[dnsdist] PowerDNS DNSdist 1.8.1 released

Remi Gacogne remi.gacogne at powerdns.com
Fri Sep 8 12:08:06 UTC 2023


Hello!

We are very happy to release DNSdist 1.8.1 today, a maintenance release 
fixing a few bugs reported since 1.8.0:

- Several bugs have been fixed in the health-check code, including one 
issue that could have resulted in some health-check responses to be lost
- A crash has been fixed when dealing with DNS over HTTPS queries for 
which a X-Forwarded-For header overrides the initial source IP, which is 
not enabled by default
- Re-connection failures are now more carefully handled for backend UDP 
sockets, avoiding high CPU usage in some network topology changes
- Self-answered UDP responses with recvmmsg are not properly accounted for
- A memory leak when processing TLS tickets with OpenSSL 3.x has been fixed
- Cache hit and miss metrics with DoH queries are now properly accounted for
- Christof Chen fixed an issue with SpoofAction, by copying the QClass 
from the request
- A race has been fixed when creating the first TLS connections to a 
backend, which could have led to sub-optimal TLS session reuse
- Short reads are now properly handled when doing backend upgrade discovery
- Winfried Angele fixed an accidental change of disableZeroScope to 
disableZeroScoping
- The group ownership of the dnsdist.conf file is now properly set when 
installed via RPM
- Houtworm fixed the webserver configuration template for our docker 
container
- phonedph1 fixed the console description of PoolAction and QPSPoolAction

In addition to these fixes, Jacob Bunk made the TSIG query type 
available from Lua, and we improved the accounting of eBPF dynamic blocks.

Finally it is now possible to declare custom metrics at runtime for use 
from Lua, and Lua FFI inspection functions are automatically loaded at 
runtime.

Please see the DNSdist website [1] for the more complete changelog [2] 
and the current documentation. The upgrade guide is also available there 
[3].

Please send us all feedback and issues you might have via the mailing 
list, or in case of a bug, via GitHub [4].

We are immensely grateful to the PowerDNS community for the reporting of 
bugs, issues, feature requests, and especially to the submitters of 
fixes and implementations of features.

The release tarball [5] and its signature [6] are available on the 
downloads website, and packages for several distributions are available 
from our repository [7].

[1]: https://dnsdist.org
[2]: https://dnsdist.org/changelog.html#change-1.8.1
|3]: https://dnsdist.org/upgrade_guide.html#x-to-1-8-0
[4]: https://github.com/PowerDNS/pdns/issues/new/choose
[5]:
https://downloads.powerdns.com/releases/dnsdist-1.8.1.tar.bz2
[6]:
https://downloads.powerdns.com/releases/dnsdist-1.8.1.tar.bz2.sig
[7]: https://repo.powerdns.com

-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20230908/257adb32/attachment.sig>


More information about the dnsdist mailing list