[nsd-users] NSD 4.1.22 released

[W.C.A. Wijngaards]

Hi,

NSD 4.1.22 is available:
https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.22.tar.gz
sha256 f186e86705768a35ecb6ac18d1ee4eeec2745fcd1feab38e64f89c5eb5aa049c
pgp https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.22.tar.gz.asc


This release fixes a bug where zone transfers would not succeed, because
of an error in the selective NSEC3 allocation (introduced in 4.1.18).

The refuse ANY query feature now sends truncated answers over UDP and
allows TCP queries.  This is the same size response on UDP as the
refusal but allows the query to succeed over TCP for genuine queriers
that fallback to that transport mechanism.

The release contains a speed up for TCP processing that should NSD
better at handling large numbers of incoming TCP connections.


4.1.22
================
FEATURES:
- refuse-any sends truncation (+TC) in reply to ANY queries over UDP,
  and allows TCP queries like normal.
- Use accept4 to speed up answer of TCP queries, on Linux, FreeBSD
  and OpenBSD.

BUG FIXES:
- Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
- Fix to use same condition for nsec3 hash allocation and free.


Best regards, Wouter


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20180611/5e3af9ad/attachment.bin>