Knot DNS

Features: knotd: new module mod-authsignal for automatic authenticated DNSSEC bootstrapping records synthesis (Thanks to Peter Thomassen) kzonecheck: new optional ZONEMD verification (see option '-z') Improvements: knotd: new DNSSEC key rollover …

Features: knotd: new configuration item for clearing configuration sections (see 'clear') knotc: configuration import can preserve database contents (see '+nopurge' flag) kxdpgun: new parameter for setting UDP payload size in …

Features: knotd: new 'pattern' mode of ACL update owner matching (see 'acl.update-owner-match') knotc: new '+keysonly' filter for zone backup/restore Improvements: knotd: zone purging waits for finished zone expiration …

Improvements: knotd: zone purging waits for finished zone expiration for better reliability doc: various fixes and extensions Bugfixes: knotd: zone backup fails due to improper backup context deinitialization #891 knotd …

Features: knotd: support for IXFR from AXFR computation (see 'zone.ixfr-from-axfr') knotd: support benevolent IXFR (see 'zone.ixfr-benevolent') knot-exporter: new configuration option '--no-zone-serial' #880 Improvements: libs: upgraded embedded libngtcp2 to …

Improvements: keymgr: improved error message if a key file is not accessible keymgr: added offline RRSIGs validation at the end of their validity intervals doc: fixed some typos Bugfixes: knotd …

Improvements: knotd: multiple catalog groups per member are tolerated, but only one is used modules: added const qualifier to various function parameters #877 (Thanks to Robert Edmonds) libs: upgraded embedded …

Improvements: knotd: multiple catalog groups per member are tolerated, but only one is used knotd: server cleans up stale LMDB readers when opening a RW transaction Bugfixes: knotd: server can …

Features: knotd: full DNS over QUIC (DoQ, RFC 9250) implementation, also without XDP knotd: bidirectional XFR over QUIC (XoQ) support with opportunistic, strict, and mutual authentication profiles knotd: automatic reverse …

Improvements: keymgr: 'import-pkcs11' not allowed if no PKCS #11 keystore backend is configured keymgr: more verbose key import errors doc: extended migration notes doc: various improvements Bugfixes: knotd: server may …