Inguqulo entsha ye-PowerDNS Resource 4.7 isikhishiwe

Muva nje ukwethulwa kwenguqulo entsha ye I-DNS caching I-PowerDNS Resource 4.7, enesibopho sokulungiswa kwegama eliphindaphindayo. I-PowerDNS Recursor isekelwe esisekelweni sekhodi esifanayo njengeseva Egunyaziwe ye-PowerDNS, kodwa amaseva e-PowerDNS Recursive kanye ne-Authoritative DNS athuthukiswa ngemijikelezo yokuthuthukisa ehlukene futhi akhululwa njengemikhiqizo ehlukene.

okuphakelwayor inikeza amathuluzi okuqoqwa kwezibalo okukude, isekela ukuqalisa kabusha okusheshayo, inenjini eyakhelwe ngaphakathi yokuxhuma abashayeli ngolimi lwesiLua, isekela ngokugcwele i-DNSSEC, i-DNS64, i-RPZ (Izindawo Zenqubomgomo Yezimpendulo), ikuvumela ukuthi uxhume ohlwini lwabavinjelwe.

Imiphumela yokulungiswa ingabhalwa njengamafayela wendawo ye-BIND. Ukuqinisekisa ukusebenza okuphezulu, izindlela zesimanje zokuxhumanisa eziphindaphindekayo zisetshenziswa ku-FreeBSD, Linux, kanye ne-Solaris (kqueue, epoll, /dev/poll), kanye ne-sniffer yephakethe le-DNS esebenza kahle kakhulu ekwazi ukucubungula amashumi ezinkulungwane zezicelo ezifanayo. .

Izici ezintsha eziyinhloko ze-PowerDNS Recursor 4.7

Kule nguqulo entsha kugqanyisiwe lokho isebenzise ikhono lokwengeza amarekhodi engeziwe ezimpendulweni ezithunyelwa eklayentini ukudlulisa ulwazi oluwusizo ngaphandle kwesidingo sokuthumela isicelo esihlukile (isibonelo, izimpendulo zesicelo serekhodi le-MX zingalungiselelwa ukunamathisela amarekhodi ahlobene A kanye ne-AAAA).

Ngaphezu kwalokho ukucatshangelwa okuqaliwe kwezimfuneko ze-RFC 9156 kubaluliwe ekusebenziseni ukusekelwa kwendlela yokuncishiswa kwegama lesicelo (“QNAME Minification”), evumela ukugcinwa kwemfihlo okungeziwe ngokungathumeli igama loqobo le-QNAME kuseva ekhuphukayo.

Olunye ushintsho oluvelele kunguqulo entsha ukuthi Ukulungiswa kwekheli le-IPv6 kunikezwakanye namaseva e-DNS akufakiwe ohlwini lwamarekhodi e-GR (Glue Record) lapho umbhalisi edlulisela ulwazi mayelana namaseva e-DNS asebenzela isizinda.

Kwezinye izinguquko okuvelele kule nguqulo entsha:

  • Ukuqaliswa kokuhlolwa kokuqinisekiswa kwendlela eyodwa yokusekelwa kwephrothokholi ye-DoT (i-DNS phezu kwe-TLS) ngeseva ye-DNS kuyaphakanyiswa.
  • Kwengezwe amandla okubuyela emuva kurekhodi eliyinhloko le-NS elisethiwe uma amaseva esethi yerekhodi lesibili le-NS engaphenduli.
  • Usekelo olungeziwe lokuqinisekisa ama-ZONEMD RRs (RFC 8976) abuyiswe kunqolobane.
  • Kwengezwe ikhono lokunamathisela izibambi ngolimi lwesi-Lua, olubizwa esigabeni sokuqeda ukulungiswa (isibonelo, kubabambi abanjalo ungashintsha impendulo ebuyiselwe kuklayenti).

Okokugcina, uma ufuna ukwazi okwengeziwe ngakho, ungabheka imininingwane yalokhu kukhishwa okusha ku isixhumanisi esilandelayo. 

Thola i-PowerDNS Recursor 4.7.0

Kulabo kini abanentshisekelo yokuthola i-PowerDNS Recursor 4.7, kufanele nazi ukuthi ikhodi yomthombo iyatholakala kwi-GitHub.

Ukuze uthole ikhodi, vele uvule ukuphela bese uthayipha umyalo olandelayo:

git clone https://github.com/PowerDNS/pdns.git

Leli khosombe liqukethe imithombo ye-PowerDNS Recursor, PowerDNS Authoritative Server, ne-dnsdist (enamandla i-DNS load balancer). Zontathu lezi zingakhiwa ngaleli khosombe.

Izinhlobo ezahlukahlukene zingakhiwa ngosizo lwe-pdns-builder, esebenzisa inqubo yokwakha esekwe ku-Docker. Ukuqala ngalokhu, sebenzisa le miyalo empandeni yale ndawo yokugcina:

git submodule init
git submodule update
./builder/build.sh

Endabeni yalabo abangabasebenzisi be-Ubuntu, bangenza ukwakhiwa ngokuthayipha imiyalo elandelayo:

sudo apt install autoconf automake ragel bison flex
sudo apt install libcurl4-openssl-dev luajit lua-yaml-dev libyaml-cpp-dev libtolua-dev lua5.3 autoconf automake ragel bison flex g++ libboost-all-dev libtool make pkg-config libssl-dev virtualenv lua-yaml-dev libyaml-cpp-dev libluajit-5.1-dev libcurl4 gawk libsqlite3-dev
apt install libsodium-dev
apt install default-libmysqlclient-dev
apt install libpq-dev
apt install libsystemd0 libsystemd-dev
apt install libmaxminddb-dev libmaxminddb0 libgeoip1 libgeoip-dev
autoreconf -vi

Futhi ukwenza inguqulo ehlanzeke kakhulu, sebenzisa:

./configure --with-modules="" --disable-lua-records
make
# make install

Ngendlela efanayo, ungathinta imibhalo bese uthola amaphakheji we-PowerDNS akhiwe ngaphambilini (i-deb ne-rpm) atholakala ekhoselweni lekhodi yesoftware. Bangakwazi ukubonisana nayo ngokuya kusixhumanisi esilandelayo.


Okuqukethwe yi-athikili kunamathela ezimisweni zethu ze izimiso zokuhlelela. Ukubika iphutha chofoza lapha.

Yiba ngowokuqala ukuphawula

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe.

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.