Hi,<br><br>In this rc2 release putting 0 as 'serial' in the mysql table in the SOA field it is still not being replaced by I believe the unixdate as serial. So that breaks a lot of things among slave updating. The last release this actually worked properly was <a href="http://2.9.19.">2.9.19.</a><br>
<br><br>Sincerly,<br>Pascal<br><br><div class="gmail_quote">On Sat, Nov 29, 2008 at 11:12 PM, bert hubert <span dir="ltr"><<a href="mailto:bert.hubert@netherlabs.nl">bert.hubert@netherlabs.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Download from:<br>
<br>
<a href="http://downloads.powerdns.com/releases/pdns-2.9.22-rc1.tar.gz" target="_blank">http://downloads.powerdns.com/releases/pdns-2.9.22-rc1.tar.gz</a><br>
<a href="http://downloads.powerdns.com/releases/deb/stable/pdns-static_2.9.22-rc1-1_i386.deb" target="_blank">http://downloads.powerdns.com/releases/deb/stable/pdns-static_2.9.22-rc1-1_i386.deb</a><br>
<a href="http://downloads.powerdns.com/releases/rpm/pdns-static-2.9.22rc1-1.i386.rpm" target="_blank">http://downloads.powerdns.com/releases/rpm/pdns-static-2.9.22rc1-1.i386.rpm</a><br>
<br>
2.9.22 will be a very important PowerDNS release, especially since it<br>
contains so much change compared to <a href="http://2.9.21." target="_blank">2.9.21.</a><br>
<br>
This is why the full 2.9.22 release is preceeded by several Release<br>
Candidates. It is expected that this second candidate will be followed by a<br>
third, which might actually be renamed into <a href="http://2.9.22." target="_blank">2.9.22.</a><br>
<br>
Some major sites already run this version, totalling over 130,000 domains,<br>
so things appear to work pretty well.<br>
<br>
We sincerely hope more people will help test this release. If you report<br>
success, or failure, we'll insert your name below in the release notes. This<br>
is an easy way to contribute to the success of PowerDNS, and get your name<br>
immortalised!<br>
<br>
Finally - this RC also protects against the issue for which <a href="http://2.9.21.2" target="_blank">2.9.21.2</a> was<br>
released this morning. So even from a security perspective, it makes sense<br>
to test this release.<br>
<br>
Provisional Release notes<br>
-------------------------<br>
(available with clickable links on<br>
<a href="http://doc.powerdns.com/changelog.html#CHANGELOG-AUTH-2-9-22" target="_blank">http://doc.powerdns.com/changelog.html#CHANGELOG-AUTH-2-9-22</a> )<br>
<br>
This is a huge release, spanning almost 18 months of<br>
development. Besides fixing a lot of bugs, of note is the<br>
addition of the so called 'Notification Proxy', which allows<br>
PowerDNS to function as a master server behind a firewall, plus<br>
the huge performance improvement of the internal caches.<br>
<br>
This work has been made possible by UPC Broadband and Directi,<br>
respectively.<br>
<br>
Finally, the release candidates of this version have been<br>
tested & improved by Jorn Ekkelenkamp, Ton van Rosmalen, Jeff<br>
Sipek, Tyler Hall, Christof Meerwald, Stefan Schmidt, *your name*.<br>
<br>
Fixed between rc1 and rc2, but not an issue in <a href="http://2.9.21." target="_blank">2.9.21.</a><br>
<br>
* pdns_control ccounts again outputs proper cache statistics.<br>
Implemented in commit 1304.<br>
* Negative query caching was reinstated, leading to 6 times<br>
less backend queries than rc1 on the <a href="http://Express.powerdns.com" target="_blank">Express.powerdns.com</a><br>
servers.<br>
* Packetcache no longer needlessly parses outgoing packets<br>
before sending them.<br>
* Fancy records work again. This work has been sponsored by<br>
ISP Services. Implemented in commit 1302 and commit 1299.<br>
* pdns_control over TCP/IP is now more reliable.<br>
<br>
New features:<br>
<br>
* pdns_control can now also work over TCP/IP. Sponsored by<br>
Directi. Commits 1246, 1251, 1254, 1255.<br>
* Implemented a notification proxy, see Section 19.1. This<br>
work was sponsored by UPC Broadband. Implemented in commits<br>
1075, 1077, 1082, 1083, 1085 and 1086.<br>
* IXFR queries are now supported in the sense that we treat<br>
them as AXFR queries, silencing warnings in other<br>
nameservers. Suggested in ticket 131.<br>
* The PIPE backend has been extended by David Apgar to allow<br>
the reporting of errors using the 'FAIL' command, plus<br>
support for responses with whitespace. Implemented in<br>
commit 1114.<br>
* PowerDNS Authoritative server now parses incoming EDNS<br>
options, like maximum allowed packet size. Implemented in<br>
commit 1123 and commit 1281.<br>
* Added support for DHCID, IPSECKEY and KX records, thanks<br>
Norbert Sendetzky for the hint. Implemented in commit 1144.<br>
* Norbert Sendetzky has has added support for all record<br>
