[nsd-users] NSD 4.14.1rc1 pre-release

[Willem Toorop]

Dear all,

NSD 4.14.1 pre-release is available:
https://nlnetlabs.nl/downloads/nsd/nsd-4.14.1rc1.tar.gz
sha256 7ead0bd8d946f3884f08c98e38ce2703f335dd18d80b437982bc0dc7486c76e4
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.14.1rc1.tar.gz.asc

The previous release promised reduced memory footprint from refactored 
RDATA storage (and it did for the vast majority of cases), but just 
after the release, we received a report that NSD was consuming more 
memory for specific kind of zones (with RRsets consisting of many RRs). 
This release will have that addressed so that NSD now consumes less 
memory in all cases and circumstances. A blog post highlighting these 
memory reductions will be posted with the actual release (next week).

Other than that, this release contains bug fixes, among others some that 
emerged with the new RDATA storage code from the previous release.

Please review this pre-release carefully. If no issues arise, the actual
release will follow on Tuesdat 2026-02-24.

4.14.1
================
FEATURES:
- Merge #469 from jschlyter: Add container build files
BUG FIXES:
- Fix to note DSYNC RFC9859 reference.
- Fix to note reference for NXNAME in comment.
- Merge #470 from jschlyter: Update path to default container
   configuration and entrypoint
- Fix rr-test.tdir so AMTRELAY relay field is "." with type 0
- Fix checkconf.tdir test to anticipate default values for
   send-buffer-size and receive-buffer-size when configured with 0
- skip dns-cookies.tdir test with restricted unpriviledged userns
- Fix #474: metrics output with zone statistics to change
   disallowed characters in metric names to underscores.
- Fix that non normalized NSEC next owner names are preserved.
- Fix to preserve case in literal dnames in RR types RRSIG,
   IPSECKEY, TALINK, DSYNC and AMTRELAY.
- Fix for #474: Fix metrics name for zone statistics for
   the queries_total to have disallowed characters changed
   to underscores.
- Fix to silence restricted userns check in test script.
- Fix #475 info: axfr for domain from not-verified.
- Fix metrics to clear server variable after close and log error
   on allocation failure.
- Fix to escape slashes when they appear in the zone name for a
   pattern zonefile that is created. Also for per zone statistics.
- Merge #472: Reduce memory usage with zones with RRsets
   consisting of many RRs.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE5F8F8212F77A498.asc
Type: application/pgp-keys
Size: 6254 bytes
Desc: OpenPGP public key
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20260217/aa2ccd38/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20260217/aa2ccd38/attachment-0001.bin>