Changelogs for 4.7.x

4.7.3

Released: 9th of December 2022

This is release 4.7.3 of the Authoritative Server. It contains various fixes.

Improvements

• API: slightly clearer message when a backend cannot create domains

  References: pull request 12296

Bug Fixes

• lmdb: make outgoing notifications work

  References: pull request 12299

• lmdb: implement alsoNotifies

  References: pull request 12266

• API: do not create SOA and NS records for consumer zones

  References: pull request 12291

• API: fix newly created zone not rectified

  References: pull request 12273

• fix invalid catalog zone sql query for gpgsqlbackend

  References: pull request 12272

• fix pdns_control list-zones

  References: pull request 12181

4.7.2

Released: 1st of November 2022

This is version 4.7.2 of the Authoritative Server. It fixes one bug spotted after the release of 4.7.0, for which we forgot to include the fix in 4.7.1.

Bug Fixes

• Un-reverse xfr freshness check

  References: pull request 12130

4.7.1

Released: 31st of October 2022

This is version 4.7.1 of the Authoritative Server. It fixes a few bugs spotted after the release of 4.7.0.

Bug Fixes

• include auth 4.7 schema upgrade files in tarballs and packages

  References: pull request 12110

• catalog zones: avoid bulk zone reset while migrating to a catalog (Kees Monshouwer)

  References: pull request 12124

• catalog zones: stop wasting options update queries (Kees Monshouwer)

  References: pull request 12124

4.7.0

Released: 20th of October 2022

This is version 4.7.0 of the Authoritative Server.

4.7.0 brings support for Catalog Zones, developed by Kees Monshouwer. As part of that development, the freshness checks in the Primary code were reworked, reducing them from doing potentially thousands of SQL queries (if you have thousands of domains) to only a few. Installations with lots of domains will benefit greatly from this, even without using catalog zones.

4.7.0 also brings back GSS-TSIG support, previously removed for quality reasons, now reworked with many stability improvements.

Other things of note:

• LUA records, when queried over TCP, can now re-use a Lua state, giving a serious performance boost.
• lmdbbackend databases now get a UUID assigned, making it easy for external software to spot if a database was completely replaced
• lmdbbackend databases now optionally use random IDs for objects
• a new LUA function called ifurlextup, and improvements in other LUA record functions
• autoprimary management in pdnsutil and the HTTP API
• in beta, a key roller daemon, currently not packaged

Please make sure to read the upgrade notes before upgrading.

Besides that, various other smaller features and improvements have landed - please browse the list below.

Improvements

• pdnsutil check-zone, skip metadata check for backends without getAllDomainMetadata() (Kees Monshouwer)

  References: pull request 12085

Bug Fixes

• Fix compilation of the event ports multiplexer (Jonathan Perkin)

  References: pull request 12069

• fix axfr for tinydns and pipe backend (Kees Monshouwer). Note that this was only broken since 4.7.0-beta2.

  References: pull request 12098

4.7.0-rc1

Released: 3rd of October 2022

This is the first release candidate for Authoritative Server 4.7.0.

4.7.0 brings support for Catalog Zones, developed by Kees Monshouwer. As part of that development, the freshness checks in the Primary code were reworked, reducing them from doing potentially thousands of SQL queries (if you have thousands of domains) to only a few. Installations with lots of domains will benefit greatly from this, even without using catalog zones.

4.7.0 also brings back GSS-TSIG support, previously removed for quality reasons, now reworked with many stability improvements.

Other things of note:

• LUA records, when queried over TCP, can now re-use a Lua state, giving a serious performance boost.
• lmdbbackend databases now get a UUID assigned, making it easy for external software to spot if a database was completely replaced
• lmdbbackend databases now optionally use random IDs for objects
• a new LUA function called ifurlextup, and improvements in other LUA record functions
• autoprimary management in pdnsutil and the HTTP API
• in beta, a key roller daemon, currently not packaged

Please make sure to read the upgrade notes before upgrading.

Besides that, various other smaller features and improvements have landed - please browse the list below.

New Features

• add keyroller

  References: pull request 12042

Improvements

• pdnsutil edit-zone, detect capitalization changes in LUA, TXT and SPF records (Kees Monshouwer)

  References: pull request 12040

• clang14 has reached MacOS

  References: pull request 12029

• docker: upgrade to bullseye

  References: pull request 11972

Bug Fixes

• AXFR server: abort on chunk with TC set

  References: pull request 12043

• axfr-retriever: abort on chunk with TC set

  References: pull request 12030

4.7.0-beta2

Released: 13th of September 2022

This is the first published beta for Authoritative Server 4.7.0. (beta1 was never released because of bugs found during the release process).

