[Pdns-users] PowerDNS DNSdist 2.1.0 Released

[Remi Gacogne]

Hello!

Today we are thrilled to be releasing PowerDNS DNSdist 2.1.0.

This new version brings several bug fixes since the first release 
candidate, including security issues that have been recently fixed in 
stable branches[1].

Compared to 2.0, 2.1 brings many new features:

- OpenTelemetry tracing support has been added
- Structured logging has been added
- A and AAAA records can now be shuffled in the packet cache (Karel Bilek)
- Lua parsers are now available for A, AAAA and CNAME records (Ensar 
Sarajčić)
- A Lua hook can now be invoked on server state changes (@pacnal)
- Add prepend and append methods to Lua DNSName
- Export DNS flags via ProtoBuf
- Add actions, methods and FFI functions to unset a tag
- Implement "allowed rcodes/total" ratio dynamic rule
- Subnets excluded from dynamic rules should not count towards thresholds
- Add a Lua callback to validate health-check responses
- IPCrypt2 PFX support has been added, to preserve network prefix 
relationships in encrypted output

It also contains many performance improvements:

- Load-balancing policies are more efficient
- Server selection using the load-balancing policy is now entirely 
skipped on cache hits
- Holger Hoffstätte improved the "roundrobin" load-balancing policy
- AF_XDP / XSK packets are now reused more efficiently
- The in-memory ring buffers now support sampling to be able to retain 
data for a longer time period without keeping too many entries in memory

Please be aware that DNSdist now looks by default for a configuration 
file named "dnsdist.yml" in the systemd configuration directory, instead 
of "dnsdist.conf". It will however fall back for a "dnsdist.conf" file 
if there is no "dnsdist.yml" file, so existing configurations should 
still work as expected.

Other notable changes are the removal of DNS over HTTPS support via the 
h2o library, meaning DNS over HTTPS is now only available via the 
nghttp2 library.

Please see the DNSdist website [2] for the more complete changelog [3] 
and the current documentation. The upgrade guide is also available there 
[4].

Please send us all feedback and issues you might have via the mailing 
list, or in case of a bug, via GitHub [5].

The release tarball [6] and its signature [7] are available on the 
downloads website, and packages for several distributions are available 
from our repository [8].

Older release trains are supported for one year after the following 
major release. Consult the EOL policy[9] for more details.

[1]: 
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html
[2]: https://dnsdist.org
[3]: https://dnsdist.org/changelog.html#change-2.1.0
[4]: https://dnsdist.org/upgrade_guide.html
[5]: https://github.com/PowerDNS/pdns/issues/new/choose
[6]:
https://downloads.powerdns.com/releases/dnsdist-2.1.0.tar.xz
[7]:
https://downloads.powerdns.com/releases/dnsdist-2.1.0.tar.xz.sig
[8]: https://repo.powerdns.com
[9]: https://www.dnsdist.org/eol.html

Best regards,
-
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20260702/1b729403/attachment.sig>