docs/changelog/4.2.rst

   1 Changelogs for 4.2.x
   2 ====================
   3
   4 .. changelog::
   5   :version: 4.2.1
   6   :released: 2nd of December 2019
   7
   8   This release fixes several bugs and makes a few features more robust or intuitive. It also contains a few performance improvements for API users.
   9
  10   .. change::
  11     :tags: Bug Fixes
  12     :pullreq: 8589
  13     :tickets: 8572
  14
  15     LUA view: do not crash on empty IP list
  16
  17   .. change::
  18     :tags: Bug Fixes
  19     :pullreq: 8576
  20
  21     API: Accept headers without spaces
  22
  23   .. change::
  24     :tags: Bug Fixes
  25     :pullreq: 8570
  26     :tickets: 8299
  27
  28     Avoid database state-related SERVFAILs after a LUA error
  29
  30   .. change::
  31     :tags: Bug Fixes, Improvements, LMDB
  32     :pullreq: 8568
  33     :tickets: 8134
  34
  35     Just before 4.2.0, some SQL-related fixes broke edit-zone and other features with the LMDB backend. This has been fixed now. (backport by Kees Monshouwer)
  36
  37   .. change::
  38     :tags: Performance, Improvements
  39     :pullreq: 8457
  40
  41     API: reduce number of database connections (Kees Monshouwer)
  42
  43   .. change::
  44     :tags: Improvements
  45     :pullreq: 8546
  46
  47     Register a few known RR types and remove an unknown one
  48
  49   .. change::
  50     :tags: New Features, Improvements
  51     :pullreq: 8549
  52
  53     Add SLAVE-RENOTIFY zone metadata support (Matti Hiljanen)
  54
  55   .. change::
  56     :tags: Bug Fixes
  57     :pullreq: 8507
  58     :tickets: 8217
  59
  60     rfc2136, pdnsutil: somewhat improve duplicate record handling
  61
  62   .. change::
  63     :tags: Improvements
  64     :pullreq: 8548
  65
  66     bindbackend: use metadata for also-notifies as well (Matti Hiljanen)
  67
  68   .. change::
  69     :tags: Improvements
  70     :pullreq: 8508
  71     :tickets: 8218
  72
  73     pdnsutil increase-serial: under SOA-EDIT=INCEPTION-EPOCH, bump as if it is EPOCH
  74
  75   .. change::
  76     :tags: New Features, Improvements
  77     :pullreq: 8547
  78
  79     Add configurable timeout for inbound AXFR (Matti Hiljanen)
  80
  81   .. change::
  82     :tags: Performance, Improvements
  83     :pullreq: 8541
  84
  85     API: optionally do not return dnssec info in domain list (Christian Hofstaedtler)
  86
  87   .. change::
  88     :tags: Improvements
  89     :pullreq: 8454
  90
  91     Basic validation of $GENERATE parameters
  92
  93   .. change::
  94     :tags: New Features, Improvements
  95     :pullreq: 8428
  96
  97     Add CentOS 8 as builder target
  98
  99   .. change::
 100     :tags: New Features, Improvements
 101     :pullreq: 8341
 102
 103     gmysql backend, add an option to send the SSL capability flag
 104
 105 .. changelog::
 106   :version: 4.2.0
 107   :released: 30th of August 2019
 108
 109   Compared to the last release candidate, one more bug has been fixed.
 110
 111   The LMDB backend is incomplete in this version. Slaving zones works, loading zones with pdnsutil works, but more fine grained edits (using edit-zone, or the REST API) fail. We hope to fix this soon in a 4.2.x release.
 112
 113   For an overview of features new since 4.1.x, please see `the 4.2.0 announcement blog post <http://blog.powerdns.com/2019/08/29/powerdns-authoritative-server-4-2-0/>`__.
 114
 115   .. change::
 116     :tags: Bug Fixes
 117     :pullreq: 8229
 118
 119     bind getAllDomains: ignore per-zone exceptions
 120
 121 .. changelog::
 122   :version: 4.2.0-rc3
 123   :released: 29th of July 2019
 124
 125   Thanks to an overwhelming amount of testing by our fabulous user community, this release candidate contains a ton of bug fixes (and a few improvements) compared to the previous one. We hope this has shaken out all of the important bugs, so that we can release 4.2.0 soon!
 126
 127   This release, sadly, cripples the LMDB backend somewhat, due to `transaction-related fixes for the SQL backends <https://github.com/PowerDNS/pdns/pull/7891>`__. We hope to fix `this issue <https://github.com/PowerDNS/pdns/issues/8134>`__ before 4.2.0, or otherwise, early in 4.2.x.
