Commit 5fcb8ca7 authored by Petr Špaček's avatar Petr Špaček Committed by Tomas Krizek

NEWS: 3.2.0

parent 89aa8ab9
Knot Resolver 3.x.y (201y-mm-dd) Knot Resolver 3.2.0 (2018-12-17)
================================ ================================
Incompatible changes
--------------------
- view module: keep trying rules until a "non-chain" action is executed.
This improves consistency with the policy module.
New features New features
------------ ------------
- module edns_keepalive to implement server side of RFC 7828 (#408) - module edns_keepalive to implement server side of RFC 7828 (#408)
- module nsid to implement server side of RFC 5001 (#289) - module nsid to implement server side of RFC 5001 (#289)
- module bogus_log provides .frequent() table (!629) - module bogus_log provides .frequent() table (!629, credit Ulrich Wisser)
- module stats collects flags from answer messages (!629) - module stats collects flags from answer messages (!629, credit Ulrich Wisser)
- module view supports multiple rules with identical address/TSIG specification
Module API changes and keeps trying rules until a "non-chain" action is executed (!678)
------------------ - module experimental_dot_auth implements an DNS-over-TLS to auth protocol
- new layer is added: answer_finalize (!711, credit Manu Bretelle)
- kr_request keeps ::qsource.packet beyond the begin layer - net.bpf bindings allow advanced users to use eBPF socket filters
- kr_request::qsource.tcp renamed to ::qsource.flags.tcp
- kr_request::has_tls renamed to ::qsource.flags.tls
- kr_zonecut_add(), kr_zonecut_del() and kr_nsrep_sort() changed parameters slightly
Bugfixes Bugfixes
-------- --------
- http module: only run prometheus in parent process if using --forks=N, - http module: only run prometheus in parent process if using --forks=N,
as the submodule collects metrics from all sub-processes as well. as the submodule collects metrics from all sub-processes as well.
- TLS fixes for corner cases (!700, !714, !716, !721) - TLS fixes for corner cases (!700, !714, !716, !721, !728)
- fix build with -DNOVERBOSELOG (#424) - fix build with -DNOVERBOSELOG (#424)
- policy.{FORWARD,TLS_FORWARD,STUB}: respect net.ipv{4,6} setting (!710) - policy.{FORWARD,TLS_FORWARD,STUB}: respect net.ipv{4,6} setting (!710)
- avoid SERVFAILs due to certain kind of NS dependency cycles, again - avoid SERVFAILs due to certain kind of NS dependency cycles, again
(#374) this time seen as 'circular dependency' in verbose logs (#374) this time seen as 'circular dependency' in verbose logs
- policy and view modules do not overwrite result finished requests (!678)
Improvements Improvements
------------ ------------
...@@ -38,6 +31,15 @@ Improvements ...@@ -38,6 +31,15 @@ Improvements
when choosing whom to ask, just as for iteration when choosing whom to ask, just as for iteration
- use pseudo-randomness from gnutls instead of internal ISAAC (#233) - use pseudo-randomness from gnutls instead of internal ISAAC (#233)
- tune the way we deal with non-responsive servers (!716, !723) - tune the way we deal with non-responsive servers (!716, !723)
- documentation clarifies interaction between policy and view modules (!678, !730)
Module API changes
------------------
- new layer is added: answer_finalize
- kr_request keeps ::qsource.packet beyond the begin layer
- kr_request::qsource.tcp renamed to ::qsource.flags.tcp
- kr_request::has_tls renamed to ::qsource.flags.tls
- kr_zonecut_add(), kr_zonecut_del() and kr_nsrep_sort() changed parameters slightly
Knot Resolver 3.1.0 (2018-11-02) Knot Resolver 3.1.0 (2018-11-02)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment