docs/changelog/4.2.rst

   1 Changelogs for 4.2.x
   2 ====================
   3
   4 .. changelog::
   5   :version: 4.2.2
   6   :released: 9th of April 2020
   7
   8
   9   .. change::
  10     :tags: Bug Fixes
  11     :pullreq: 9010
  12
  13     fix records ending up in wrong packet section (Kees Monshouwer)
  14
  15   .. change::
  16     :tags: Improvements
  17     :pullreq: 9003, 8736
  18
  19     cache: strictly enforce maximum size, and improve cleanup routine
  20
  21   .. change::
  22     :tags: Bug Fixes
  23     :pullreq: 9001
  24
  25     avoid IXFR-in corruption when deltas come in close together (please see the :ref:`ixfr-in-corruption-4.2.2` upgrade notes)
  26
  27   .. change::
  28     :tags: New Features
  29     :pullreq: 8786
  30
  31     api: add includerings option to statistics endpoint
  32
  33   .. change::
  34     :tags: Bug Fixes
  35     :pullreq: 8612
  36
  37     fix out-of-bound access for zero length "serialized" string when using lmdbbackend. (Kees Monshouwer)
  38
  39   .. change::
  40     :tags: Bug Fixes
  41     :pullreq: 8602
  42
  43     bind backend: pthread_mutex_t should be inited and destroyed and not be copied
  44
  45 .. changelog::
  46   :version: 4.2.1
  47   :released: 2nd of December 2019
  48
  49   This release fixes several bugs and makes a few features more robust or intuitive. It also contains a few performance improvements for API users.
  50
  51   .. change::
  52     :tags: Bug Fixes
  53     :pullreq: 8589
  54     :tickets: 8572
  55
  56     LUA view: do not crash on empty IP list
  57
  58   .. change::
  59     :tags: Bug Fixes
  60     :pullreq: 8576
  61
  62     API: Accept headers without spaces
  63
  64   .. change::
  65     :tags: Bug Fixes
  66     :pullreq: 8570
  67     :tickets: 8299
  68
  69     Avoid database state-related SERVFAILs after a LUA error
  70
  71   .. change::
  72     :tags: Bug Fixes, Improvements, LMDB
  73     :pullreq: 8568
  74     :tickets: 8134
  75
  76     Just before 4.2.0, some SQL-related fixes broke edit-zone and other features with the LMDB backend. This has been fixed now. (backport by Kees Monshouwer)
  77
  78   .. change::
  79     :tags: Performance, Improvements
  80     :pullreq: 8457
  81
  82     API: reduce number of database connections (Kees Monshouwer)
  83
  84   .. change::
  85     :tags: Improvements
  86     :pullreq: 8546
  87
  88     Register a few known RR types and remove an unknown one
  89
  90   .. change::
  91     :tags: New Features, Improvements
  92     :pullreq: 8549
  93
  94     Add SLAVE-RENOTIFY zone metadata support (Matti Hiljanen)
  95
  96   .. change::
  97     :tags: Bug Fixes
  98     :pullreq: 8507
  99     :tickets: 8217
 100
 101     rfc2136, pdnsutil: somewhat improve duplicate record handling
 102
 103   .. change::
 104     :tags: Improvements
 105     :pullreq: 8548
 106
 107     bindbackend: use metadata for also-notifies as well (Matti Hiljanen)
 108
 109   .. change::
 110     :tags: Improvements
 111     :pullreq: 8508
 112     :tickets: 8218
 113
 114     pdnsutil increase-serial: under SOA-EDIT=INCEPTION-EPOCH, bump as if it is EPOCH
 115
 116   .. change::
 117     :tags: New Features, Improvements
 118     :pullreq: 8547
 119
 120     Add configurable timeout for inbound AXFR (Matti Hiljanen)
 121
 122   .. change::
 123     :tags: Performance, Improvements
 124     :pullreq: 8541
 125
 126     API: optionally do not return dnssec info in domain list (Chris Hofstaedtler)
 127
 128   .. change::
 129     :tags: Improvements
 130     :pullreq: 8454
 131
 132     Basic validation of $GENERATE parameters
 133
 134   .. change::
 135     :tags: New Features, Improvements
 136     :pullreq: 8428
 137
 138     Add CentOS 8 as builder target
 139
 140   .. change::
 141     :tags: New Features, Improvements
 142     :pullreq: 8341
 143
 144     gmysql backend, add an option to send the SSL capability flag
 145
 146 .. changelog::
 147   :version: 4.2.0
 148   :released: 30th of August 2019
 149
 150   Compared to the last release candidate, one more bug has been fixed.
 151
 152   The LMDB backend is incomplete in this version. Slaving zones works, loading zones with pdnsutil works, but more fine grained edits (using edit-zone, or the REST API) fail. We hope to fix this soon in a 4.2.x release.
 153
 154   For an overview of features new since 4.1.x, please see `the 4.2.0 announcement blog post <http://blog.powerdns.com/2019/08/29/powerdns-authoritative-server-4-2-0/>`__.
 155
 156   .. change::
 157     :tags: Bug Fixes
 158     :pullreq: 8229
 159
 160     bind getAllDomains: ignore per-zone exceptions
 161
 162 .. changelog::
 163   :version: 4.2.0-rc3
 164   :released: 29th of July 2019
 165
 166   Thanks to an overwhelming amount of testing by our fabulous user community, this release candidate contains a ton of bug fixes (and a few improvements) compared to the previous one. We hope this has shaken out all of the important bugs, so that we can release 4.2.0 soon!
 167
 168   This release, sadly, cripples the LMDB backend somewhat, due to `transaction-related fixes for the SQL backends <https://github.com/PowerDNS/pdns/pull/7891>`__. We hope to fix `this issue <https://github.com/PowerDNS/pdns/issues/8134>`__ before 4.2.0, or otherwise, early in 4.2.x.