 128
 129   .. change::
 130     :tags: Bug Fixes
 131     :pullreq: 8168
 132
 133     packethandler: Compare TSIG key name using DNSName
 134
 135   .. change::
 136     :tags: Improvements
 137     :pullreq: 8172, 8173
 138
 139     boost.m4 improvements
 140
 141   .. change::
 142     :tags: Bug Fixes
 143     :pullreq: 8169
 144
 145     Make sure we always compile with BOOST_CB_ENABLE_DEBUG set to 0
 146
 147   .. change::
 148     :tags: Bug Fixes
 149     :pullreq: 8058
 150
 151     Fix SERVFAIL when backend returns empty DNSName
 152
 153   .. change::
 154     :tags: Improvements
 155     :pullreq: 8126
 156
 157     add metric for open TCP connections
 158
 159   .. change::
 160     :tags: Bug Fixes
 161     :pullreq: 8149
 162
 163     stop using select() in places where FDs can be >1023
 164
 165   .. change::
 166     :tags: Bug Fixes
 167     :pullreq: 8166
 168
 169     pdnsutil increase-serial: set right ordername
 170
 171   .. change::
 172     :tags: Bug Fixes
 173     :pullreq: 8097
 174
 175     use BIGINT for notified_serial in pg schema (Klaus Darilion)
 176
 177   .. change::
 178     :tags: Improvements, Robustness, Performance
 179     :pullreq: 8092
 180
 181     Various robustness and performance improvements around domain IDs (Kees Monshouwer)
 182
 183   .. change::
 184     :tags: Bug Fixes
 185     :pullreq: 8056
 186
 187     Fix the accounting of servfail-queries in the distributor
 188
 189   .. change::
 190     :tags: Improvements, Build
 191     :pullreq: 8064
 192
 193     remove unused import to enable compile on illumos (Thomas Mieslinger)
 194
 195   .. change::
 196     :tags: Improvements, Performance
 197     :pullreq: 8051
 198
 199     ixfrdist: limit XFR chunk size to 16k
 200
 201   .. change::
 202     :tags: Bug Fixes
 203     :pullreq: 8028
 204
 205     limit compression pointers to 14 bits
 206
 207   .. change::
 208     :tags: Bug Fixes
 209     :pullreq: 8037
 210
 211     catch name & IP parse errors during outgoing notify preparations
 212
 213   .. change::
 214     :tags: Improvements
 215     :pullreq: 7998
 216
 217     Fix a memory leak when sqlite3_exec() fails
 218
 219   .. change::
 220     :tags: Improvements, Build
 221     :pullreq: 8019, 7980
 222
 223     don't enable the tbhandler when libc only pretends to be glibc (James Taylor)
 224
 225   .. change::
 226     :tags: Improvements
 227     :pullreq: 8006
 228
 229     Fix a leak on 'Backend reported permanent error which prevented lookup' error
 230
 231   .. change::
 232     :tags: Improvements
 233     :pullreq: 7996
 234
 235     Clear CMSG_SPACE(sizeof(data)) in cmsghdr to appease valgrind
 236
 237   .. change::
 238     :tags: New Features
 239     :pullreq: 7550
 240
 241     web: make max request/response body size configurable
 242
 243   .. change::
 244     :tags: Improvements
 245     :pullreq: 7918
 246
 247     deprecate SOA autocomplete in pdnsutil check-zone (Kees Monshouwer)
 248
 249   .. change::
 250     :tags: Improvements, Packaging
 251     :pullreq: 7889
 252
 253     move /var/lib/pdns to pdns-server debian package
 254
 255   .. change::
 256     :tags: Improvements
 257     :pullreq: 7890
 258
 259     Show newer features in configure output and --version
 260
 261   .. change::
 262     :tags: Improvements, Performance
 263     :pullreq: 7910
 264
 265     completely disable the packet when cache-ttl=0 (Kees Monshouwer)
 266
 267   .. change::
 268     :tags: Improvements
 269     :pullreq: 7943
 270
 271     Improve error when notification comes in for non-slave zone
 272
 273   .. change::
 274     :tags: Improvements
 275     :pullreq: 7962
 276
 277     web: add edited_serial to Zone object
 278
 279   .. change::
 280     :tags: Improvements, Build
 281     :pullreq: 7871
 282
 283     Adapt calidns for openbsd and other systems without rcvmmsg(2)
 284
 285   .. change::
 286     :tags: Improvements, Performance
 287     :pullreq: 7699
 288
 289     DNSName, speed up toString() conversion
 290
 291 .. changelog::
 292   :version: 4.2.0-rc2
 293   :released: 14th of June 2019
 294
 295   .. change::
 296     :tags: Improvements, LMDB
 297     :pullreq: 7807
 298
 299     Make explicit lmdbbackend synchronous option
 300
 301   .. change::
 302     :tags: Improvements, LMDB
 303     :pullreq: 7700
 304
 305     Reduce mmap size for lmdb on 32 bits plus restrict number of shards
 306
 307   .. change::
 308     :tags: Bug Fixes, LMDB
 309     :pullreq: 7784, 7697, 7643
 310
 311     LMDB improvements:
 312
 313     * lmdbbackend: auth was unset in get() (always true) (Kees Monshouwer)
 314     * LMDB defaulted to port 0 for master addresses unless explicitly set
 315     * fix ``getAllDomains()`` (Kees Monshouwer)
 316
 317   .. change::
 318     :tags: Bug fixes, Backends
 319     :pullreq: 7891
 320
 321     auth API, pdnsutil: improve backend transaction correctness
 322
 323   .. change::
 324     :tags: Robustness, Backends
 325     :pullreq: 7881
 326
 327     detect SOA cache pollution caused by broken backends (Kees Monshouwer)
 328
 329   .. change::
 330     :tags: Improvements, Backends
 331     :pullreq: 7852
 332
 333     sqlite3: make journal mode configurable; default to WAL
 334
 335   .. change::
 336     :tags: Bug Fixes, Backends
 337     :pullreq: 7854
 338
 339     auth gsql ``getAllDomains``: ignore stou errors
 340
 341   .. change::
 342     :tags: Performance, Backends
 343     :pullreq: 7460
 344
 345     speedup ``getUpdatedMasters()`` for the gsql backends (Kees Monshouwer)
 346
 347   .. change::
 348     :tags: Bug Fixes, Backends
 349     :pullreq: 7831, 7787
 350
 351     Rectify/ENT fixes:
 352
 353     * Allow updates to override existing ENT records
 354     * Fix ENTs removal when "replacing" new records via the API
 355
 356   .. change::
 357     :tags: Bug Fixes, Backends
 358     :pullreq: 7363
 359
 360     Cleanup SOA editing (Kees Monshouwer)
 361
 362   .. change::
 363     :tags: Backends
 364     :pullreq: 7753
 365
 366     pdns_control reopens geoip databases on reload (jpmens)
 367
 368   .. change::
 369     :tags: Backends
 370     :pullreq: 7696
 371
