published release Authoritative (Authoritate) DNS server PowerDNS Authoritate Server 4.7 intended for organizing the return of DNS zon. By data developers, PowerDns authorite Server serves about 30% of the total number of domains in Europe (if you consider only domains with DNSSEC signatures , then 90%). Project code is distributed under the GPLV2 license.
PowerDns authorite Server provides the ability to store domain information in various databases, including MySQL, POSTGRESQL , SQLITE3, Oracle, and Microsoft SQL Server, as well as in LDAP and ordinary text files in BIND format. The return of the response can be additionally filtered (for example, for firing spam) or redirected by connecting their own handlers in Lua, Java, Perl, Python, Ruby, C and C ++ languages. From the features, funds for remote statistics collection are also allocated, including SNMP or through the Web API (for statistics and controls, an HTTP server is built-in), instant restart, a built-in engine for connecting handlers in LUA, the possibility of load balancing, taking into account the geographical location of the client .
The main innovations :
- Added the support of the zones catalog (“ catalog zones “), which simplifies secondary DNS servers due that instead of determining individual records for each secondary zone on the secondary server, the transmission of the catalog of secondary zones is organized between the primary and secondary servers. After setting up the transmission of the catalog by analogy with the transfer of individual zones, made on the primary server of the zone marked as part of the directory, will automatically be created on a secondary server without the need to edit configuration files. The work of the catalog with storage backens GMYSQL, GPGSQL, GSQLITE3, GODBC and LMDB.
- In the process of implementing the zones catalog, the code is optimized for working with a large number of domains. When storing zones in the DBMS, the number of SQL checks is significantly reduced – instead of a separate request of each domain, a group sample is now made. The change has positively affected the performance of servers serving a large number of zones, even on systems not using the catalog of zones.
- The support mechanism GSS-TSIG, which was previously removed due to vulnerability and potential safety problems, was processed and returned.
- When requesting Lua-records using TCP, the re-use of the LUA state is provided, which significantly increased performance.
- In the database on LMDBBackend, a binding to UUIID and the possibility of generating random identifiers of objects are implemented.
- in pdnsutil and http api added
is supported.