 169
 170   .. change::
 171     :tags: Bug Fixes
 172     :pullreq: 8168
 173
 174     packethandler: Compare TSIG key name using DNSName
 175
 176   .. change::
 177     :tags: Improvements
 178     :pullreq: 8172, 8173
 179
 180     boost.m4 improvements
 181
 182   .. change::
 183     :tags: Bug Fixes
 184     :pullreq: 8169
 185
 186     Make sure we always compile with BOOST_CB_ENABLE_DEBUG set to 0
 187
 188   .. change::
 189     :tags: Bug Fixes
 190     :pullreq: 8058
 191
 192     Fix SERVFAIL when backend returns empty DNSName
 193
 194   .. change::
 195     :tags: Improvements
 196     :pullreq: 8126
 197
 198     add metric for open TCP connections
 199
 200   .. change::
 201     :tags: Bug Fixes
 202     :pullreq: 8149
 203
 204     stop using select() in places where FDs can be >1023
 205
 206   .. change::
 207     :tags: Bug Fixes
 208     :pullreq: 8166
 209
 210     pdnsutil increase-serial: set right ordername
 211
 212   .. change::
 213     :tags: Bug Fixes
 214     :pullreq: 8097
 215
 216     use BIGINT for notified_serial in pg schema (Klaus Darilion)
 217
 218   .. change::
 219     :tags: Improvements, Robustness, Performance
 220     :pullreq: 8092
 221
 222     Various robustness and performance improvements around domain IDs (Kees Monshouwer)
 223
 224   .. change::
 225     :tags: Bug Fixes
 226     :pullreq: 8056
 227
 228     Fix the accounting of servfail-queries in the distributor
 229
 230   .. change::
 231     :tags: Improvements, Build
 232     :pullreq: 8064
 233
 234     remove unused import to enable compile on illumos (Thomas Mieslinger)
 235
 236   .. change::
 237     :tags: Improvements, Performance
 238     :pullreq: 8051
 239
 240     ixfrdist: limit XFR chunk size to 16k
 241
 242   .. change::
 243     :tags: Bug Fixes
 244     :pullreq: 8028
 245
 246     limit compression pointers to 14 bits
 247
 248   .. change::
 249     :tags: Bug Fixes
 250     :pullreq: 8037
 251
 252     catch name & IP parse errors during outgoing notify preparations
 253
 254   .. change::
 255     :tags: Improvements
 256     :pullreq: 7998
 257
 258     Fix a memory leak when sqlite3_exec() fails
 259
 260   .. change::
 261     :tags: Improvements, Build
 262     :pullreq: 8019, 7980
 263
 264     don't enable the tbhandler when libc only pretends to be glibc (James Taylor)
 265
 266   .. change::
 267     :tags: Improvements
 268     :pullreq: 8006
 269
 270     Fix a leak on 'Backend reported permanent error which prevented lookup' error
 271
 272   .. change::
 273     :tags: Improvements
 274     :pullreq: 7996
 275
 276     Clear CMSG_SPACE(sizeof(data)) in cmsghdr to appease valgrind
 277
 278   .. change::
 279     :tags: New Features
 280     :pullreq: 7550
 281
 282     web: make max request/response body size configurable
 283
 284   .. change::
 285     :tags: Improvements
 286     :pullreq: 7918
 287
 288     deprecate SOA autocomplete in pdnsutil check-zone (Kees Monshouwer)
 289
 290   .. change::
 291     :tags: Improvements, Packaging
 292     :pullreq: 7889
 293
 294     move /var/lib/pdns to pdns-server debian package
 295
 296   .. change::
 297     :tags: Improvements
 298     :pullreq: 7890
 299
 300     Show newer features in configure output and --version
 301
 302   .. change::
 303     :tags: Improvements, Performance
 304     :pullreq: 7910
 305
 306     completely disable the packet when cache-ttl=0 (Kees Monshouwer)
 307
 308   .. change::
 309     :tags: Improvements
 310     :pullreq: 7943
 311
 312     Improve error when notification comes in for non-slave zone
 313
 314   .. change::
 315     :tags: Improvements
 316     :pullreq: 7962
 317
 318     web: add edited_serial to Zone object
 319
 320   .. change::
 321     :tags: Improvements, Build
 322     :pullreq: 7871
 323
 324     Adapt calidns for openbsd and other systems without rcvmmsg(2)
 325
 326   .. change::
 327     :tags: Improvements, Performance
 328     :pullreq: 7699
 329
 330     DNSName, speed up toString() conversion
 331
 332 .. changelog::
 333   :version: 4.2.0-rc2
 334   :released: 14th of June 2019
 335
 336   .. change::
 337     :tags: Improvements, LMDB
 338     :pullreq: 7807
 339
 340     Make explicit lmdbbackend synchronous option
 341
 342   .. change::
 343     :tags: Improvements, LMDB
 344     :pullreq: 7700
 345
 346     Reduce mmap size for lmdb on 32 bits plus restrict number of shards
 347
 348   .. change::
 349     :tags: Bug Fixes, LMDB
 350     :pullreq: 7784, 7697, 7643
 351
 352     LMDB improvements:
 353
 354     * lmdbbackend: auth was unset in get() (always true) (Kees Monshouwer)
 355     * LMDB defaulted to port 0 for master addresses unless explicitly set
 356     * fix ``getAllDomains()`` (Kees Monshouwer)
 357
 358   .. change::
 359     :tags: Bug fixes, Backends
 360     :pullreq: 7891
 361
 362     auth API, pdnsutil: improve backend transaction correctness
 363
 364   .. change::
 365     :tags: Robustness, Backends
 366     :pullreq: 7881
 367
 368     detect SOA cache pollution caused by broken backends (Kees Monshouwer)
 369
 370   .. change::
 371     :tags: Improvements, Backends
 372     :pullreq: 7852
 373
 374     sqlite3: make journal mode configurable; default to WAL
 375
 376   .. change::
 377     :tags: Bug Fixes, Backends
 378     :pullreq: 7854
 379
 380     auth gsql ``getAllDomains``: ignore stou errors
 381
 382   .. change::
 383     :tags: Performance, Backends
 384     :pullreq: 7460
 385
 386     speedup ``getUpdatedMasters()`` for the gsql backends (Kees Monshouwer)
 387
 388   .. change::
 389     :tags: Bug Fixes, Backends
 390     :pullreq: 7831, 7787
 391
 392     Rectify/ENT fixes:
 393
 394     * Allow updates to override existing ENT records