 372     b2b-migrate did not open a transaction, breaking it for lmdb
 373
 374   .. change::
 375     :tags: Backends
 376     :pullreq: 7706
 377
 378     No longer filter DNSSEC metadata when DNSSEC is enabled in gsql
 379
 380   .. change::
 381     :tags: Backends
 382     :pullreq: 7580
 383
 384     Rectify for ent records in narrow zones was slightly wrong. (Kees Monshouwer)
 385
 386   .. change::
 387     :tags: Backends
 388     :pullreq: 7529
 389
 390     Clear caches (meta-data, keys) on domain deletion
 391
 392   .. change::
 393     :tags: Performance, LUA
 394     :pullreq: 7869, 7897
 395
 396     optionally reuse Lua state
 397
 398   .. change::
 399     :tags: Improvements, Portability
 400     :pullreq: 7862, 7861, 7818, 7668
 401
 402     Portability/building improvements:
 403
 404     * Update boost.m4 to the latest version
 405     * Check if ``-latomic`` is needed instead of hardcoding (neheb)
 406     * Use ``net-snmp-config --netsnmp-agent-libs`` instead of ``--agent-libs``
 407     * bump boost requirement to 1.42 unconditionally
 408
 409   .. change::
 410     :tags: Improvements, Robustness
 411     :pullreq: 7864, 7865, 7708
 412
 413     Robustness improvements:
 414
 415     * Fix warnings reported by Coverity
 416     * Initialize cURL before starting any thread
 417     * Don't do unaligned memory access
 418
 419   .. change::
 420     :tags: Improvements, Compliance
 421     :pullreq: 7873
 422
 423     Always truncate when the additional records do not fit in a response (Kees Monshouwer)
 424
 425   .. change::
 426     :tags: Improvements, Compliance
 427     :pullreq: 7859
 428
 429     Remove ``disable-tcp`` option
 430
 431   .. change::
 432     :tags: Improvements, Compliance
 433     :pullreq: 7615
 434
 435     RKEY is missing algorithm field (DNS-Leo)
 436
 437   .. change::
 438     :tags: Bug Fixes, Compliance
 439     :pullreq: 7789, 7772
 440
 441     DNSSEC fixes:
 442
 443     * Don't sign insecure records with keys from other zones (Kees Monshouwer)
 444     * always add DS for secure zones, broken since #7523 (Kees Monshouwer)
 445
 446   .. change::
 447     :tags: Improvements, Compliance
 448     :pullreq: 7410
 449
 450     Ignore Path MTU Discovery on UDP server socket
 451
 452   .. change::
 453     :tags: Features, Tools
 454     :pullreq: 7832
 455
 456     add DoH support to sdig
 457
 458   .. change::
 459     :tags: Bug Fixes, Tools
 460     :pullreq: 7801
 461     :tickets: 7667
 462
 463     pdnsutil: show DS for second and further keys too
 464
 465   .. change::
 466     :tags: Features, Tools
 467     :pullreq: 7655
 468
 469     dumresp: add TCP support
 470
 471   .. change::
 472     :tags: Deprecation, API
 473     :pullreq: 7797
 474
 475     API: mark ``set-ptr`` as deprecated (zeha)
 476
 477   .. change::
 478     :tags: Robustness
 479     :pullreq: 7790, 7569, 7662, 7503, 7517, 7587
 480
 481     Various robustness improvements:
 482
 483     * Do not busy loop if we get lots of notifies.
 484     * Improve error reporting with garbage in the 'master' field of the database
 485     * Do not exit on exception resolving addresses to notify
 486     * Auth ringbuffer summaries were case sensitive & accounted delegations incorrectly
 487     * plug mysql_thread_init memory leak
 488     * Ensure we increase the number of queued queries before decreasing it
 489
 490   .. change::
 491     :tags: Performance, DNSSEC
 492     :pullreq: 7523
 493
 494     disable dnssec pre-processing for non dnssec zones and avoid a lot of ``isSecuredZone()`` calls (Kees Monshouwer)
 495
 496   .. change::
 497     :tags: Bug fixes
 498     :pullreq: 7723
 499
 500     rename 'supermaster' option to 'superslave'
 501
 502   .. change::
 503     :tags: Improvements, Webserver
 504     :pullreq: 5932
 505
 506     improve logging in the web server
 507
 508   .. change::
 509     :tags: Features, Tools
 510     :pullreq: 7481
 511
 512     pdnsutil, dnswasher: add support for encrypting IP addresses
 513
 514   .. change::
 515     :tags: Improvements
 516     :pullreq: 7584
 517
 518     GSQL: Log more data in error messages
 519
 520 .. changelog::
 521   :version: 4.2.0-rc1
 522   :released: 19th of March 2019
 523
 524   .. change::
 525     :tags: Bug Fixes
 526     :pullreq: 7576
 527     :tickets: 7573
 528
 529     Insufficient validation in the HTTP remote backend (CVE-2019-3871, PowerDNS Security Advisory :doc:`2019-03 <../security-advisories/powerdns-advisory-2019-03>`)
 530
 531   .. change::
 532     :tags: Bug Fixes, API
 533     :pullreq: 7546
 534     :tickets: 7545
 535
 536     Fix API search failed with "Commands out of sync; you can't run this command now".
 537
 538   .. change::
 539     :tags: Bug Fixes, GeoIP
 540     :pullreq: 7219
 541
 542     Fix static lookup when using weighted records on multiple record types.
 543
 544   .. change::
 545     :tags: Improvements, DNSSEC
 546     :pullreq: 7516
 547
 548     Report ``checkKey`` errors upwards.
 549
 550   .. change::
 551     :tags: Bug Fixes, MySQL
 552     :pullreq: 7496
 553     :tickets: 7493
 554
 555     Fix invalid SOA record in MySQL which prevented the authoritative
 556     server from starting.
 557
 558   .. change::
 559     :tags: Improvements
 560     :pullreq: 6872
 561
 562     ixfrdist: Add option to limit AXFR record count.
 563
 564   .. change::
 565     :tags: Improvements, API
 566     :pullreq: 7326
 567     :tickets: 5430
 568
 569     Add ``type`` filter to search-data api.
 570
 571   .. change::
 572     :tags: Improvements, Internals
 573     :pullreq: 7502
 574
 575     Use a less expensive way to get memory stats for ``real-memory-usage``.
 576
 577   .. change::
 578     :tags: Improvements, API
 579     :pullreq: 7359
 580     :tickets: 7357
 581
 582     Add ``rcode`` response statistics on API.
 583
 584   .. change::
 585     :tags: Improvements
 586     :pullreq: 7490
 587     :tickets: 7393
 588
 589     Lua records: Add ``useragent`` option to ``ifurlup`` and set a default.
 590
 591   .. change::
 592     :tags: Improvements, Remote
 593     :pullreq: 7448
 594     :tickets: 7444
 595
 596     remotebackend: Implement ``getUpdatedMasters``.
