[Pdns-users] PowerDNS Recursor 4.4.0 Released

[Otto Moerbeek]

Hello!

We are proud to announce the release of PowerDNS Recursor 4.4.0.

Compared to the last release candidate, this release contains a fix
for the cache pollution issue described in security advisory
2020-07[1]. Please refer to the changelog[2] for details.

Compared to the 4.3 release of PowerDNS Recursor, this release
contains these major enhancements:

- Native DNS64 support, without the need to use Lua.

- The ability to add custom tags to RPZ hits.

- Names encountered while resolving CNAMEs are now subject to RPZ
  processing.

- More detailed information about RPZ handling is now available while
  tracing, in Lua and in the protobuf logging messages.

- To allow more efficient use, the record cache is now shared between
  threads.

- A routing tag[3] can be added in Lua code, which will be used as an
  additional record cache key instead of an EDNS subnet mask,
  enabling for a simpler record cache structure which will enhance
  query processing where the EDNS subnet mask is relevant.

- The Proxy Protocol version 2 has been implemented to allow for a
  structured exchange of information between a client (typically
  dnsdist) and the Recursor. See the documentation[4] for details.

We are grateful to all reporters of bugs, issues, feature requests,
and submitters of fixes and features. We also like to thank anybody
who tested the pre-releases.

Please note that with this release, the 4.1.x branch will be marked
End of Life and the 4.2.x branch will go into critical security update
mode only. See our release cycle document[5] for more details. The
upgrade[6] notes contain information that helps doing upgrades from
previous versions.

The tarball[7] (signature[8]) is available at our download site[9] and
packages for CentOS 7 and 8, Debian Stretch and Buster, Ubuntu Xenial,
Bionic and Focal are available from our repository[10].

Please send us all feedback and issues you might have via the mailing
list[11], or in case of a bug, via GitHub[12].

Best regards,

 -Otto and the PowerDNS Team

[1] https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html
[2] https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.0
[3] https://docs.powerdns.com/recursor/lua-scripting/hooks.html#gettag
[4] https://docs.powerdns.com/recursor/settings.html#proxy-protocol-from
[5] https://docs.powerdns.com/recursor/appendices/EOL.html
[6] https://docs.powerdns.com/recursor/upgrade.html#x-to-4-4-0-or-master
[7] https://downloads.powerdns.com/releases/pdns-recursor-4.4.0.tar.bz2
[8] https://downloads.powerdns.com/releases/pdns-recursor-4.4.0.tar.bz2.sig
[9] https://downloads.powerdns.com/releases/
[10] https://repo.powerdns.com/
[11] https://mailman.powerdns.com/mailman/listinfo/pdns-users
[12] https://github.com/PowerDNS/pdns/issues/new/choose


-- 
kind regards,
Otto Moerbeek
Senior PowerDNS Developer

Email: otto.moerbeek at open-xchange.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20201019/c8369750/attachment.sig>