 395     * Fix ENTs removal when "replacing" new records via the API
 396
 397   .. change::
 398     :tags: Bug Fixes, Backends
 399     :pullreq: 7363
 400
 401     Cleanup SOA editing (Kees Monshouwer)
 402
 403   .. change::
 404     :tags: Backends
 405     :pullreq: 7753
 406
 407     pdns_control reopens geoip databases on reload (jpmens)
 408
 409   .. change::
 410     :tags: Backends
 411     :pullreq: 7696
 412
 413     b2b-migrate did not open a transaction, breaking it for lmdb
 414
 415   .. change::
 416     :tags: Backends
 417     :pullreq: 7706
 418
 419     No longer filter DNSSEC metadata when DNSSEC is enabled in gsql
 420
 421   .. change::
 422     :tags: Backends
 423     :pullreq: 7580
 424
 425     Rectify for ent records in narrow zones was slightly wrong. (Kees Monshouwer)
 426
 427   .. change::
 428     :tags: Backends
 429     :pullreq: 7529
 430
 431     Clear caches (meta-data, keys) on domain deletion
 432
 433   .. change::
 434     :tags: Performance, LUA
 435     :pullreq: 7869, 7897
 436
 437     optionally reuse Lua state
 438
 439   .. change::
 440     :tags: Improvements, Portability
 441     :pullreq: 7862, 7861, 7818, 7668
 442
 443     Portability/building improvements:
 444
 445     * Update boost.m4 to the latest version
 446     * Check if ``-latomic`` is needed instead of hardcoding (neheb)
 447     * Use ``net-snmp-config --netsnmp-agent-libs`` instead of ``--agent-libs``
 448     * bump boost requirement to 1.42 unconditionally
 449
 450   .. change::
 451     :tags: Improvements, Robustness
 452     :pullreq: 7864, 7865, 7708
 453
 454     Robustness improvements:
 455
 456     * Fix warnings reported by Coverity
 457     * Initialize cURL before starting any thread
 458     * Don't do unaligned memory access
 459
 460   .. change::
 461     :tags: Improvements, Compliance
 462     :pullreq: 7873
 463
 464     Always truncate when the additional records do not fit in a response (Kees Monshouwer)
 465
 466   .. change::
 467     :tags: Improvements, Compliance
 468     :pullreq: 7859
 469
 470     Remove ``disable-tcp`` option
 471
 472   .. change::
 473     :tags: Improvements, Compliance
 474     :pullreq: 7615
 475
 476     RKEY is missing algorithm field (DNS-Leo)
 477
 478   .. change::
 479     :tags: Bug Fixes, Compliance
 480     :pullreq: 7789, 7772
 481
 482     DNSSEC fixes:
 483
 484     * Don't sign insecure records with keys from other zones (Kees Monshouwer)
 485     * always add DS for secure zones, broken since #7523 (Kees Monshouwer)
 486
 487   .. change::
 488     :tags: Improvements, Compliance
 489     :pullreq: 7410
 490
 491     Ignore Path MTU Discovery on UDP server socket
 492
 493   .. change::
 494     :tags: Features, Tools
 495     :pullreq: 7832
 496
 497     add DoH support to sdig
 498
 499   .. change::
 500     :tags: Bug Fixes, Tools
 501     :pullreq: 7801
 502     :tickets: 7667
 503
 504     pdnsutil: show DS for second and further keys too
 505
 506   .. change::
 507     :tags: Features, Tools
 508     :pullreq: 7655
 509
 510     dumresp: add TCP support
 511
 512   .. change::
 513     :tags: Deprecation, API
 514     :pullreq: 7797
 515
 516     API: mark ``set-ptr`` as deprecated (zeha)
 517
 518   .. change::
 519     :tags: Robustness
 520     :pullreq: 7790, 7569, 7662, 7503, 7517, 7587
 521
 522     Various robustness improvements:
 523
 524     * Do not busy loop if we get lots of notifies.
 525     * Improve error reporting with garbage in the 'master' field of the database
 526     * Do not exit on exception resolving addresses to notify
 527     * Auth ringbuffer summaries were case sensitive & accounted delegations incorrectly
 528     * plug mysql_thread_init memory leak
 529     * Ensure we increase the number of queued queries before decreasing it
 530
 531   .. change::
 532     :tags: Performance, DNSSEC
 533     :pullreq: 7523
 534
 535     disable dnssec pre-processing for non dnssec zones and avoid a lot of ``isSecuredZone()`` calls (Kees Monshouwer)
 536
 537   .. change::
 538     :tags: Bug fixes
 539     :pullreq: 7723
 540
 541     rename 'supermaster' option to 'superslave'
 542
 543   .. change::
 544     :tags: Improvements, Webserver
 545     :pullreq: 5932
 546
 547     improve logging in the web server
 548
 549   .. change::
 550     :tags: Features, Tools
 551     :pullreq: 7481
 552
 553     pdnsutil, dnswasher: add support for encrypting IP addresses
 554
 555   .. change::
 556     :tags: Improvements
 557     :pullreq: 7584
 558
 559     GSQL: Log more data in error messages
 560
 561 .. changelog::
 562   :version: 4.2.0-rc1
 563   :released: 19th of March 2019
 564
 565   .. change::
 566     :tags: Bug Fixes
 567     :pullreq: 7576
 568     :tickets: 7573
 569
 570     Insufficient validation in the HTTP remote backend (CVE-2019-3871, PowerDNS Security Advisory :doc:`2019-03 <../security-advisories/powerdns-advisory-2019-03>`)
 571
 572   .. change::
 573     :tags: Bug Fixes, API
 574     :pullreq: 7546
 575     :tickets: 7545
 576
 577     Fix API search failed with "Commands out of sync; you can't run this command now".
 578
 579   .. change::
 580     :tags: Bug Fixes, GeoIP
 581     :pullreq: 7219
 582
 583     Fix static lookup when using weighted records on multiple record types.
 584
 585   .. change::
 586     :tags: Improvements, DNSSEC
 587     :pullreq: 7516
 588
 589     Report ``checkKey`` errors upwards.
 590
 591   .. change::
 592     :tags: Bug Fixes, MySQL
 593     :pullreq: 7496
 594     :tickets: 7493
 595
 596     Fix invalid SOA record in MySQL which prevented the authoritative
 597     server from starting.
 598
 599   .. change::
 600     :tags: Improvements
 601     :pullreq: 6872
 602
 603     ixfrdist: Add option to limit AXFR record count.