 597
 598   .. change::
 599     :tags: Bug Fixes
 600     :pullreq: 7494
 601
 602     Correctly interpret an empty AXFR response to an IXFR query.
 603
 604   .. change::
 605     :tags: Improvements
 606     :pullreq: 7492
 607     :tickets: 6853
 608
 609     Lua: Expose ``dns_random`` as ``pdnsrandom``.
 610
 611   .. change::
 612     :tags: Improvements, API
 613     :pullreq: 7491
 614     :tickets: 6451
 615
 616     Use commas instead of spaces when setting Zone Masters via the REST API.
 617
 618   .. change::
 619     :tags: Bug Fixes, API
 620     :pullreq: 7488
 621     :tickets: 6114
 622
 623     Improve handling of out of range ``modified_at`` value.
 624
 625   .. change::
 626     :tags: Bug Fixes, Tools
 627     :pullreq: 7482
 628
 629     Fix output order of pdnsutil ``add-record``.
 630
 631   .. change::
 632     :tags: Bug Fixes
 633     :pullreq: 7352
 634
 635     Respect packet size limits, even with ECS and TSIG.
 636
 637   .. change::
 638     :tags: Bug Fixes
 639     :pullreq: 7459
 640     :tickets: 7429
 641
 642     Fix dot stripping in ``setcontent()``.
 643
 644   .. change::
 645     :tags: Improvements, API
 646     :pullreq: 7463
 647
 648     Improve RRset validation.
 649
 650   .. change::
 651     :tags: Bug Fixes, MySQL
 652     :pullreq: 7475
 653
 654     Avoid infinite loop in mydnsbackend.
 655
 656   .. change::
 657     :tags: Bug Fixes, LMDB
 658     :pullreq: 7472
 659     :tickets: 7471
 660
 661     Do not compress the root since LMDB backend cannot set a root zone
 662     with a compressible SOA record.
 663
 664   .. change::
 665     :tags: Bug Fixes, LMDB
 666     :pullreq: 7470
 667     :tickets: 7453
 668
 669     Avoid duplicate NSEC3 records in presigned zones in LMDB backend.
 670
 671   .. change::
 672     :tags: New Features, LMDB
 673     :pullreq: 7453
 674
 675     Authoritative LMDB backend.
 676
 677   .. change::
 678     :tags: Improvements, Internals
 679     :pullreq: 7412
 680
 681     Be smarter about trimming whitespace when creating records from ASCII.
 682
 683   .. change::
 684     :tags: Improvements, Internals
 685     :pullreq: 6634
 686
 687     More sandboxing using SystemD's features.
 688
 689   .. change::
 690     :tags: Improvements, Internals
 691     :pullreq: 7353
 692
 693     Fix attempt to restrict / speed-up additional processing to auth zone.
 694
 695   .. change::
 696     :tags: Bug Fixes, Tools
 697     :pullreq: 7148
 698
 699     sdig: Handle non-IN class records better.
 700
 701   .. change::
 702     :tags: Improvements, DNSSEC
 703     :pullreq: 7340
 704
 705     Error on DNSSEC default misconfiguration.
 706
 707   .. change::
 708     :tags: Bug Fixes, Improvements, Tools
 709     :pullreq: 7364
 710
 711     Dnsscope off-by-one + domain-filter.
 712
 713   .. change::
 714     :tags: Bug Fixes, Internals
 715     :pullreq: 7382
 716
 717     Fix ``dns_random()`` always returning 0 when the minimum acceptable value is 0.
 718
 719   .. change::
 720     :tags: Bug Fixes, Internals
 721     :pullreq: 7320
 722
 723     Lower ``udp-truncation-threshold`` by default to 1232.
 724
 725   .. change::
 726     :tags: Improvements, Internals
 727     :pullreq: 7293
 728
 729     Make ``pdns_control notify *`` also notify slaves zones.
 730
 731   .. change::
 732     :tags: Improvements, Internals
 733     :pullreq: 7348
 734
 735     Zero out QTYPE response numbers in our statistics. Makes Valgrind
 736     usable on auth again.
 737
 738   .. change::
 739     :tags: Bug Fixes, Tools
 740     :pullreq: 7244
 741     :tickets: 7319
 742
 743     pdns_notify: Support hostname for notification.
 744
 745   .. change::
 746     :tags: Improvements, Internals
 747     :pullreq: 7345
 748
 749     Improve memory handling for NSEC(3) records with lots of types.
 750
 751   .. change::
 752     :tags: Bug Fixes
 753     :pullreq: 7341
 754
 755     Fix replying from ANY address for non-standard port.
 756
 757   .. change::
 758     :tags: Improvements, API
 759     :pullreq: 7286
 760
 761     Fix a couple of Swagger / OpenAPI issues.
 762
 763   .. change::
 764     :tags: Bug Fixes
 765     :pullreq: 7288
 766
 767     Fix a few off-by-one errors.
 768
 769   .. change::
 770     :tags: Bug Fixes, GeoIP
 771     :pullreq: 7227
 772     :tickets: 7219
 773
 774     Forbid 0 as weight value.
 775
 776   .. change::
 777     :tags: Bug Fixes, Internals
 778     :pullreq: 7294
 779
 780     Prevent leak of file descriptor if running out of ports for incoming AXFR.
 781
 782   .. change::
 783     :tags: Improvements, DNSSEC
 784     :pullreq: 7284
 785
 786     Fallback to SHA1 for the signatures cache if MD5 is not available.
 787
 788   .. change::
 789     :tags: Bug Fixes, API
 790     :pullreq: 7278
 791     :tickets: 7277
 792
 793     Prevent more than one CNAME / SOA record in the same RRset.
 794
 795   .. change::
 796     :tags: Improvements, Internals
 797     :pullreq: 7245
 798
 799     Use a cache-able soa record for the serial check caused by a notify.
 800
 801   .. change::
 802     :tags: Improvements
 803     :pullreq: 6894
 804
 805     Improved Lua records - Added all selector, and backupSelector fallbacks.
 806
 807   .. change::
 808     :tags: Bug Fixes
 809     :pullreq: 6823
 810     :tickets: 6821
 811
 812     On incoming NOTIFY load our serial from backend to have it available during slave-check.
 813
 814     Also log ourserial to ease debugging.
 815
 816   .. change::
 817     :tags: Improvements, API, DNSSEC
 818     :pullreq: 5988
 819
 820     API: Add TSIG key manipulation endpoints.
 821
 822   .. change::
 823     :tags: Improvements
 824     :pullreq: 7026
 825
 826     Configure ``--enable-pdns-option`` ``--with-third-party-module``.
 827
 828   .. change::
 829     :tags: Improvements
 830     :pullreq: 6731
 831     :tickets: 6693
 832
 833     Address some known LUA Records issues:
 834
 835     * Better check input lists,
 836     * Report lua wildcards errors,
 837     * Exposes ``DNSName::getRawLabels`` in lua env,
 838     * Better document LUA functions and objects.
