[dnsdist] dnsdist 1.7.2 released

Remi Gacogne remi.gacogne at powerdns.com
Tue Jun 14 09:51:14 UTC 2022


Hello!

We are very happy to release dnsdist 1.7.2 today, a maintenance release 
fixing a few bugs reported since 1.7.1:

- An unhandled exception could happen when an invalid protocol was used 
in an incoming DNS over HTTPS forwarded-for header and passed to the 
backend via the proxy protocol, leading to a use-after-free and a crash. 
Forwarded-for headers are not used by default and should only be used if 
the client can be trusted (#11667)
- An invalid proxy-protocol was sent to the backend, over TCP, if a 
query received via DNS over HTTPS resulted in a truncated UDP response 
from the backend (#11665)
- Some metrics lacked a proper description in our Prometheus endpoint 
(#11664)
- A side-effect of fixing the health-check timeout in 1.7.1 was leading 
to a CPU usage increase on devices that are mostly idle. We improved 
that situation, reducing the CPU usage even below what it was in 1.7.0 
(#11579, #11580)

We also added a couple Lua bindings to make it easier to look into the 
DNS payload from custom Lua rules and actions (#11666).

Please see the dnsdist website [1] for the more complete changelog [2] 
and the current documentation.

Please send us all feedback and issues you might have via the mailing 
list, or in case of a bug, via GitHub [3].

The release tarball [4] and its signature [5] are available on the 
downloads website, and packages for several distributions are available 
from our repository [6].

Finally, we would like to thank the PowerDNS community and all external 
contributors for their great work in this release!

[1]: https://dnsdist.org
[2]: https://dnsdist.org/changelog.html#change-1.7.2
[3]: https://github.com/PowerDNS/pdns/issues/new/choose
[4]:
https://downloads.powerdns.com/releases/dnsdist-1.7.2.tar.bz2
[5]:
https://downloads.powerdns.com/releases/dnsdist-1.7.2.tar.bz2.sig
[6]: https://repo.powerdns.com

-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20220614/1ca69e19/attachment.sig>


More information about the dnsdist mailing list