 604
 605   .. change::
 606     :tags: Improvements, API
 607     :pullreq: 7326
 608     :tickets: 5430
 609
 610     Add ``type`` filter to search-data api.
 611
 612   .. change::
 613     :tags: Improvements, Internals
 614     :pullreq: 7502
 615
 616     Use a less expensive way to get memory stats for ``real-memory-usage``.
 617
 618   .. change::
 619     :tags: Improvements, API
 620     :pullreq: 7359
 621     :tickets: 7357
 622
 623     Add ``rcode`` response statistics on API.
 624
 625   .. change::
 626     :tags: Improvements
 627     :pullreq: 7490
 628     :tickets: 7393
 629
 630     Lua records: Add ``useragent`` option to ``ifurlup`` and set a default.
 631
 632   .. change::
 633     :tags: Improvements, Remote
 634     :pullreq: 7448
 635     :tickets: 7444
 636
 637     remotebackend: Implement ``getUpdatedMasters``.
 638
 639   .. change::
 640     :tags: Bug Fixes
 641     :pullreq: 7494
 642
 643     Correctly interpret an empty AXFR response to an IXFR query.
 644
 645   .. change::
 646     :tags: Improvements
 647     :pullreq: 7492
 648     :tickets: 6853
 649
 650     Lua: Expose ``dns_random`` as ``pdnsrandom``.
 651
 652   .. change::
 653     :tags: Improvements, API
 654     :pullreq: 7491
 655     :tickets: 6451
 656
 657     Use commas instead of spaces when setting Zone Masters via the REST API.
 658
 659   .. change::
 660     :tags: Bug Fixes, API
 661     :pullreq: 7488
 662     :tickets: 6114
 663
 664     Improve handling of out of range ``modified_at`` value.
 665
 666   .. change::
 667     :tags: Bug Fixes, Tools
 668     :pullreq: 7482
 669
 670     Fix output order of pdnsutil ``add-record``.
 671
 672   .. change::
 673     :tags: Bug Fixes
 674     :pullreq: 7352
 675
 676     Respect packet size limits, even with ECS and TSIG.
 677
 678   .. change::
 679     :tags: Bug Fixes
 680     :pullreq: 7459
 681     :tickets: 7429
 682
 683     Fix dot stripping in ``setcontent()``.
 684
 685   .. change::
 686     :tags: Improvements, API
 687     :pullreq: 7463
 688
 689     Improve RRset validation.
 690
 691   .. change::
 692     :tags: Bug Fixes, MySQL
 693     :pullreq: 7475
 694
 695     Avoid infinite loop in mydnsbackend.
 696
 697   .. change::
 698     :tags: Bug Fixes, LMDB
 699     :pullreq: 7472
 700     :tickets: 7471
 701
 702     Do not compress the root since LMDB backend cannot set a root zone
 703     with a compressible SOA record.
 704
 705   .. change::
 706     :tags: Bug Fixes, LMDB
 707     :pullreq: 7470
 708     :tickets: 7453
 709
 710     Avoid duplicate NSEC3 records in presigned zones in LMDB backend.
 711
 712   .. change::
 713     :tags: New Features, LMDB
 714     :pullreq: 7453
 715
 716     Authoritative LMDB backend.
 717
 718   .. change::
 719     :tags: Improvements, Internals
 720     :pullreq: 7412
 721
 722     Be smarter about trimming whitespace when creating records from ASCII.
 723
 724   .. change::
 725     :tags: Improvements, Internals
 726     :pullreq: 6634
 727
 728     More sandboxing using SystemD's features.
 729
 730   .. change::
 731     :tags: Improvements, Internals
 732     :pullreq: 7353
 733
 734     Fix attempt to restrict / speed-up additional processing to auth zone.
 735
 736   .. change::
 737     :tags: Bug Fixes, Tools
 738     :pullreq: 7148
 739
 740     sdig: Handle non-IN class records better.
 741
 742   .. change::
 743     :tags: Improvements, DNSSEC
 744     :pullreq: 7340
 745
 746     Error on DNSSEC default misconfiguration.
 747
 748   .. change::
 749     :tags: Bug Fixes, Improvements, Tools
 750     :pullreq: 7364
 751
 752     Dnsscope off-by-one + domain-filter.
 753
 754   .. change::
 755     :tags: Bug Fixes, Internals
 756     :pullreq: 7382
 757
 758     Fix ``dns_random()`` always returning 0 when the minimum acceptable value is 0.
 759
 760   .. change::
 761     :tags: Bug Fixes, Internals
 762     :pullreq: 7320
 763
 764     Lower ``udp-truncation-threshold`` by default to 1232.
 765
 766   .. change::
 767     :tags: Improvements, Internals
 768     :pullreq: 7293
 769
 770     Make ``pdns_control notify *`` also notify slaves zones.
 771
 772   .. change::
 773     :tags: Improvements, Internals
 774     :pullreq: 7348
 775
 776     Zero out QTYPE response numbers in our statistics. Makes Valgrind
 777     usable on auth again.
 778
 779   .. change::
 780     :tags: Bug Fixes, Tools
 781     :pullreq: 7244
 782     :tickets: 7319
 783
 784     pdns_notify: Support hostname for notification.
 785
 786   .. change::
 787     :tags: Improvements, Internals
 788     :pullreq: 7345
 789
 790     Improve memory handling for NSEC(3) records with lots of types.
 791
 792   .. change::
 793     :tags: Bug Fixes
 794     :pullreq: 7341
 795
 796     Fix replying from ANY address for non-standard port.
 797
 798   .. change::
 799     :tags: Improvements, API
 800     :pullreq: 7286
 801
 802     Fix a couple of Swagger / OpenAPI issues.
 803
 804   .. change::
 805     :tags: Bug Fixes
 806     :pullreq: 7288
 807
 808     Fix a few off-by-one errors.
 809
 810   .. change::
 811     :tags: Bug Fixes, GeoIP
 812     :pullreq: 7227
 813     :tickets: 7219
 814
 815     Forbid 0 as weight value.
 816
 817   .. change::
 818     :tags: Bug Fixes, Internals
 819     :pullreq: 7294
 820
 821     Prevent leak of file descriptor if running out of ports for incoming AXFR.
 822
 823   .. change::
 824     :tags: Improvements, DNSSEC
 825     :pullreq: 7284
 826
 827     Fallback to SHA1 for the signatures cache if MD5 is not available.
 828
 829   .. change::