 839
 840   .. change::
 841     :tags: Improvements, API
 842     :pullreq: 7233
 843
 844     Make API changes do a rectify by default, add an option to disable.
 845
 846   .. change::
 847     :tags: Bug Fixes, Improvements
 848     :pullreq: 6838
 849     :tickets: 1355, 1366
 850
 851     Remove ``autoserial`` from the Authoritative Server.  Serial 0 was a little bit too special in PowerDNS.
 852
 853   .. change::
 854     :tags: Bug Fixes
 855     :pullreq: 7228
 856
 857     Handle ANY queries with Lua records.
 858
 859   .. change::
 860     :tags: Improvements
 861     :pullreq: 6869
 862
 863     Remove ``out-of-zone-additional-processing`` setting.
 864
 865   .. change::
 866     :tags: Bug Fixes
 867     :pullreq: 7217
 868
 869     geoip: properly delete libGeoIP return values.
 870
 871   .. change::
 872     :tags: Bug Fixes
 873     :pullreq: 7067
 874
 875     SOA-check: reject NXDOMAIN response and check label of RR against qname.
 876
 877   .. change::
 878     :tags: Improvements, DNSSEC
 879     :pullreq: 6958
 880
 881     Improve RSA key warnings.
 882
 883   .. change::
 884     :tags: Bug Fixes
 885     :pullreq: 7201
 886
 887     Fix ``carbon-instance`` / ``carbon-namespace`` inconsistencies.
 888
 889   .. change::
 890     :tags: <nil>
 891     :pullreq: 7196
 892     :tickets: 7195
 893
 894     geoipbackend: Allow empty content for ENT record.
 895
 896   .. change::
 897     :tags: Tools, DNSSEC
 898     :pullreq: 7187
 899
 900     pdnsutil.1 & settings:
 901
 902     * Add Ed25519 and Ed448,
 903     * Document ECC keysizes,
 904     * Remove old algos.
 905
 906   .. change::
 907     :tags: Bug Fixes, API
 908     :pullreq: 6871
 909
 910     Check DNSNames that should be hostnames.
 911
 912   .. change::
 913     :tags: <nil>
 914     :pullreq: 6959
 915     :tickets: 2362, 6951
 916
 917     Add namespace and instance variable to carbon key.
 918
 919   .. change::
 920     :tags: Bug Fixes, Packages
 921     :pullreq: 7134
 922
 923     Fix up the BIND config files on upgrade.
 924
 925   .. change::
 926     :tags: Bug Fixes
 927     :pullreq: 7024
 928
 929     geoipbackend: Handle read error for config file.
 930
 931   .. change::
 932     :tags: Improvements
 933     :pullreq: 7069
 934
 935     Use unique pointers in the OpenSSL signer.
 936
 937   .. change::
 938     :tags: API, Removed Features
 939     :pullreq: 7025
 940
 941     Remove ``api-logfile`` flag and grep API endpoint.
 942
 943   .. change::
 944     :tags: Improvements
 945     :pullreq: 6962
 946
 947     Store ``NetmaskTree`` nodes in a set for faster removal.
 948
 949   .. change::
 950     :tags: New Features
 951     :pullreq: 6969
 952
 953     Adds the glorious log-log histograms.
 954
 955   .. change::
 956     :tags: Bug Fixes
 957     :pullreq: 7017
 958
 959     Make sure we escape ``127`` in TXT records.
 960
 961   .. change::
 962     :tags: Bug Fixes
 963     :pullreq: 4598
 964
 965     Add support for NONE SOA-EDIT kind.
 966
 967   .. change::
 968     :tags: Tools
 969     :pullreq: 6997
 970
 971     Name threads in the programs.
 972
 973   .. change::
 974     :tags: Improvements
 975     :pullreq: 6727
 976
 977     ALIAS: Respond SERVFAIL on non-NOERRORs from resolver.
 978
 979   .. change::
 980     :tags: Improvements
 981     :pullreq: 6910
 982
 983     Add support for OpenSSL 1.1.1's ed25519 and ed448 for signing and verifying.
 984
 985   .. change::
 986     :tags: Improvements
 987     :pullreq: 6822
 988
 989     Add incremental ``slave-check`` backoff also for failed AXFR.
 990
 991   .. change::
 992     :tags: Bug Fixes
 993     :pullreq: 6923
 994
 995     Respond correctly to DS query at delegation in unsigned zone.
 996
 997   .. change::
 998     :tags: Improvements
 999     :pullreq: 6975
1000
1001     Enhance query-logging with timing for MySQL, PostgreSQL and SQLite.
1002
1003   .. change::
1004     :tags: Improvements
1005     :pullreq: 6811
1006
1007     Apply ALIAS scopemask after chasing.
1008
1009   .. change::
1010     :tags: Improvements
1011     :pullreq: 6948
1012
1013     Fix compilation with LibreSSL 2.7.0+.
1014
1015   .. change::
1016     :tags: Bug Fixes
1017     :pullreq: 6917
1018
1019     Release memory in case of error in the OpenSSL ECDSA constructor.
1020
1021   .. change::
1022     :tags: Bug Fixes
1023     :pullreq: 6913
1024     :tickets: 6912
1025
1026     Actually truncate truncated responses.
1027
1028   .. change::
1029     :tags: Improvements, Packages
1030     :pullreq: 6921
1031
1032     Remove GOST and Botan support.
1033
1034   .. change::
