 :tags: Bug Fixes, Improvements
449 :pullreq: 6585
450 :tickets: 6584
451
452 Geoip: Fix poisoning of cache when hit service's default network.
453
454 Also includes an optimization to make lookups faster.
455
456 .. change::
457 :tags: Improvements, Tools
458 :pullreq: 6594
459
460 pdnsutil: also load modules through the ``load-modules`` directive.
461
462 .. change::
463 :tags: Improvements, Tools
464 :pullreq: 6601
465
466 calidns: Add ``quiet``, ``minimum-success-rate`` options to use from a script.
467
468 .. change::
469 :tags: New Features, Tools
470 :pullreq: 6564
471
472 Add ``dnspcap2calidns`` to convert PCAP to the calidns format.
473
474 .. change::
475 :tags: Bug Fixes, Tools
476 :pullreq: 6580
477
478 dnsreplay: Bail out on a too small outgoing buffer.
479
480 .. change::
481 :tags: Bug Fixes, Tools
482 :pullreq: 6559
483
484 pdnsutil: Use new domain in ``b2bmigrate``.
485
486 .. change::
487 :tags: Bug Fixes, API
488 :pullreq: 6571
489
490 Increase serial after DNSSEC related updates.
491
492 .. change::
493 :tags: Improvements
494 :pullreq: 6558
495
496 bindbackend: Refuse launch suffixes.
497
498 .. change::
499 :tags: Improvements, Tools
500 :pullreq: 6526
501
502 calidns: Add an option to read ECS values from the query file, skip comments.
503
504 .. change::
505 :tags: Bug Fixes
506 :pullreq: 6531
507
508 Avoid interleaved access to B (via ``d_dk``). Before this patch,
509 the meta lookup would interfere with the already-started
510 ``B.lookup``. This caused failures with odbc/MSSQL.
511
512 .. change::
513 :tags: Improvements
514 :pullreq: 6530
515
516 Add missing overrides.
517
518 .. change::
519 :tags: Improvements, Tools
520 :pullreq: 6525
521
522 calidns: Add a ``maximum-qps`` option to stay at a given stable load.
523
524 .. change::
525 :tags: New Features
526 :pullreq: 6171
527
528 LUA Records (yes we know it is "Lua").
529
530 .. change::
531 :tags: Bug Fixes
532 :pullreq: 6481
533
534 Add return 0 for correct exit of ``set-kind`` and ``set-account``.
535
536 .. change::
537 :tags: Bug Fixes, Tools
538 :pullreq: 6487
539
540 Link ``dnspcap2protobuf`` against librt when needed.
541
542 .. change::
543 :tags: Bug Fixes
544 :pullreq: 6484
545
546 Recheck serial when AXFR is done.
547
548 .. change::
549 :tags: Improvements, Internals
550 :pullreq: 5274
551
552 dns_random: Implement new dns_random.
553
554 .. change::
555 :tags: New Features
556 :pullreq: 5821
557 :tickets: 5260
558
559 LDAP misc updates:
560
561 * ALIAS support,
562 * DNAME support.
563
564 .. change::
565 :tags: Improvements
566 :pullreq: 6427
567
568 Avoid an isane amount of new backend connections during an AXFR.
569
570 .. change::
571 :tags: Improvements, Internals
572 :pullreq: 6358
573
574 Remove ``theLog`` and ``theL`` and replace this with a global ``g_log``.
575
576 .. change::
577 :tags: Improvements, Tools
578 :pullreq: 6331
579
580 Add TCP support for ALIAS.
581
582 .. change::
583 :tags: Improvements
584 :pullreq: 6377
585
586 Add support for MB and MG RR types.
587
588 .. change::
589 :tags: Improvements
590 :pullreq: 6102
591
592 Add actual EDNS buffer size logging, not just our interpretation.
593
594 .. change::
595 :tags: Improvements, Internals
596 :pullreq: 6312
597
598 Lower 'packet too short' loglevel.
599
600 .. change::
601 :tags: Bug Fixes
602 :pullreq: 6396
603
604 Report unparseable data in stoul ``invalid_argument`` exception.
605
606 .. change::
607 :tags: New Features, Tools
608 :pullreq: 6374
609
610 Add quiet modifier to pdnsutil ``rectify-all-zones`` command.
611
612 .. change::
613 :tags: Bug Fixes
614 :pullreq: 6370
615
616 Fix handling of user defined AXFR filters return values.
617
618 .. change::
619 :tags: Bug Fixes
620 :pullreq: 6342
621 :tickets: 6263
622
623 Reload ``/etc/resolv.conf`` when modified.
624
625 .. change::
626 :tags: Bug Fixes, Tools
627 :pullreq: 6354
628
629 Rather than crash, sheepishly report no file/linenum in pdnsutil.
630
631 .. change::
632 :tags: Improvements, Tools
633 :pullreq: 6326
634
635 calidns: Add the ``--ecs`` parameter to add random ECS values to queries.
636
637 .. change::
638 :tags: Improvements
639 :pullreq: 6157
640
641 Lua2 backend: This is a rewrite of the lua backend. It uses AuthLua4 as basis and more strongly typed access using LuaContext.
642
643 .. change::
644 :tags: Improvements
645 :pullreq: 5361
646 :tickets: 3602
647
648 Make requests always return to sender, for usage in multimaster slave zones. Also - made sure that the master that is questioned for updates will be selected randomly, to prevent repeatidally asking a dead master for updates.
649
650 .. change::
651 :tags: Improvements, API
652 :pullreq: 6325
653
654 Return status ``409`` if domain already exists.
655
656 .. change::
657 :tags: Improvements
658 :pullreq: 6276
659
660 Reject updates if they would lead to CNAME+Other data.
661
662 .. change::
663 :tags: Improvements
664 :pullreq: 6243
665
666 Fix rectify (ordername) for non-DNSSEC zones.
667
668 .. change::
669 :tags: Improvements
670 :pullreq: 6278
671
672 pkcs11signers: Fix yubikey NEO to work.