 830     :tags: Bug Fixes, API
 831     :pullreq: 7278
 832     :tickets: 7277
 833
 834     Prevent more than one CNAME / SOA record in the same RRset.
 835
 836   .. change::
 837     :tags: Improvements, Internals
 838     :pullreq: 7245
 839
 840     Use a cache-able soa record for the serial check caused by a notify.
 841
 842   .. change::
 843     :tags: Improvements
 844     :pullreq: 6894
 845
 846     Improved Lua records - Added all selector, and backupSelector fallbacks.
 847
 848   .. change::
 849     :tags: Bug Fixes
 850     :pullreq: 6823
 851     :tickets: 6821
 852
 853     On incoming NOTIFY load our serial from backend to have it available during slave-check.
 854
 855     Also log ourserial to ease debugging.
 856
 857   .. change::
 858     :tags: Improvements, API, DNSSEC
 859     :pullreq: 5988
 860
 861     API: Add TSIG key manipulation endpoints.
 862
 863   .. change::
 864     :tags: Improvements
 865     :pullreq: 7026
 866
 867     Configure ``--enable-pdns-option`` ``--with-third-party-module``.
 868
 869   .. change::
 870     :tags: Improvements
 871     :pullreq: 6731
 872     :tickets: 6693
 873
 874     Address some known LUA Records issues:
 875
 876     * Better check input lists,
 877     * Report lua wildcards errors,
 878     * Exposes ``DNSName::getRawLabels`` in lua env,
 879     * Better document LUA functions and objects.
 880
 881   .. change::
 882     :tags: Improvements, API
 883     :pullreq: 7233
 884
 885     Make API changes do a rectify by default, add an option to disable.
 886
 887   .. change::
 888     :tags: Bug Fixes, Improvements
 889     :pullreq: 6838
 890     :tickets: 1355, 1366
 891
 892     Remove ``autoserial`` from the Authoritative Server.  Serial 0 was a little bit too special in PowerDNS.
 893
 894   .. change::
 895     :tags: Bug Fixes
 896     :pullreq: 7228
 897
 898     Handle ANY queries with Lua records.
 899
 900   .. change::
 901     :tags: Improvements
 902     :pullreq: 6869
 903
 904     Remove ``out-of-zone-additional-processing`` setting.
 905
 906   .. change::
 907     :tags: Bug Fixes
 908     :pullreq: 7217
 909
 910     geoip: properly delete libGeoIP return values.
 911
 912   .. change::
 913     :tags: Bug Fixes
 914     :pullreq: 7067
 915
 916     SOA-check: reject NXDOMAIN response and check label of RR against qname.
 917
 918   .. change::
 919     :tags: Improvements, DNSSEC
 920     :pullreq: 6958
 921
 922     Improve RSA key warnings.
 923
 924   .. change::
 925     :tags: Bug Fixes
 926     :pullreq: 7201
 927
 928     Fix ``carbon-instance`` / ``carbon-namespace`` inconsistencies.
 929
 930   .. change::
 931     :tags: <nil>
 932     :pullreq: 7196
 933     :tickets: 7195
 934
 935     geoipbackend: Allow empty content for ENT record.
 936
 937   .. change::
 938     :tags: Tools, DNSSEC
 939     :pullreq: 7187
 940
 941     pdnsutil.1 & settings:
 942
 943     * Add Ed25519 and Ed448,
 944     * Document ECC keysizes,
 945     * Remove old algos.
 946
 947   .. change::
 948     :tags: Bug Fixes, API
 949     :pullreq: 6871
 950
 951     Check DNSNames that should be hostnames.
 952
 953   .. change::
 954     :tags: <nil>
 955     :pullreq: 6959
 956     :tickets: 2362, 6951
 957
 958     Add namespace and instance variable to carbon key.
 959
 960   .. change::
 961     :tags: Bug Fixes, Packages
 962     :pullreq: 7134
 963
 964     Fix up the BIND config files on upgrade.
 965
 966   .. change::
 967     :tags: Bug Fixes
 968     :pullreq: 7024
 969
 970     geoipbackend: Handle read error for config file.
 971
 972   .. change::
 973     :tags: Improvements
 974     :pullreq: 7069
 975
 976     Use unique pointers in the OpenSSL signer.
 977
 978   .. change::
 979     :tags: API, Removed Features
 980     :pullreq: 7025
 981
 982     Remove ``api-logfile`` flag and grep API endpoint.
 983
 984   .. change::
 985     :tags: Improvements
 986     :pullreq: 6962
 987
 988     Store ``NetmaskTree`` nodes in a set for faster removal.
 989
 990   .. change::
 991     :tags: New Features
 992     :pullreq: 6969
 993
 994     Adds the glorious log-log histograms.
 995
 996   .. change::
 997     :tags: Bug Fixes
 998     :pullreq: 7017
 999
1000     Make sure we escape ``127`` in TXT records.
1001
1002   .. change::
1003     :tags: Bug Fixes
1004     :pullreq: 4598
1005
1006     Add support for NONE SOA-EDIT kind.
1007
1008   .. change::
1009     :tags: Tools
1010     :pullreq: 6997
1011
1012     Name threads in the programs.
1013
1014   .. change::
1015     :tags: Improvements
1016     :pullreq: 6727
1017
1018     ALIAS: Respond SERVFAIL on non-NOERRORs from resolver.
1019
1020   .. change::
1021     :tags: Improvements
1022     :pullreq: 6910
1023
1024     Add support for OpenSSL 1.1.1's ed25519 and ed448 for signing and verifying.
1025
1026   .. change::
1027     :tags: Improvements
1028     :pullreq: 6822
1029
1030     Add incremental ``slave-check`` backoff also for failed AXFR.
1031
1032   .. change::
1033     :tags: Bug Fixes
1034     :pullreq: 6923
1035
1036     Respond correctly to DS query at delegation in unsigned zone.
1037
1038   .. change::
1039     :tags: Improvements
1040     :pullreq: 6975
1041
1042     Enhance query-logging with timing for MySQL, PostgreSQL and SQLite.
1043
1044   .. change::
1045     :tags: Improvements
1046     :pullreq: 6811
1047
1048     Apply ALIAS scopemask after chasing.
1049
1050   .. change::
1051     :tags: Improvements
1052     :pullreq: 6948
1053
1054     Fix compilation with LibreSSL 2.7.0+.
1055
1056   .. change::