1035     :tags: Improvements, API
1036     :pullreq: 6668
1037
1038     Add zone lookup by ``/zones?zone=example.org``.
1039
1040   .. change::
1041     :tags: Bug Fixes
1042     :pullreq: 6858
1043
1044     RFC2136 fixes.
1045
1046   .. change::
1047     :tags: Improvements
1048     :pullreq: 6825
1049
1050     Add option ``send-signed-notify`` to send NOTIFYs without TSIG signature.
1051
1052   .. change::
1053     :tags: Removed Features, API
1054     :pullreq: 6845
1055
1056     Drop ``api-readonly`` configuration setting.
1057
1058   .. change::
1059     :tags: Bug Fixes
1060     :pullreq: 6857
1061
1062     Remove SOA-check backoff on incoming NOTIFY and fix ``d_lock`` handling.
1063
1064   .. change::
1065     :tags: Bug Fixes, Tools
1066     :pullreq: 6859
1067
1068     Make ``edit-zone`` catch zoneparser exceptions as well.
1069
1070   .. change::
1071     :tags: Improvements, Tools
1072     :pullreq: 6843
1073
1074     ``check-all-zones``: find duplicate zones and SOAs.
1075
1076   .. change::
1077     :tags: Bug Fixes
1078     :pullreq: 6834
1079
1080     ``check-zone``: allow null MX, SRV.
1081
1082   .. change::
1083     :tags: Bug Fixes
1084     :pullreq: 6844
1085
1086     Workaround MariaDB pretending to be MySQL.
1087
1088   .. change::
1089     :tags: Improvements
1090     :pullreq: 6824
1091
1092     Add the serials when logging the final result of a slave check.
1093
1094   .. change::
1095     :tags: Bug Fixes, API
1096     :pullreq: 6780, 6816
1097
1098     Make sure that we use strict weak records ordering in the API.
1099     (Doing this avoids concurrent records / comments iteration from running out of sync.)
1100
1101   .. change::
1102     :tags: Bug Fixes
1103     :pullreq: 6738
1104
1105     Reset the TSIG state between queries.
1106
1107   .. change::
1108     :tags: Improvements, Tools
1109     :pullreq: 6774
1110
1111     calidns: Accurate qps targets.
1112
1113   .. change::
1114     :tags: <nil>
1115     :pullreq: 6769
1116
1117     LuaWrapper: Disable maybe uninitialized warnings with boost optional.
1118
1119   .. change::
1120     :tags: Bug Fixes
1121     :pullreq: 6495
1122
1123     Only parse ``resolv.conf`` once - this avoids race conditions.
1124
1125   .. change::
1126     :tags: Improvements
1127     :pullreq: 6730
1128
1129     Implement a smarter dedup for filling packets in auth.
1130
1131   .. change::
1132     :tags: Improvements, Tools
1133     :pullreq: 6691
1134
1135     pdns_control notify: Handle slave w/o renotify properly.
1136
1137   .. change::
1138     :tags: Improvements, Tools
1139     :pullreq: 6653
1140
1141     pdnsutil: Occlusion and auth check improvements.
1142
1143   .. change::
1144     :tags: Bug Fixes
1145     :pullreq: 6655
1146
1147     Sign CDS/CDNSKEY RRsets with the KSK.
1148
1149   .. change::
1150     :tags: Improvements
1151     :pullreq: 6658
1152
1153     luawrapper: Report caught ``std::exception`` as ``lua_error``.
1154
1155   .. change::
1156     :tags: Bug Fixes
1157     :pullreq: 6686
1158
1159     Initialize some missed qtypes: WKS, SMIMEA.
1160
1161   .. change::
1162     :tags: Bug Fixes
1163     :pullreq: 6677
1164
1165     geoipbackend: Check ``GeoIP_id_by_addr_gl`` and ``GeoIP_id_by_addr_v6_gl`` return value.
1166
1167   .. change::
1168     :tags: Bug Fixes
1169     :pullreq: 6499
1170
1171     stubresolver: Improve locking.
1172
1173   .. change::
1174     :tags: Improvements
1175     :pullreq: 6633
1176
1177     Reject duplicate RRsets in patchZone.
1178
1179   .. change::
1180     :tags: Bug Fixes, API
1181     :pullreq: 6647
1182
1183     Remove ENTs when "replacing" new records.
1184
1185   .. change::
1186     :tags: Bug Fixes
1187     :pullreq: 6648
1188
1189     gmysql: Use future-proof statement for transaction isolation.
1190
1191   .. change::
1192     :tags: Improvements, API
1193     :pullreq: 6649
1194
1195     API export function output change to add IN to the output.
1196
1197   .. change::
1198     :tags: Improvements, API
1199     :pullreq: 6662
1200     :tickets: 6652
1201
1202     Send correct response codes for the CryptoKey endpoints.
1203
1204   .. change::
1205     :tags: Improvements
1206     :pullreq: 6659
1207
1208     Ensure ALIAS answers over TCP have correct name.
1209
1210   .. change::
1211     :tags: Bug Fixes, Tools
1212     :pullreq: 6617
1213
1214     calidns: Don't issue socket buffer or SCHED_FIFO warnings in quiet mode.
1215
1216   .. change::
1217     :tags: Bug Fixes, API
1218     :pullreq: 6614
1219
1220     Restrict creation of OPT and TSIG rrsets.
1221
1222   .. change::
1223     :tags: Improvements
1224     :pullreq: 6561
1225
1226     Fix some minor issues for presigned (large) bind zones.
1227
1228   .. change::
1229     :tags: Tools
1230     :pullreq: 6582
1231
1232     dnsreplay: Add more checks against bogus PCAP.
1233
1234   .. change::
1235     :tags: Bug Fixes, Improvements
1236     :pullreq: 6585
1237     :tickets: 6584
1238
1239     Geoip: Fix poisoning of cache when hit service's default network.
1240
1241     Also includes an optimization to make lookups faster.
1242
1243   .. change::
1244     :tags: Improvements, Tools
1245     :pullreq: 6594
1246
1247     pdnsutil: also load modules through the ``load-modules`` directive.
1248
1249   .. change::
1250     :tags: Improvements, Tools
1251     :pullreq: 6601
1252
1253     calidns: Add ``quiet``, ``minimum-success-rate`` options to use from a script.
