This update for NSD 4 has bug fixes and a couple options (bigger TSIG
hashes, add long lists of zones more easily).
FEATURES:
- - nsd-control addzones and delzones read list of zones from stdin.
- - hmac sha224, sha384 and sha512 support, patch from David Gwynne.
- - max-interfaces raised to 32.
BUG FIXES:
- - Fix #665: when removing subdomain, nsd does not reparse parent zone.
- - Fix task and zonestat files to be stored in a subdirectory in tmp
to stop privilege elevation.
- - Fix crash in zone parser for relative dname after error in origin.
- - Fix that formerrors are ratelimited.
been running on ns0.nohats.ca for two days without any visible problems.
(including serving CDS records)
FEATURES:
- - nsd-control addzones and delzones read list of zones from stdin.
- - hmac sha224, sha384 and sha512 support, patch from David Gwynne.
- - max-interfaces raised to 32.
You mean max-ips?
We always compile with --with-max-ips=1024 due to some demands in the
fields for much higher maximums. Any reason to put the default limit
so low?
been running on ns0.nohats.ca for two days without any visible problems.
(including serving CDS records)
FEATURES:
- - nsd-control addzones and delzones read list of zones from stdin.
- - hmac sha224, sha384 and sha512 support, patch from David Gwynne.
- - max-interfaces raised to 32.
You mean max-ips?
That is right. --with-max-ips determines the number of "interface:"
entries in the config
We always compile with --with-max-ips=1024 due to some demands in the
fields for much higher maximums. Any reason to put the default limit
so low?
I believe the value 32 is a safety measure. pselect is (still) used for
nsd inter process communications (over anonymous sockets). With a high
number of interfaces, the chance on higher numbered file descriptors
(numbers > FD_SETSIZE) becomes larger.
(see also https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=639 )
I'll review thoroughly the coming two weeks and return to you with a
more precise answer.
This update for NSD 4 has bug fixes and a couple options (bigger TSIG
hashes, add long lists of zones more easily).
FEATURES:
- - nsd-control addzones and delzones read list of zones from stdin.
- - hmac sha224, sha384 and sha512 support, patch from David Gwynne.
- - max-interfaces raised to 32.
BUG FIXES:
- - Fix #665: when removing subdomain, nsd does not reparse parent zone.
- - Fix task and zonestat files to be stored in a subdirectory in tmp
to stop privilege elevation.
- - Fix crash in zone parser for relative dname after error in origin.
- - Fix that formerrors are ratelimited.