1057     :tags: Bug Fixes
1058     :pullreq: 6917
1059
1060     Release memory in case of error in the OpenSSL ECDSA constructor.
1061
1062   .. change::
1063     :tags: Bug Fixes
1064     :pullreq: 6913
1065     :tickets: 6912
1066
1067     Actually truncate truncated responses.
1068
1069   .. change::
1070     :tags: Improvements, Packages
1071     :pullreq: 6921
1072
1073     Remove GOST and Botan support.
1074
1075   .. change::
1076     :tags: Improvements, API
1077     :pullreq: 6668
1078
1079     Add zone lookup by ``/zones?zone=example.org``.
1080
1081   .. change::
1082     :tags: Bug Fixes
1083     :pullreq: 6858
1084
1085     RFC2136 fixes.
1086
1087   .. change::
1088     :tags: Improvements
1089     :pullreq: 6825
1090
1091     Add option ``send-signed-notify`` to send NOTIFYs without TSIG signature.
1092
1093   .. change::
1094     :tags: Removed Features, API
1095     :pullreq: 6845
1096
1097     Drop ``api-readonly`` configuration setting.
1098
1099   .. change::
1100     :tags: Bug Fixes
1101     :pullreq: 6857
1102
1103     Remove SOA-check backoff on incoming NOTIFY and fix ``d_lock`` handling.
1104
1105   .. change::
1106     :tags: Bug Fixes, Tools
1107     :pullreq: 6859
1108
1109     Make ``edit-zone`` catch zoneparser exceptions as well.
1110
1111   .. change::
1112     :tags: Improvements, Tools
1113     :pullreq: 6843
1114
1115     ``check-all-zones``: find duplicate zones and SOAs.
1116
1117   .. change::
1118     :tags: Bug Fixes
1119     :pullreq: 6834
1120
1121     ``check-zone``: allow null MX, SRV.
1122
1123   .. change::
1124     :tags: Bug Fixes
1125     :pullreq: 6844
1126
1127     Workaround MariaDB pretending to be MySQL.
1128
1129   .. change::
1130     :tags: Improvements
1131     :pullreq: 6824
1132
1133     Add the serials when logging the final result of a slave check.
1134
1135   .. change::
1136     :tags: Bug Fixes, API
1137     :pullreq: 6780, 6816
1138
1139     Make sure that we use strict weak records ordering in the API.
1140     (Doing this avoids concurrent records / comments iteration from running out of sync.)
1141
1142   .. change::
1143     :tags: Bug Fixes
1144     :pullreq: 6738
1145
1146     Reset the TSIG state between queries.
1147
1148   .. change::
1149     :tags: Improvements, Tools
1150     :pullreq: 6774
1151
1152     calidns: Accurate qps targets.
1153
1154   .. change::
1155     :tags: <nil>
1156     :pullreq: 6769
1157
1158     LuaWrapper: Disable maybe uninitialized warnings with boost optional.
1159
1160   .. change::
1161     :tags: Bug Fixes
1162     :pullreq: 6495
1163
1164     Only parse ``resolv.conf`` once - this avoids race conditions.
1165
1166   .. change::
1167     :tags: Improvements
1168     :pullreq: 6730
1169
1170     Implement a smarter dedup for filling packets in auth.
1171
1172   .. change::
1173     :tags: Improvements, Tools
1174     :pullreq: 6691
1175
1176     pdns_control notify: Handle slave w/o renotify properly.
1177
1178   .. change::
1179     :tags: Improvements, Tools
1180     :pullreq: 6653
1181
1182     pdnsutil: Occlusion and auth check improvements.
1183
1184   .. change::
1185     :tags: Bug Fixes
1186     :pullreq: 6655
1187
1188     Sign CDS/CDNSKEY RRsets with the KSK.
1189
1190   .. change::
1191     :tags: Improvements
1192     :pullreq: 6658
1193
1194     luawrapper: Report caught ``std::exception`` as ``lua_error``.
1195
1196   .. change::
1197     :tags: Bug Fixes
1198     :pullreq: 6686
1199
1200     Initialize some missed qtypes: WKS, SMIMEA.
1201
1202   .. change::
1203     :tags: Bug Fixes
1204     :pullreq: 6677
1205
1206     geoipbackend: Check ``GeoIP_id_by_addr_gl`` and ``GeoIP_id_by_addr_v6_gl`` return value.
1207
1208   .. change::
1209     :tags: Bug Fixes
1210     :pullreq: 6499
1211
1212     stubresolver: Improve locking.
1213
1214   .. change::
1215     :tags: Improvements
1216     :pullreq: 6633
1217
1218     Reject duplicate RRsets in patchZone.
1219
1220   .. change::
1221     :tags: Bug Fixes, API
1222     :pullreq: 6647
1223
1224     Remove ENTs when "replacing" new records.
1225
1226   .. change::
1227     :tags: Bug Fixes
1228     :pullreq: 6648
1229
1230     gmysql: Use future-proof statement for transaction isolation.
1231
1232   .. change::
1233     :tags: Improvements, API
1234     :pullreq: 6649
1235
1236     API export function output change to add IN to the output.
1237
1238   .. change::
1239     :tags: Improvements, API
1240     :pullreq: 6662
1241     :tickets: 6652
1242
1243     Send correct response codes for the CryptoKey endpoints.
1244
1245   .. change::
1246     :tags: Improvements
1247     :pullreq: 6659
1248
1249     Ensure ALIAS answers over TCP have correct name.
1250
1251   .. change::
1252     :tags: Bug Fixes, Tools
1253     :pullreq: 6617
1254
1255     calidns: Don't issue socket buffer or SCHED_FIFO warnings in quiet mode.
1256
1257   .. change::
1258     :tags: Bug Fixes, API
1259     :pullreq: 6614
1260
1261     Restrict creation of OPT and TSIG rrsets.
1262
1263   .. change::
1264     :tags: Improvements
1265     :pullreq: 6561
1266
1267     Fix some minor issues for presigned (large) bind zones.
1268
1269   .. change::
1270     :tags: Tools
1271     :pullreq: 6582
1272
1273     dnsreplay: Add more checks against bogus PCAP.
1274
1275   .. change::
1276     :tags: Bug Fixes, Improvements
1277     :pullreq: 6585
1278     :tickets: 6584
1279
1280     Geoip: Fix poisoning of cache when hit service's default network.
1281
1282     Also includes an optimization to make lookups faster.
1283
1284   .. change::
1285     :tags: Improvements, Tools
1286     :pullreq: 6594
1287
1288     pdnsutil: also load modules through the ``load-modules`` directive.