types supported by PowerDNS to the LDAPBackend.<br>
Furthermore, the detection of OpenLDAP in autoconf has been<br>
improved. Finally, debian has supplied some fixes to<br>
PowerLDAP. Implemented in commit 1152 and commit 1153.<br>
* Implemented EDNS NSID option for retrieving the nameserver<br>
ID out of band. Defaults to hostname, can be specified<br>
using the server-id setting. Code in commit 1232.<br>
* Implemented experimental EDNS PING for enhanced forgery<br>
resilience. Code in commit 1232.<br>
<br>
Performance:<br>
<br>
* Improve packet generation performance, in some cases by<br>
25%. Code in 1258, 1259.<br>
* Improved access list checking performance. commit 1261.<br>
* PowerDNS Authoritative caches were completely redone, and<br>
are now based on the same cache that is in the resolver.<br>
This work has been sponsored by Directi. In large<br>
benchmarks, PowerDNS performance has improved by an order<br>
of magnitude or more. This new version allows for<br>
near-instantaneous cache purging, plus very rapid purging<br>
based on suffix. Purge commands can also be batched. This<br>
work is partially based on an innovative reverse-string<br>
comparison function authored by Aki Tuomi.<br>
* Installations which run with very high cache hitrates can<br>
now benefit from multiple CPUs by setting receiver-threads<br>
to the number of desired CPUs to utilize in cache<br>
operations. Implemented in commit 1316.<br>
* BIND backend speedups in commit 1108, measured at around a<br>
20% improvement, possibly more on very large setups.<br>
<br>
Bugs fixed:<br>
<br>
* Tyler Hall discovered the PowerDNS configuration file<br>
parser had problems with trailing tabs. This turned out to<br>
be a wider problem in PowerDNS. Buggy code replaced by a<br>
library call in commit 1237 and commit 1240.<br>
* Connection reset by peer events in the TCP nameserver no<br>
longer lead to the cycling of database connections. Code in<br>
commit 1241.<br>
* FreeBSD compilation with Generic PostgreSQL backend was<br>
fixed. Reported by Wouter de Jong of WideXS, fixed in<br>
commit 1305, closes ticket 95.<br>
* Webserver no longer prints '1e2%'. Finally closes ticket<br>
26. Much friendly nagging for over 3 years by Jeff Sipek,<br>
code in commit 1303.<br>
* PowerDNS used to ignore certain queries it could not<br>
answer. These queries are no longer ignored, but get a<br>
SERVFAIL response. Implemented in commit 1239.<br>
* Fix subtle CNAME and wildcard interactions reported by<br>
'zzyzz', implemented in commit 1147.<br>
* The generic backends did not honour the default-ttl<br>
setting. Spotted and implemented by Matti Hiljanen.<br>
* Matti Hiljanen discovered that the OpenDBX backend did not<br>
fill out the SOA ttl value properly. Matti also improved<br>
the SQL statements for better compatability. Implemented in<br>
commit 1181.<br>
* Treat invalid WWW requests better. Spotted by Maikel<br>
Verheijen, implemented in commit 1092.<br>
* Documentation errors and typos, spotted by Marco Davids<br>
(commit 1097) and Rejo Zengers (commit 1119)<br>
* Properly fill out the 'recursion available'-flag. Spotted<br>
by Augie Schwer in ticket 167.<br>
* Several memory leaks on bad data in the database or other<br>
errors have been fixed. Addressed in 1078 and 1079.<br>
* In contravention to the documentation, the domain type as<br>
specified in the database ('MASTER', 'SLAVE' or 'NATIVE')<br>
was interpreted case sensitively. 1084.<br>
* BIND backend could crash on processing information about<br>
slave zones to be checked. Spotted by Stefan Schmidt, fixed<br>
in 1089.<br>
* Jelte Jansen of Stichting NLNetLabs discovered PowerDNS in<br>
BIND mode couldn't operate as a root-server! Fixed in 1057.<br>
* 'DPS' discovered there was a rare opportunity for PowerDNS<br>
to lock up waiting for new data. Addressed in 1076.<br>
* Make singlethreaded mode more resilient against errors.<br>
commit 1272.<br>
* DNSSEC records were part of 2.9.21, but were not actually<br>
hooked up. Please note that while PowerDNS can serve most<br>
DNSSEC records, it does not do DNSSEC processing.<br>
Implemented in 1046.<br>
* Shawn Starr migrated all his domains to PowerDNS in one<br>
evening, from an installation that had been used since<br>
BIND4. In doing so, he found 3 bugs in as many hours. An IN<br>
statement in the BIND named.conf with a zone with a<br>
trailing dot was misparsed, fixed in commit 1233. Secondly,<br>
the zonefile parser tripped over a line consisting of<br>
nothing but comments in the wrong place. Finally '$ORIGIN<br>
.' was misparsed. Last two issues fixed in commit 1234.<br>
* Our statistics counters did not wrap correctly after the<br>
