- update to 4.8.0:
* Fix unit test kill_from_pidfile function for nonexistent
files because the argument is evaluated before the test
expression.
* Fix rr-test to also convert the contents of the just written
output file.
* Fix test set to remove -f nsd.db and rm nsd.db commands.
* Fix test set to remove difffile option.
* Fix#14: Set timeout to 3s when servicing remaining TCP
connections.
* Fix: Always instate write handler after reading queries from
TCP.
* Answer first query on connections accepted just before
reload.
* Merge #305: faster stats. Statistics can be gathered while a
reload is in progress.
* Remove on-disk database.
* Fix processing of consolidated IXFRs.
* Fix for interprocess communication to set quit sync command
from main process explicitly.
* Merge #281: Proxy protocol. An implementation of PROXYv2 for
NSD.
* It can be configured with proxy-protocol-port: portnum with
the port number of the interface on which proxy traffic is
handled.
* The interface can support proxy traffic for UDP, TCP and
TLS.
* Fix autoconf 2.69 warnings in configure.
* Merge #287: Update nsd.conf.5.in.
* Fix unused variable warning in unit test of udb.
OBS-URL: https://build.opensuse.org/request/show/1142480
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=109
- New upstream release 4.7.0
This release adds a script for bash autocompletion for nsd-control. Also
nsd-control can be configured to use unencrypted operation also when
compiled without openssl. There is also a systemd service unit example
file contributed. The dnstap log service can be contacted over TCP, with
the dnstap-ip: ip option. It is also possible to use TLS, with
dnstap-tls, it is enabled by default, and can be configured with the
dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
dnstap-client-cert-file options.
FEATURES:
* Fix#267: Allow unencrypted local operation of nsd-control.
* Fix#271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
* dnstap over TLS, default enabled. Configured with the
options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
BUGFIXES:
see https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_7_0_REL
OBS-URL: https://build.opensuse.org/request/show/1095779
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=101
* confine-to-zone configures NSD to not return out-of-zone
additional information.
* pidfile "" allows to run NSD without a pidfile
* adds support for readiness notification with READY_FD
* fix excessive logging of ixfr failures, it stops the log when
fallback to axfr is possible. log is enabled at high verbosity.
* Fixup warnings during --disable-ipv6 compile.
* The nsd.conf includes are sorted ascending, for include statements
with a '*' from glob.
* Fix log address and failure reason with tls handshake errors,
squelches (the same as unbound) some unless high verbosity is used.
* Number of different UDP handlers has been reduced to one.
recvmmsg and sendmmsg implementations are now used on all platforms.
* Socket options are now set in designated functions for easy reuse.
* Socket setup has been simplified for easy reuse.
* Configuration parser is now aware of the context in which
an option was specified.
* document that remote-control is a top-level nsd.conf attribute.
- Remove legacy upgrade of nsd users in %post (boo#1157331)boo#1157331)
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=65
- New upstream release 4.2.0:
* Implement TCP fast open
* Added DNS over TLS
* TLS OCSP stapling support with the tls-service-ocsp option
* New option hide-identity can be used in nsd.conf to stop NSD
from responding with the hostname for probe queries that
elicit the chaos class response, this is conform RFC4892
* Disable TLS1.0, TLS1.1 and weak ciphers, enable CIPHER_SERVER_PREFERENCE
OBS-URL: https://build.opensuse.org/request/show/709249
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=59
- Update to upstream release 4.1.22
4.1.22
================
FEATURES:
- refuse-any sends truncation (+TC) in reply to ANY queries over UDP,
and allows TCP queries like normal.
- Use accept4 to speed up answer of TCP queries, on Linux, FreeBSD
and OpenBSD.
BUG FIXES:
- Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
- Fix to use same condition for nsec3 hash allocation and free.
4.1.21
================
FEATURES:
- --enable-memclean cleans up memory for use with memory checkers,
eg. valgrind.
- refuse-any nsd.conf option that refuses queries of type ANY.
- lower memory usage for tcp connections, so tcp-count can be
higher.
BUG FIXES:
- Fix unused variable warnings and uninit variable in statistics
printout from clang analyzer.
- Fix spelling error in xfr-inspect.
- Fix#3562: explain build error when flex missing.
- Fix buffer size warnings from compiler on filename lengths.
- Fix#4093: Release notes not using 2018.
OBS-URL: https://build.opensuse.org/request/show/620433
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=46