1289
1290   .. change::
1291     :tags: Improvements, Tools
1292     :pullreq: 6601
1293
1294     calidns: Add ``quiet``, ``minimum-success-rate`` options to use from a script.
1295
1296   .. change::
1297     :tags: New Features, Tools
1298     :pullreq: 6564
1299
1300     Add ``dnspcap2calidns`` to convert PCAP to the calidns format.
1301
1302   .. change::
1303     :tags: Bug Fixes, Tools
1304     :pullreq: 6580
1305
1306     dnsreplay: Bail out on a too small outgoing buffer.
1307
1308   .. change::
1309     :tags: Bug Fixes, Tools
1310     :pullreq: 6559
1311
1312     pdnsutil: Use new domain in ``b2bmigrate``.
1313
1314   .. change::
1315     :tags: Bug Fixes, API
1316     :pullreq: 6571
1317
1318     Increase serial after DNSSEC related updates.
1319
1320   .. change::
1321     :tags: Improvements
1322     :pullreq: 6558
1323
1324     bindbackend: Refuse launch suffixes.
1325
1326   .. change::
1327     :tags: Improvements, Tools
1328     :pullreq: 6526
1329
1330     calidns: Add an option to read ECS values from the query file, skip comments.
1331
1332   .. change::
1333     :tags: Bug Fixes
1334     :pullreq: 6531
1335
1336     Avoid interleaved access to B (via ``d_dk``).  Before this patch,
1337     the meta lookup would interfere with the already-started
1338     ``B.lookup``. This caused failures with odbc/MSSQL.
1339
1340   .. change::
1341     :tags: Improvements
1342     :pullreq: 6530
1343
1344     Add missing overrides.
1345
1346   .. change::
1347     :tags: Improvements, Tools
1348     :pullreq: 6525
1349
1350     calidns: Add a ``maximum-qps`` option to stay at a given stable load.
1351
1352   .. change::
1353     :tags: New Features
1354     :pullreq: 6171
1355
1356     LUA Records (yes we know it is "Lua").
1357
1358   .. change::
1359     :tags: Bug Fixes
1360     :pullreq: 6481
1361
1362     Add return 0 for correct exit of ``set-kind`` and ``set-account``.
1363
1364   .. change::
1365     :tags: Bug Fixes, Tools
1366     :pullreq: 6487
1367
1368     Link ``dnspcap2protobuf`` against librt when needed.
1369
1370   .. change::
1371     :tags: Bug Fixes
1372     :pullreq: 6484
1373
1374     Recheck serial when AXFR is done.
1375
1376   .. change::
1377     :tags: Improvements, Internals
1378     :pullreq: 5274
1379
1380     dns_random: Implement new dns_random.
1381
1382   .. change::
1383     :tags: New Features
1384     :pullreq: 5821
1385     :tickets: 5260
1386
1387     LDAP misc updates:
1388
1389     * ALIAS support,
1390     * DNAME support.
1391
1392   .. change::
1393     :tags: Improvements
1394     :pullreq: 6427
1395
1396     Avoid an isane amount of new backend connections during an AXFR.
1397
1398   .. change::
1399     :tags: Improvements, Internals
1400     :pullreq: 6358
1401
1402     Remove ``theLog`` and ``theL`` and replace this with a global ``g_log``.
1403
1404   .. change::
1405     :tags: Improvements, Tools
1406     :pullreq: 6331
1407
1408     Add TCP support for ALIAS.
1409
1410   .. change::
1411     :tags: Improvements
1412     :pullreq: 6377
1413
1414     Add support for MB and MG RR types.
1415
1416   .. change::
1417     :tags: Improvements
1418     :pullreq: 6102
1419
1420     Add actual EDNS buffer size logging, not just our interpretation.
1421
1422   .. change::
1423     :tags: Improvements, Internals
1424     :pullreq: 6312
1425
1426     Lower 'packet too short' loglevel.
1427
1428   .. change::
1429     :tags: Bug Fixes
1430     :pullreq: 6396
1431
1432     Report unparseable data in stoul ``invalid_argument`` exception.
1433
1434   .. change::
1435     :tags: New Features, Tools
1436     :pullreq: 6374
1437
1438     Add quiet modifier to pdnsutil ``rectify-all-zones`` command.
1439
1440   .. change::
1441     :tags: Bug Fixes
1442     :pullreq: 6370
1443
1444     Fix handling of user defined AXFR filters return values.
1445
1446   .. change::
1447     :tags: Bug Fixes
1448     :pullreq: 6342
1449     :tickets: 6263
1450
1451     Reload ``/etc/resolv.conf`` when modified.
1452
1453   .. change::
1454     :tags: Bug Fixes, Tools
1455     :pullreq: 6354
1456
1457     Rather than crash, sheepishly report no file/linenum in pdnsutil.
1458
1459   .. change::
1460     :tags: Improvements, Tools
1461     :pullreq: 6326
1462
1463     calidns: Add the ``--ecs`` parameter to add random ECS values to queries.
1464
1465   .. change::
1466     :tags: Improvements
1467     :pullreq: 6157
1468
1469     Lua2 backend: This is a rewrite of the lua backend. It uses AuthLua4 as basis and more strongly typed access using LuaContext.
1470
1471   .. change::
1472     :tags: Improvements
1473     :pullreq: 5361
1474     :tickets: 3602
1475
1476     Make requests always return to sender, for usage in multimaster slave zones. Also - made sure that the master that is questioned for updates will be selected randomly, to prevent repeatedly asking a dead master for updates.
1477
1478   .. change::
1479     :tags: Improvements, API
1480     :pullreq: 6325
1481
1482     Return status ``409`` if domain already exists.
1483
1484   .. change::
1485     :tags: Improvements
1486     :pullreq: 6276
1487
1488     Reject updates if they would lead to CNAME+Other data.
1489
1490   .. change::
1491     :tags: Improvements
1492     :pullreq: 6243
1493
1494     Fix rectify (ordername) for non-DNSSEC zones.
1495
1496   .. change::
1497     :tags: Improvements
1498     :pullreq: 6278
1499
1500     pkcs11signers: Fix yubikey NEO to work.
1501
1502   .. change::
1503     :tags: Bug Fixes
1504     :pullreq: 6297
1505
1506     Make ``check-zone`` error on rows that have content but shouldn't.
1507
1508   .. change::
1509     :tags: Improvements
1510     :pullreq: 6100
1511
1512     Make ``outgoing-query-address`` and ``outgoing-query-address6``
1513     behaviours equivalent.