673
674 .. change::
675 :tags: Bug Fixes
676 :pullreq: 6297
677
678 Make ``check-zone`` error on rows that have content but shouldn't.
679
680 .. change::
681 :tags: Improvements
682 :pullreq: 6100
683
684 Make ``outgoing-query-address`` and ``outgoing-query-address6``
685 behaviours equivalent.
686
687 .. change::
688 :tags: Improvements
689 :pullreq: 6128
690 :tickets: 5268
691
692 GeoIPbackend improvements:
693
694 * Adds MMDB support. Now geoip backend can be compiled without geoip support,
695 * Adds location support,
696 * Fixes SERVFAIL if expansion is empty.
697
698 .. change::
699 :tags: Improvements
700 :pullreq: 6295
701
702 Fix syntax error for ``replace-rrset``. (@lordievader)
703
704 .. change::
705 :tags: Improvements, API
706 :pullreq: 2603
707
708 Expose ``ResponseStats`` via REST API.
709
710 .. change::
711 :tags: Improvements, Internals
712 :pullreq: 6230
713
714 Remove all traces of selectmplexer, fix up pollmplexer.
715
716 .. change::
717 :tags: Bug Fixes, Tools
718 :pullreq: 6172
719
720 IXFR: correct behavior of dealing with DNS Name with multiple records; speed up IXFR transaction.
721
722 .. change::
723 :tags: Bug Fixes
724 :pullreq: 6152
725
726 bindbackend: handle ``std::exception`` during startup zone-parsing.
727
728 .. change::
729 :tags: Improvements, Tools
730 :pullreq: 6166
731
732 Add an ``--initial-port`` option to dnsreplay.
733
734 .. change::
735 :tags: Improvements
736 :pullreq: 6220
737 :tickets: 5079, 5594, 5654
738
739 Add XPF support.
740
741 .. change::
742 :tags: Improvements, Internals
743 :pullreq: 5068
744 :tickets: 1010
745
746 Change from ``time_t`` to ``uint32_t`` for serial in ``calculateSOASerial``.
747
748 .. change::
749 :tags: Improvements
750 :pullreq: 5960
751
752 Check more thoroughly the source of UDP answers.
753
754 .. change::
755 :tags: Improvements
756 :pullreq: 6162
757
758 Slave cleanups. (@zeha)
759
760 .. change::
761 :tags: Bug Fixes
762 :pullreq: 6019
763 :tickets: 5915
764
765 gmysql-backend: set unsigned attribute on ``notified_serial`` column.
766
767 .. change::
768 :tags: Improvements
769 :pullreq: 6158
770 :tickets: 2611
771
772 pdns: Improve record parsing
773
774 .. change::
775 :tags: Bug Fixes
776 :pullreq: 6018
777
778 Escaping unusual DNS label octets in DNSName is off by one.
779
780 .. change::
781 :tags: Improvements, Internals
782 :pullreq: 5979
783
784 Use ``toLogString()`` for logging and throwing.
785
786 .. change::
787 :tags: Improvements, Internals
788 :pullreq: 6156
789
790 Remove obsolete EDNS PING code. (@zeha)
791
792 .. change::
793 :tags: Bug Fixes
794 :pullreq: 6155
795
796 Update EDNS Option code list.
797
798 .. change::
799 :tags: Improvements
800 :pullreq: 6146
801
802 Changes to compile and run on NetBSD.
803
804 .. change::
805 :tags: Bug Fixes
806 :pullreq: 4547
807
808 Remove ``serializeSOAData``, refactor ``calculate``/``edit``/``increaseSOA``.
809
810 .. change::
811 :tags: Improvements, Tools
812 :pullreq: 6063
813
814 Add colour to diff output of pdnsutil.
815
816 .. change::
817 :tags: <nil>
818 :pullreq: 6124
819 :tickets: 6101, 6120
820
821 Improve tests and two bugfixes:
822
823 * Fix xfrIP to reject invalid ips,
824 * Accept seconds since epoch in RRSIG timestamps too.
825
826 (@stbuehler)
827
828 .. change::
829 :tags: Improvements
830 :pullreq: 6139
831
832 Forbid creating algo 5/8/10 keys with out-of-spec sizes.
833
834 .. change::
835 :tags: Bug Fixes
836 :pullreq: 6132
837
838 Add methods missing from AuthLua4 when Lua support is disabled.
839
840 .. change::
841 :tags: Bug Fixes
842 :pullreq: 6129
843
844 Init openssl and libsodium before chrooting in pdnsutil.
845
846 .. change::
847 :tags: Bug Fixes, LDAP
848 :pullreq: 6122
849
850 Fix listing zones incl. AXFR.
851
852 .. change::
853 :tags: Bug Fixes
854 :pullreq: 6107
855
856 Fix uninitialized index in Lua's DNSPacket::getRRS() binding.
857
858 .. change::
859 :tags: Bug Fixes
860 :pullreq: 6103
861 :tickets: 6089
862
863 Fix out of bounds exception in CAA processing.
864
865 .. change::
866 :tags: Improvements, API
867 :pullreq: 6076
868
869 Return ``404`` for non-existing zones.
870
871 .. change::
872 :tags: Improvements
873 :pullreq: 5862
874 :tickets: 5854
875
876 Add Draft of Swagger spec for Authoritative Server HTTP API.
877
878 .. change::
879 :tags: Bug Fixes
880 :pullreq: 6029
881 :tickets: 6028
882
883 Forbid label compression in ALIAS wire format.