[nsd-users] NSD 4.1.7 release

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

NSD 4.1.7 is available:
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.7.tar.gz
sha1 f1c5801c11605d478a57ff149d55c0534b01cb96
sha256 7ba8beb29b495ab795e927d9aa82a5bb1b66296a78f61ed47d6ccfe59e9b1a8a
pgpsig http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.7.tar.gz.asc

This version fixes TCP on Linux when reuseport is in use.  The
reuseport option is off by default now (gave too many issues), but on
Linux if you enable it, UDP performance should increase a lot.

Furthermore, bugfixes for OpenSSL library compatibility and error
responses fixed for future compatibility.


4.1.7
================
FEATURES:
- - support configure --with-dbfile="" for nodb mode by default, where
  there is no binary database, but nsd reads and writes zonefiles.
- - reuseport: no is the default, because the feature is not troublefree.
- - configure --enable-ratelimit-default-is-off with --enable-ratelimit
  to set the default ratelimit to disabled but available in nsd.conf.
- - version: "string" option to set chaos version query reply string.

BUG FIXES:
- - Fix zones updates from nsd parent event loop when there are a lot
  of interfaces.
- - portability fixes.
- - patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new
  defaults in the ssl libraries.
- - updated contrib/nsd.spec, from Bálint Szigeti, with new configure
  options.
- - Allocate less memory for TSIG digest.
- - Fix #721: Fix wrong error code (FORMERR) returned for unknown
  opcode.  NOTIMP expected.
- - Fix zonec ttl mismatch printout to include more information.
- - Fix TCP responses when REUSEPORT is in use by turning it off.
- - Document default in manpage for rrl-slip, ip4 and 6 prefixlength.
- - Explain rrl-slip better in documentation.
- - Document that ratelimit qps and slip are updated in reconfig.
- - Fix up defaults in manpage.


Best regards, Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=Zbch
-----END PGP SIGNATURE-----