1254
1255   .. change::
1256     :tags: New Features, Tools
1257     :pullreq: 6564
1258
1259     Add ``dnspcap2calidns`` to convert PCAP to the calidns format.
1260
1261   .. change::
1262     :tags: Bug Fixes, Tools
1263     :pullreq: 6580
1264
1265     dnsreplay: Bail out on a too small outgoing buffer.
1266
1267   .. change::
1268     :tags: Bug Fixes, Tools
1269     :pullreq: 6559
1270
1271     pdnsutil: Use new domain in ``b2bmigrate``.
1272
1273   .. change::
1274     :tags: Bug Fixes, API
1275     :pullreq: 6571
1276
1277     Increase serial after DNSSEC related updates.
1278
1279   .. change::
1280     :tags: Improvements
1281     :pullreq: 6558
1282
1283     bindbackend: Refuse launch suffixes.
1284
1285   .. change::
1286     :tags: Improvements, Tools
1287     :pullreq: 6526
1288
1289     calidns: Add an option to read ECS values from the query file, skip comments.
1290
1291   .. change::
1292     :tags: Bug Fixes
1293     :pullreq: 6531
1294
1295     Avoid interleaved access to B (via ``d_dk``).  Before this patch,
1296     the meta lookup would interfere with the already-started
1297     ``B.lookup``. This caused failures with odbc/MSSQL.
1298
1299   .. change::
1300     :tags: Improvements
1301     :pullreq: 6530
1302
1303     Add missing overrides.
1304
1305   .. change::
1306     :tags: Improvements, Tools
1307     :pullreq: 6525
1308
1309     calidns: Add a ``maximum-qps`` option to stay at a given stable load.
1310
1311   .. change::
1312     :tags: New Features
1313     :pullreq: 6171
1314
1315     LUA Records (yes we know it is "Lua").
1316
1317   .. change::
1318     :tags: Bug Fixes
1319     :pullreq: 6481
1320
1321     Add return 0 for correct exit of ``set-kind`` and ``set-account``.
1322
1323   .. change::
1324     :tags: Bug Fixes, Tools
1325     :pullreq: 6487
1326
1327     Link ``dnspcap2protobuf`` against librt when needed.
1328
1329   .. change::
1330     :tags: Bug Fixes
1331     :pullreq: 6484
1332
1333     Recheck serial when AXFR is done.
1334
1335   .. change::
1336     :tags: Improvements, Internals
1337     :pullreq: 5274
1338
1339     dns_random: Implement new dns_random.
1340
1341   .. change::
1342     :tags: New Features
1343     :pullreq: 5821
1344     :tickets: 5260
1345
1346     LDAP misc updates:
1347
1348     * ALIAS support,
1349     * DNAME support.
1350
1351   .. change::
1352     :tags: Improvements
1353     :pullreq: 6427
1354
1355     Avoid an isane amount of new backend connections during an AXFR.
1356
1357   .. change::
1358     :tags: Improvements, Internals
1359     :pullreq: 6358
1360
1361     Remove ``theLog`` and ``theL`` and replace this with a global ``g_log``.
1362
1363   .. change::
1364     :tags: Improvements, Tools
1365     :pullreq: 6331
1366
1367     Add TCP support for ALIAS.
1368
1369   .. change::
1370     :tags: Improvements
1371     :pullreq: 6377
1372
1373     Add support for MB and MG RR types.
1374
1375   .. change::
1376     :tags: Improvements
1377     :pullreq: 6102
1378
1379     Add actual EDNS buffer size logging, not just our interpretation.
1380
1381   .. change::
1382     :tags: Improvements, Internals
1383     :pullreq: 6312
1384
1385     Lower 'packet too short' loglevel.
1386
1387   .. change::
1388     :tags: Bug Fixes
1389     :pullreq: 6396
1390
1391     Report unparseable data in stoul ``invalid_argument`` exception.
1392
1393   .. change::
1394     :tags: New Features, Tools
1395     :pullreq: 6374
1396
1397     Add quiet modifier to pdnsutil ``rectify-all-zones`` command.
1398
1399   .. change::
1400     :tags: Bug Fixes
1401     :pullreq: 6370
1402
1403     Fix handling of user defined AXFR filters return values.
1404
1405   .. change::
1406     :tags: Bug Fixes
1407     :pullreq: 6342
1408     :tickets: 6263
1409
1410     Reload ``/etc/resolv.conf`` when modified.
1411
1412   .. change::
1413     :tags: Bug Fixes, Tools
1414     :pullreq: 6354
1415
1416     Rather than crash, sheepishly report no file/linenum in pdnsutil.
1417
1418   .. change::
1419     :tags: Improvements, Tools
1420     :pullreq: 6326
1421
1422     calidns: Add the ``--ecs`` parameter to add random ECS values to queries.
1423
1424   .. change::
1425     :tags: Improvements
1426     :pullreq: 6157
1427
1428     Lua2 backend: This is a rewrite of the lua backend. It uses AuthLua4 as basis and more strongly typed access using LuaContext.
1429
1430   .. change::
1431     :tags: Improvements
1432     :pullreq: 5361
1433     :tickets: 3602
1434
1435     Make requests always return to sender, for usage in multimaster slave zones. Also - made sure that the master that is questioned for updates will be selected randomly, to prevent repeatidally asking a dead master for updates.
1436
1437   .. change::
1438     :tags: Improvements, API
1439     :pullreq: 6325
1440
1441     Return status ``409`` if domain already exists.
1442
1443   .. change::
1444     :tags: Improvements
1445     :pullreq: 6276
1446
1447     Reject updates if they would lead to CNAME+Other data.
1448
1449   .. change::
1450     :tags: Improvements
1451     :pullreq: 6243
1452
1453     Fix rectify (ordername) for non-DNSSEC zones.
1454
1455   .. change::
1456     :tags: Improvements
1457     :pullreq: 6278
1458
1459     pkcs11signers: Fix yubikey NEO to work.
1460
1461   .. change::
1462     :tags: Bug Fixes
1463     :pullreq: 6297
1464
1465     Make ``check-zone`` error on rows that have content but shouldn't.
1466
1467   .. change::
1468     :tags: Improvements
1469     :pullreq: 6100
1470
1471     Make ``outgoing-query-address`` and ``outgoing-query-address6``
1472     behaviours equivalent.
