[nsd-users] NSD 4.14.1 release

Willem Toorop willem at nlnetlabs.nl
Tue Feb 24 09:30:02 UTC 2026


Dear all,

NSD 4.14.1 release is available:

https://nlnetlabs.nl/downloads/nsd/nsd-4.14.1.tar.gz
sha256 d3fd50a567551ccd606a11a05613e8b00e70686e3a98b9e95285ac045978f969
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.14.1.tar.gz.asc

The previous release promised reduced memory footprint from refactored 
RDATA storage (and it did for the vast majority of cases), but just 
after the release, we received a report that NSD was consuming more 
memory for specific kind of zones (with RRsets consisting of many RRs). 
This release has that addressed so that NSD now consumes less memory in 
all cases and circumstances. A blog post highlighting these memory 
reductions is available at:

- 
https://blog.nlnetlabs.nl/smaller-faster-nsds-refactored-rdata-storage-and-compile-time-memory-reduction-options/


4.14.1
================
FEATURES:
- Merge #469 from jschlyter: Add container build files
BUG FIXES:
- Fix to note DSYNC RFC9859 reference.
- Fix to note reference for NXNAME in comment.
- Merge #470 from jschlyter: Update path to default container
   configuration and entrypoint
- Fix rr-test.tdir so AMTRELAY relay field is "." with type 0
- Fix checkconf.tdir test to anticipate default values for
   send-buffer-size and receive-buffer-size when configured with 0
- skip dns-cookies.tdir test with restricted unpriviledged userns
- Fix #474: metrics output with zone statistics to change
   disallowed characters in metric names to underscores.
- Fix that non normalized NSEC next owner names are preserved.
- Fix to preserve case in literal dnames in RR types RRSIG,
   IPSECKEY, TALINK, DSYNC and AMTRELAY.
- Fix for #474: Fix metrics name for zone statistics for
   the queries_total to have disallowed characters changed
   to underscores.
- Fix to silence restricted userns check in test script.
- Fix #475 info: axfr for domain from not-verified.
- Fix metrics to clear server variable after close and log error
   on allocation failure.
- Fix to escape slashes when they appear in the zone name for a
   pattern zonefile that is created. Also for per zone statistics.
- Merge #472: Reduce memory usage with zones with RRsets
   consisting of many RRs.
- Fix man page for ip-address, add text about process numbers,
   bindtodevice and setfib.
- Fix systemd signalling so that it does not reload for too long.
   The reload is not signalled to systemd, so that long operations
   can complete, without systemd acting on a timer to stop them.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE5F8F8212F77A498.asc
Type: application/pgp-keys
Size: 6254 bytes
Desc: OpenPGP public key
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20260224/04472f0a/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20260224/04472f0a/attachment-0001.bin>


More information about the nsd-users mailing list