4.7.0 brings support for Catalog Zones, developed by Kees Monshouwer. As part of that development, the freshness checks in the Primary code were reworked, reducing them from doing potentially thousands of SQL queries (if you have thousands of domains) to only a few. Installations with lots of domains will benefit greatly from this, even without using catalog zones.

4.7.0 also brings back GSS-TSIG support, previously removed for quality reasons, now reworked with many stability improvements.

Other things of note:

• LUA records, when queried over TCP, can now re-use a Lua state, giving a serious performance boost.
• lmdbbackend databases now get a UUID assigned, making it easy for external software to spot if a database was completely replaced
• lmdbbackend databases now optionally use random IDs for objects
• a new LUA function called ifurlextup, and improvements in other LUA record functions
• autoprimary management in pdnsutil and the HTTP API

Please make sure to read the upgrade notes before upgrading.

Besides that, various other smaller features and improvements have landed - please browse the list below.

New Features

• Implement catalog zones in the authoritative server (Kees Monshouwer)

  References: pull request 11772, pull request 11822, pull request 11825, pull request 11836

• Extend LUA records (rage4)

  References: pull request 11588

• RSA, ECDSA PEM import/export

  References: pull request 11414, pull request 11426, pull request 11432, pull request 11493, pull request 11590

• auth API: fetch individual rrsets

  References: pull request 11389

• reintroduce GSS-TSIG support

  References: pull request 11143

• New setting compare-signatures-on-zone-freshness-check to disable DO flag for SOA checks

  References: pull request 11508

Improvements

• some small NSEC3PARAM-related fixes to the REST API (Kees Monshouwer)

  References: pull request 11918

• LUA records: make shared mode work for TCP queries

  References: pull request 11760, pull request 11929, pull request 11933

• Also allow generic record format in zone parsing for pdnsutil zonemd-verify-file

  References: pull request 11727

• pdnsutil flush prompt (norve)

  References: pull request 11340

• Change dns_tolower() and dns_toupper() to use a table

  References: pull request 11655

• auth packaging: add DoT support to sdig

  References: pull request 11639

• Tweak for Coverity 1488422

  References: pull request 11599

• Try harder to find libdecaf headers

  References: pull request 11562

• lmdb: make map size configurable

  References: pull request 11328

• web: stop sending Server: header

  References: pull request 11813

• libssl: Properly load ciphers and digests with OpenSSL 3.0

  References: pull request 11862

Bug Fixes

• use getInnerRemote() for the remotes ring (Kees Monshouwer)

  References: pull request 11842

• make sure a notified zone is in the zone cache (Kees Monshouwer)

  References: pull request 11815

• getTSIGKey(s) cleanup (Kees Monshouwer)

  References: pull request 11755, pull request 11759

• fix deleteDomain() in lmdb backend (Kees Monshouwer)

  References: pull request 11764

• 2136: match autosplit TXT more usefully

  References: pull request 11738

• no ALIAS and LUA record expansion in presigned zones (Kees Monshouwer)

  References: pull request 11350

• ixfr: Fix a case where an incomplete read caused by network error might result in a truncated zone

  References: pull request 11466

• fix proxy protocol query statistics (Kees Monshouwer)

  References: pull request 11314

• lmdb random-ids: stop generating negative numbers

  References: pull request 11354

• Log “NULL” for nullptr-bound properties instead of dereferencing

  References: pull request 11882

• initialize zone cache after dropping privileges

  References: pull request 11908

• Fix libcrypto handling in automake files

  References: pull request 11860

4.7.0-beta1

Released: never

Bugs were found after beta1 was tagged.

4.7.0-alpha1

Released: 17th of February 2022

This is version 4.7.0-alpha1 of the Authoritative Server. This release contains a few new features compared to 4.6, and a couple of other fixes/changes.

New features:

• lmdbbackend databases now get a UUID assigned, making it easy for external software to spot if a database was completely replaced
• lmdbbackend databases now optionally use random IDs for objects
• a new LUA function called ifurlextup
• autoprimary management in pdnsutil and the HTTP API

Please make sure to read the upgrade notes before upgrading.

New Features

• lmdb: add random ID generation feature

  References: pull request 11309

• auth LUA: add ifurlextup function

  References: pull request 11227

• auth lmdb: add a UUID to newly created databases

  References: pull request 11241

• new pdnsutil zonemd-verify-file command

  References: pull request 11100

• auth: add autoprimary management in API & pdnsutil

  References: pull request 11102

Improvements

• el7 builds: switch to boost 1.69

  References: pull request 11315

• builder: migrate EL8 builds to oraclelinux, rename centos8 to el8 where possible

  References: pull request 11262

• libssl: fix compilation issues on older openssl versions

  References: pull request 11108

Bug Fixes

• lmdb: default values for KeyDataDB members, thanks ubsan

  References: pull request 11306

• save errno value as close(2) might clobber it

  References: pull request 11101