2.15 billion mark. Spotted by Stefan Schmidt, reported in<br>
ticket 179, fixed in commit 1284.<br>
* Bindbackend could sometimes generate very strange error<br>
messages while processing a malformed zone file. Sometimes<br>
such error messages could cause a crash (reported on<br>
HP-UX). Addressed by commit 1279. This could not be<br>
triggered remotely. Closes ticket ticket 203.<br>
* Pipe backend did not clean up killed coprocesses. Found and<br>
fixed by Daniel Drown<br>
* Installations with tens of thousands of slave domains would<br>
never complete the cycle to check the freshness of all<br>
zones as each incoming notification disrupted this cycle.<br>
Addressed in cooperation with Tyler Hall of EditDNS.<br>
<br>
Improvements:<br>
<br>
* Zoneparser improvements mean $TTL and $INCLUDES now work a<br>
lot better. Implemented in 1056, 1062.<br>
* Direct queries for 'fancy records' would lead to errors,<br>
such queries now fail early. Spotted by Jorn Ekkelenkamp,<br>
implemented in 1051.<br>
* Fix typo in geobackend, closing ticket 157, implemented in<br>
1090.<br>
* Initial work on TSIG support - not done yet. Spurred on by<br>
Marco Davids.<br>
* Embarrassingly, the 'master' configuration setting was not<br>
documented in the list of all settings!<br>
* Norbert has updated OpenDBX so that SQLite reads and writes<br>
no longer deadlock, plus compliation fixes on Solaris, plus<br>
the addition of autoserials to backends that support<br>
triggers. Implemented in commit 1154.<br>
* Random generator is now based on AES, improving the<br>
security of certain proxy operations. This is the same<br>
random generator that is in the recursor. Implemented in<br>
commit 1256.<br>
* Documentation for 'supermaster' mode was improved due to<br>
popular demand.<br>
* When binding to a UDP port failed, supply a more precise<br>
error message (commit 1245)<br>
* The zoneparser error messages were vastly improved,<br>
partially inspired by Shawn's cowboy migration. Code in<br>
commit 1235.<br>
* Labels are compressed more efficiently<br>
(case-insensitively), leading to smaller packets.<br>
Implemented in commit 1156.<br>
* Fix handling of TCP timeouts to not cause a reload of the<br>
backends. Implemented in commit 1092.<br>
* TCP Receiver no longer spams the log with common network<br>
errors. Implemented in commit 1306.<br>
* Move from select() to poll()-based multiplexing, allowing<br>
PowerDNS to listen on more than 1024 sockets<br>
simultaneously. One big PowerDNS user needs this.<br>
Implemented in 1072.<br>
* Zone2sql now reads source files in performance enhancing<br>
inode order. Additionally, zone2sql no longer dies on a<br>
missing zone file if --on-error-resume-next was specified.<br>
Finally, statistics of zone2sql confersion have been<br>
improved. Implemented in 1055.<br>
* Address issues found by more recent g++ versions. Spotted<br>
and/or fixed by Jorn Ekkelenkamp (commit 1051), Marcus<br>
Rueckert (commit 1094), Norbert Sendetzky (commit 1107),<br>
Serge Belyshev (commit 1171).<br>
* The Intel C Compiler implements certain things differently,<br>
causing the master/slave communicator to malfunction.<br>
Spotted by Marcus Rueckert, implemented in 1052, plus<br>
fallout in 1105.<br>
* PowerDNS can now be compiled with Boost <a href="http://1.37.0." target="_blank">1.37.0.</a><br>
* Andre Lorbach of Adiscon discovered the microsoft windows<br>
2003 nameserver adds out of zone data to zonetransfers,<br>
which we need to ignore, instead of rejecting the entire<br>
zone. Implemented in 1048.<br>
* PowerDNS now skips remote master servers which consistently<br>
generate timeout messages, improving the master checking<br>
cycle time tremendously. Developed in cooperation with<br>
Tyler Hall. Implemented in commit 1278.<br>
* When binding to a UDP port failed, supply a more precise<br>
error message (commit 1245)<br>
* dnsreplay now waits for the final answers to arrive, making<br>
it possible to process even small pcap files and get<br>
meaningful statistics. commit 1268.<br>
* dnsreplay has a more sane default timeout now, which can be<br>
configured too. Suggested by Augie Schwer in ticket 163,<br>
implemented in commit 1287.<br>
<font color="#888888"><br>
<br>
<br>
--<br>
<a href="http://www.PowerDNS.com" target="_blank">http://www.PowerDNS.com</a> Open source, database driven DNS Software<br>
<a href="http://netherlabs.nl" target="_blank">http://netherlabs.nl</a> Open and Closed source services<br>
_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a><br>
<a href="http://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank">http://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</font></blockquote></div><br>