1473
1474   .. change::
1475     :tags: Improvements
1476     :pullreq: 6128
1477     :tickets: 5268
1478
1479     GeoIPbackend improvements:
1480
1481     * Adds MMDB support. Now geoip backend can be compiled without geoip support,
1482     * Adds location support,
1483     * Fixes SERVFAIL if expansion is empty.
1484
1485   .. change::
1486     :tags: Improvements
1487     :pullreq: 6295
1488
1489     Fix syntax error for ``replace-rrset``. (@lordievader)
1490
1491   .. change::
1492     :tags: Improvements, API
1493     :pullreq: 2603
1494
1495     Expose ``ResponseStats`` via REST API.
1496
1497   .. change::
1498     :tags: Improvements, Internals
1499     :pullreq: 6230
1500
1501     Remove all traces of selectmplexer, fix up pollmplexer.
1502
1503   .. change::
1504     :tags: Bug Fixes, Tools
1505     :pullreq: 6172
1506
1507     IXFR: correct behavior of dealing with DNS Name with multiple records; speed up IXFR transaction.
1508
1509   .. change::
1510     :tags: Bug Fixes
1511     :pullreq: 6152
1512
1513     bindbackend: handle ``std::exception`` during startup zone-parsing.
1514
1515   .. change::
1516     :tags: Improvements, Tools
1517     :pullreq: 6166
1518
1519     Add an ``--initial-port`` option to dnsreplay.
1520
1521   .. change::
1522     :tags: Improvements
1523     :pullreq: 6220
1524     :tickets: 5079, 5594, 5654
1525
1526     Add XPF support to sdig, PowerDNS Recursor and dnsdist.
1527
1528   .. change::
1529     :tags: Improvements, Internals
1530     :pullreq: 5068
1531     :tickets: 1010
1532
1533     Change from ``time_t`` to ``uint32_t`` for serial in ``calculateSOASerial``.
1534
1535   .. change::
1536     :tags: Improvements
1537     :pullreq: 5960
1538
1539     Check more thoroughly the source of UDP answers.
1540
1541   .. change::
1542     :tags: Improvements
1543     :pullreq: 6162
1544
1545     Slave cleanups. (@zeha)
1546
1547   .. change::
1548     :tags: Bug Fixes
1549     :pullreq: 6019
1550     :tickets: 5915
1551
1552     gmysql-backend: set unsigned attribute on ``notified_serial`` column.
1553
1554   .. change::
1555     :tags: Improvements
1556     :pullreq: 6158
1557     :tickets: 2611
1558
1559     pdns: Improve record parsing
1560
1561   .. change::
1562     :tags: Bug Fixes
1563     :pullreq: 6018
1564
1565     Escaping unusual DNS label octets in DNSName is off by one.
1566
1567   .. change::
1568     :tags: Improvements, Internals
1569     :pullreq: 5979
1570
1571     Use ``toLogString()`` for logging and throwing.
1572
1573   .. change::
1574     :tags: Improvements, Internals
1575     :pullreq: 6156
1576
1577     Remove obsolete EDNS PING code. (@zeha)
1578
1579   .. change::
1580     :tags: Bug Fixes
1581     :pullreq: 6155
1582
1583     Update EDNS Option code list.
1584
1585   .. change::
1586     :tags: Improvements
1587     :pullreq: 6146
1588
1589     Changes to compile and run on NetBSD.
1590
1591   .. change::
1592     :tags: Bug Fixes
1593     :pullreq: 4547
1594
1595     Remove ``serializeSOAData``, refactor ``calculate``/``edit``/``increaseSOA``.
1596
1597   .. change::
1598     :tags: Improvements, Tools
1599     :pullreq: 6063
1600
1601     Add colour to diff output of pdnsutil.
1602
1603   .. change::
1604     :tags: <nil>
1605     :pullreq: 6124
1606     :tickets: 6101, 6120
1607
1608     Improve tests and two bugfixes:
1609
1610     * Fix xfrIP to reject invalid ips,
1611     * Accept seconds since epoch in RRSIG timestamps too.
1612
1613     (@stbuehler)
1614
1615   .. change::
1616     :tags: Improvements
1617     :pullreq: 6139
1618
1619     Forbid creating algo 5/8/10 keys with out-of-spec sizes.
1620
1621   .. change::
1622     :tags: Bug Fixes
1623     :pullreq: 6132
1624
1625     Add methods missing from AuthLua4 when Lua support is disabled.
1626
1627   .. change::
1628     :tags: Bug Fixes
1629     :pullreq: 6129
1630
1631     Init openssl and libsodium before chrooting in pdnsutil.
1632
1633   .. change::
1634     :tags: Bug Fixes, LDAP
1635     :pullreq: 6122
1636
1637     Fix listing zones incl. AXFR.
1638
1639   .. change::
1640     :tags: Bug Fixes
1641     :pullreq: 6107
1642
1643     Fix uninitialized index in Lua's DNSPacket::getRRS() binding.
1644
1645   .. change::
1646     :tags: Bug Fixes
1647     :pullreq: 6103
1648     :tickets: 6089
1649
1650     Fix out of bounds exception in CAA processing.
1651
1652   .. change::
1653     :tags: Improvements, API
1654     :pullreq: 6076
1655
1656     Return ``404`` for non-existing zones.
1657
1658   .. change::
1659     :tags: Improvements
1660     :pullreq: 5862
1661     :tickets: 5854
1662
1663     Add Draft of Swagger spec for Authoritative Server HTTP API.
1664
1665   .. change::
1666     :tags: Bug Fixes
1667     :pullreq: 6029
1668     :tickets: 6028
1669
1670     Forbid label compression in ALIAS wire format.
1671
1672   .. change::
1673     :tags: Improvements
1674     :pullreq: 7359
1675     :tickets: 7357
1676
1677     API: Add response-by-qtype and response-by-rcode on /statistics endpoint
1678
1679   .. change::
1680     :tags: Improvements
1681     :pullreq: 6021
1682
1683     Several improvements to processing of notifies.
1684
1685     * Turn off supermaster support by default (adds new setting).
1686     * PowerDNS was wasting a lot of queries while processing notifies.
1687     * Use comboaddress for IPs (was strings)