I ukukhululwa koguqulelo olutsha lwePowerDNS Resource 4.6 apho uphuculo oluthile, ukulungiswa kwe-bug kwaye ngaphezu kwazo zonke izinto ezintsha ziye zaphunyezwa, apho i-Zone to cache igqamile, umzekelo, kunye nokukwazi ukukhupha amangeniso e-cache, phakathi kwezinye izinto.
Kulabo abangaqhelekanga ngePowerDNS, kufuneka bazi ukuba yilelinoxanduva lokusombulula isisombululo segama. Umbuyiseli wePowerDNS isekwe kwikhowudi efanayo nePowerDNS Server egunyazisiweyo, kodwa ieseva ze-PowerDNS eziphindaphindayo kunye neZinegunya zeeseva ze-DNS ziguquka ngemijikelo yophuhliso eyahlukeneyo kwaye zikhutshwa njengeemveliso ezahlukeneyo.
Iseva ibonelela ngezixhobo ekuqokeleleni ubalo kude, ixhasa ukuqala kwakhona kwangoko, ine-injini eyakhelwe-ngaphakathi yokuqhagamshela abaqhubi kulwimi lweLua, ixhasa ngokupheleleyo i-DNSSEC, i-DNS64, i-RPZ (iiNdawo zoMgaqo-nkqubo weMpendulo), kwaye yenza ukuba kudweliswe. mnyama.
Iziphumo zesisombululo zinokurekhodwa njengefayile yendawo ye-BIND. Ukuqinisekisa ukusebenza okuphezulu, iindlela zale mihla zoqhagamshelo lwe-multiplexing zisetyenziswa kwi-FreeBSD, Linux, kunye ne-Solaris (kqueue, epoll, /dev/poll), kunye ne-high-performance DNS packet sniffer ekwaziyo ukucubungula amashumi amawaka ezicelo ezifanayo.
Iimpawu ezintsha zePowerDNS Recursor 4.6
Kolu guqulelo lutsha umsebenzi wongeziwe "Zone to cache", ekuvumela ukuba ubuyisele indawo ye-DNS ngamaxesha athile kwaye ufake umxholo wayo kwi-cache, pukuze i-cache ihlale ikwimeko "eshushu". kwaye iqulethe idatha ehambelana nendawo. Isici sinokusetyenziswa kunye naluphi na uhlobo lwemimandla, kuquka imimandla yeengcambu. Ukukhutshwa kwendawo kungenziwa ngokusebenzisa i-DNS AXFR, i-HTTP, i-HTTPS, okanye ngokulayisha kwifayile yendawo.
Enye into entsha ebonakalayo yile inkxaso eyongeziweyo yokufihla iifowuni kwiiseva ze-DNS usebenzisa i-DoT (DNS ngaphezulu kwe-TLS). Ngokungagqibekanga, i-DoT yenziwe xa izibuko 853 licacisiwe ukwenzela umdluliseli weDNS okanye xa udwelisa ngokucacileyo abancedisi beDNS ngokusebenzisa iparamitha yechaphaza-ku-auth-amagama.
Ukuqinisekiswa kwesatifikethi akukenziwa, kunye nokutshintshela ngokuzenzekelayo kwi-DoT xa ixhaswa ngumncedisi we-DNS (le misebenzi iya kwenziwa emva kokuvunywa kwekomiti yokulinganisa).
Kuyacaciswa ukuba ubhale kwakhona ikhowudi ukuseka imidibaniso ephumayo ye-TCP kunye wongeze ukukwazi ukusebenzisa kwakhona imidibaniso. Ukusebenzisa kwakhona imidibaniso ye-TCP (kunye ne-DoT), uqhagamshelo alusavalwa ngoko nangoko emva kokuba isicelo siqwalaselwe, kodwa endaweni yoko lushiywe luvuliwe ixeshana (ukuziphatha kulawulwa yi-tcp-out-max-idle-ms setting).
Ye- olunye utshintsho qeu igqame:
- Uluhlu lweemetrics eziqokelelweyo kunye nokuthunyelwa kwamanye amazwe kunye nezibalo kunye nolwazi lweenkqubo zokulandela umkhondo lwandisiwe.
- Kubonelelwe ngokukwazi ukugungxula amangeno e-cache xa izicelo zesaziso ezingenayo zifika.
- Umkhondo wesiganeko esilingwayo wongezwe ukunika iinkcukacha ezithe vetshe malunga nexesha lokwenziwa kwenqanaba ngalinye lesisombululo.
Okokugqibela, ukuba ufuna ukwazi ngakumbi ngayo, unokujonga iinkcukacha zolu khupho olutsha kwi ukulandela ikhonkco.
Fumana isiQondisi sePowerDNS 4.6
Kulabo kuni banomdla wokufumana i-PowerDNS Recursor 4.4, kuya kufuneka niyazi ukuba ikhowudi yemvelaphi iyafumaneka kwiGitHub.
Ukufumana ikhowudi, vula nje itheminali kwaye uchwetheze lo myalelo ulandelayo:
git clone https://github.com/PowerDNS/pdns.git
Le ndawo inemithombo ye-PowerDNS Recursor, i-PowerDNS Server eligunyazisiweyo, kunye ne-dnsdist (enamandla alinganayo umthwalo we-DNS). Zonke ezi zintathu zinokwakhiwa kule ndawo yokugcina izinto.
Iinguqulelo ezahlukeneyo zinokwakhiwa ngoncedo lwe-pdns-builder, esebenzisa inkqubo yokwakha esekwe kwi-Docker. Ukuqala ngale nto, sebenzisa le miyalelo kwingcambu yale ndawo yokugcina izinto:
git submodule init
git submodule update
./builder/build.sh
Kwimeko yabo bangabasebenzisi baka-Ubuntu, banokwenza ulwakhiwo ngokuchwetheza le miyalelo ilandelayo:
sudo apt install autoconf automake ragel bison flex
sudo apt install libcurl4-openssl-dev luajit lua-yaml-dev libyaml-cpp-dev libtolua-dev lua5.3 autoconf automake ragel bison flex g++ libboost-all-dev libtool make pkg-config libssl-dev virtualenv lua-yaml-dev libyaml-cpp-dev libluajit-5.1-dev libcurl4 gawk libsqlite3-dev
apt install libsodium-dev
apt install default-libmysqlclient-dev
apt install libpq-dev
apt install libsystemd0 libsystemd-dev
apt install libmaxminddb-dev libmaxminddb0 libgeoip1 libgeoip-dev
autoreconf -vi
Ukuqokelela ucoceko olucocekileyo, sebenzisa:
./configure --with-modules="" --disable-lua-records
make
# make install
Ngendlela efanayo, banokubonisana namaxwebhu kwaye bafumane iiphakheji ze-PowerDNS esele zakhiwe (i-deb kunye ne-rpm) efumaneka kwikhowudi yekhowudi yesoftware. Banokuyifumana ngokuya kule khonkco ilandelayo.