1514
1515   .. change::
1516     :tags: Improvements
1517     :pullreq: 6128
1518     :tickets: 5268
1519
1520     GeoIPbackend improvements:
1521
1522     * Adds MMDB support. Now geoip backend can be compiled without geoip support,
1523     * Adds location support,
1524     * Fixes SERVFAIL if expansion is empty.
1525
1526   .. change::
1527     :tags: Improvements
1528     :pullreq: 6295
1529
1530     Fix syntax error for ``replace-rrset``. (@lordievader)
1531
1532   .. change::
1533     :tags: Improvements, API
1534     :pullreq: 2603
1535
1536     Expose ``ResponseStats`` via REST API.
1537
1538   .. change::
1539     :tags: Improvements, Internals
1540     :pullreq: 6230
1541
1542     Remove all traces of selectmplexer, fix up pollmplexer.
1543
1544   .. change::
1545     :tags: Bug Fixes, Tools
1546     :pullreq: 6172
1547
1548     IXFR: correct behavior of dealing with DNS Name with multiple records; speed up IXFR transaction.
1549
1550   .. change::
1551     :tags: Bug Fixes
1552     :pullreq: 6152
1553
1554     bindbackend: handle ``std::exception`` during startup zone-parsing.
1555
1556   .. change::
1557     :tags: Improvements, Tools
1558     :pullreq: 6166
1559
1560     Add an ``--initial-port`` option to dnsreplay.
1561
1562   .. change::
1563     :tags: Improvements
1564     :pullreq: 6220
1565     :tickets: 5079, 5594, 5654
1566
1567     Add XPF support to sdig, PowerDNS Recursor and dnsdist.
1568
1569   .. change::
1570     :tags: Improvements, Internals
1571     :pullreq: 5068
1572     :tickets: 1010
1573
1574     Change from ``time_t`` to ``uint32_t`` for serial in ``calculateSOASerial``.
1575
1576   .. change::
1577     :tags: Improvements
1578     :pullreq: 5960
1579
1580     Check more thoroughly the source of UDP answers.
1581
1582   .. change::
1583     :tags: Improvements
1584     :pullreq: 6162
1585
1586     Slave cleanups. (@zeha)
1587
1588   .. change::
1589     :tags: Bug Fixes
1590     :pullreq: 6019
1591     :tickets: 5915
1592
1593     gmysql-backend: set unsigned attribute on ``notified_serial`` column.
1594
1595   .. change::
1596     :tags: Improvements
1597     :pullreq: 6158
1598     :tickets: 2611
1599
1600     pdns: Improve record parsing
1601
1602   .. change::
1603     :tags: Bug Fixes
1604     :pullreq: 6018
1605
1606     Escaping unusual DNS label octets in DNSName is off by one.
1607
1608   .. change::
1609     :tags: Improvements, Internals
1610     :pullreq: 5979
1611
1612     Use ``toLogString()`` for logging and throwing.
1613
1614   .. change::
1615     :tags: Improvements, Internals
1616     :pullreq: 6156
1617
1618     Remove obsolete EDNS PING code. (@zeha)
1619
1620   .. change::
1621     :tags: Bug Fixes
1622     :pullreq: 6155
1623
1624     Update EDNS Option code list.
1625
1626   .. change::
1627     :tags: Improvements
1628     :pullreq: 6146
1629
1630     Changes to compile and run on NetBSD.
1631
1632   .. change::
1633     :tags: Bug Fixes
1634     :pullreq: 4547
1635
1636     Remove ``serializeSOAData``, refactor ``calculate``/``edit``/``increaseSOA``.
1637
1638   .. change::
1639     :tags: Improvements, Tools
1640     :pullreq: 6063
1641
1642     Add colour to diff output of pdnsutil.
1643
1644   .. change::
1645     :tags: <nil>
1646     :pullreq: 6124
1647     :tickets: 6101, 6120
1648
1649     Improve tests and two bugfixes:
1650
1651     * Fix xfrIP to reject invalid ips,
1652     * Accept seconds since epoch in RRSIG timestamps too.
1653
1654     (@stbuehler)
1655
1656   .. change::
1657     :tags: Improvements
1658     :pullreq: 6139
1659
1660     Forbid creating algo 5/8/10 keys with out-of-spec sizes.
1661
1662   .. change::
1663     :tags: Bug Fixes
1664     :pullreq: 6132
1665
1666     Add methods missing from AuthLua4 when Lua support is disabled.
1667
1668   .. change::
1669     :tags: Bug Fixes
1670     :pullreq: 6129
1671
1672     Init openssl and libsodium before chrooting in pdnsutil.
1673
1674   .. change::
1675     :tags: Bug Fixes, LDAP
1676     :pullreq: 6122
1677
1678     Fix listing zones incl. AXFR.
1679
1680   .. change::
1681     :tags: Bug Fixes
1682     :pullreq: 6107
1683
1684     Fix uninitialized index in Lua's DNSPacket::getRRS() binding.
1685
1686   .. change::
1687     :tags: Bug Fixes
1688     :pullreq: 6103
1689     :tickets: 6089
1690
1691     Fix out of bounds exception in CAA processing.
1692
1693   .. change::
1694     :tags: Improvements, API
1695     :pullreq: 6076
1696
1697     Return ``404`` for non-existing zones.
1698
1699   .. change::
1700     :tags: Improvements
1701     :pullreq: 5862
1702     :tickets: 5854
1703
1704     Add Draft of Swagger spec for Authoritative Server HTTP API.
1705
1706   .. change::
1707     :tags: Bug Fixes
1708     :pullreq: 6029
1709     :tickets: 6028
1710
1711     Forbid label compression in ALIAS wire format.
1712
1713   .. change::
1714     :tags: Improvements
1715     :pullreq: 7359
1716     :tickets: 7357
1717
1718     API: Add response-by-qtype and response-by-rcode on /statistics endpoint
1719
1720   .. change::
1721     :tags: Improvements
1722     :pullreq: 6021
1723
1724     Several improvements to processing of notifies.
1725
1726     * Turn off supermaster support by default (adds new setting).
1727     * PowerDNS was wasting a lot of queries while processing notifies.
1728     * Use comboaddress for IPs (was strings)