The new version of PowerDNS Recursor 4.4 has already been released and this new edition comes with support for DNS64 that allows to synthesize AAAA IPv6 records, another of the changes that stands out is the ability to add RPZ labels, among other things.
For those who are unfamiliar with PowerDNS, they should know that this that iss responsible for recursive name resolution. PowerDNS Resource it is based on the same code base as PowerDNS Authoritative Server, but the PowerDNS Recursive and Authoritative DNS servers evolve through different development cycles and are released as separate products.
The server provides tools for remote statistics collection, supports instant reboot, has a built-in engine for connecting drivers in the Lua language, fully supports DNSSEC, DNS64, RPZ (Response Policy Zones), and enables listing black.
The resolution results can be recorded as BIND zone files. To ensure high performance, modern mechanisms are used to multiplex connections on FreeBSD, Linux, and Solaris (kqueue, epoll, / dev / poll), as well as a high-performance DNS packet analyzer capable of processing tens of thousands of parallel requests.
Main new features of PowerDNS Recursor 4.4
As we mentioned at the beginning, this new version comes with the DNS64 support it is integrated, not linked to Lua additions. DNS64 allows to automatically synthesize AAAA IPv6 records based on IPv4 A records, as well as CNAME IP6.ARPA blocks for existing IN-ADDR.ARPA.
In addition, the ability to add arbitrary labels to RPZ was provided (Response policy zones, allows you to calculate the "reputation" of DNS names using DNSBL similarity to combat hosts from spammers and scammers.)
Another of the changes that is integrated are in the RPZ checks are now extended to hosts specified by CNAME resolution, in addition to the extended information about the RPZ processing, which is displayed during the trace, is deposited in logs and transmitted to the scripts in Lua.
Of the other changes that stand out of this new version:
- Sharing the write cache on different threads is provided.
- The routingTag is provided in Lua code, which can be used as an additional key in the entry cache instead of the EDNS subnet mask.
- The second version of the Proxy protocol has been implemented, which allows the exchange of information about the client's source address (for example, when using dnsdist).
Finally, if you want to know more about it, you can check the details of this new release in the following link
Get PowerDNS Recursor 4.4
For those of you interested in getting PowerDNS Recursor 4.4, you should know that the source code is available on GitHub.
To obtain the code, just open a terminal and type the following command:
git clone https://github.com/PowerDNS/pdns.git
This repository contains the sources for PowerDNS Recursor, PowerDNS Authoritative Server, and dnsdist (a powerful DNS load balancer). All three can be built from this repository.
The different versions can be built with the help of pdns-builder, which uses a Docker-based build process. To get started with this, run these commands at the root of this repository:
git submodule init
git submodule update
./builder/build.sh
In the case of those who are Ubuntu users, they can perform the construction by typing the following commands:
sudo apt install autoconf automake ragel bison flex
sudo apt install libcurl4-openssl-dev luajit lua-yaml-dev libyaml-cpp-dev libtolua-dev lua5.3 autoconf automake ragel bison flex g++ libboost-all-dev libtool make pkg-config libssl-dev virtualenv lua-yaml-dev libyaml-cpp-dev libluajit-5.1-dev libcurl4 gawk libsqlite3-dev
apt install libsodium-dev
apt install default-libmysqlclient-dev
apt install libpq-dev
apt install libsystemd0 libsystemd-dev
apt install libmaxminddb-dev libmaxminddb0 libgeoip1 libgeoip-dev
autoreconf -vi
And to compile a very clean version, use:
./configure --with-modules="" --disable-lua-records
make
# make install
In the same way, they can consult the documentation and obtain the pre-built PowerDNS packages (deb and rpm) which are available from the software code repository. They can consult it by going to the following link.