NSD 4.2.1rc1 pre-release

Hi,

NSD 4.2.1rc1 prerelease is available!
https://nlnetlabs.nl/downloads/nsd/nsd-4.2.1rc1.tar.gz
sha256 e1d58c3ee83242760696b9aaf27fd1e09f9bfed96020bc8462e0141ddcb11d41
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.2.1rc1.tar.gz.asc

This is the pre-release for NSD 4.2.1rc1.

This release fixes issues in the stream handling, from 4.2.0, but also
earlier, in the event handling of streams.

The new statistics counters for TLS can give information about how many
incoming DNS over TLS connections for queries have been received.

There are two new options to set the buffer sizes for the network
sockets, this allows an increase for servers that want a bigger size
than the default, which is already an increase over the system default.
Increased buffer size for a network socket helps with traffic spikes.
The options are send-buffer-size and receive-buffer-size, they set their
respective socket options for buffer space.

When an AXFR download is in progress, to a client, and the zone is
updated at that same time, then NSD no longer resets the connection, but
allows that transfer to complete.

The tcp-reject-overflow option can be used to close all connections that
are incoming when the server is full on TCP connections, this stops
those connections from waiting for a spot.

4.2.1

Hello Wouter,

As challenge I forced my unbound to only talk TLS to nsd. works ...

Andreas

Hi,

NSD 4.2.1 is available!
https://nlnetlabs.nl/downloads/nsd/nsd-4.2.1.tar.gz
sha256 d17c0ea3968cb0eb2be79f2f83eb299b7bfcc554b784007616eed6ece828871f
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.2.1.tar.gz.asc

This release fixes issues in the stream handling, from 4.2.0, but also
earlier, in the event handling of streams.

The new statistics counters for TLS can give information about how many
incoming DNS over TLS connections for queries have been received.

There are two new options to set the buffer sizes for the network
sockets, this allows an increase for servers that want a bigger size
than the default, which is already an increase over the system default.
Increased buffer size for a network socket helps with traffic spikes.
The options are send-buffer-size and receive-buffer-size, they set their
respective socket options for buffer space.

When an AXFR download is in progress, to a client, and the zone is
updated at that same time, then NSD no longer resets the connection, but
allows that transfer to complete.

The tcp-reject-overflow option can be used to close all connections that
are incoming when the server is full on TCP connections, this stops
those connections from waiting for a spot.

4.2.1