Dear Knot Resolver users,
Knot Resolver 6.0.17 (early-access) has been released!
Improvements:
- kresctl migrate: new command for migrating the configuration to a
newer version (!1672)
- manager: basic support for non-Linux systems (macOS, FreeBSD) (!1758)
- cache: collect garbage based on usage statistics (!1726)
This results in using the cache space better, and in practice
it reduces latency especially in case of answers that are *not* fully
cached.
Incompatible changes:
See upgrading guide for incompatible configuration changes:
https://www.knot-resolver.cz/documentation/v6.0.17/upgrading.html
- Removed options from declarative configuration model (YAML). (!1672,
!1754)
These are mostly experimental and debugging/testing options that are
not useful for general users (remain in Lua):
- /dnssec/refresh-time
- /dnssec/hold-down-time
- /dnssec/time-skew-detection
- /dnssec/keep-removed
- /local-data/root-fallback-addresses*
- /logging/debugging
- /max-workers
- /network/tls/auto-discovery
- /webmgmt
- Renamed/moved options in the declarative configuration model (YAML).
(!1672)
- /cache/garbage-collector -> /cache/garbage-collector/enable
- /cache/prefetch/prediction -> /cache/prefetch/prediction/enable
- /defer/enabled -> /defer/enable
- /dns64: true|false -> /dns64/enable: true|false
- /dns64/rev-ttl -> /dns64/reverse-ttl
- /dnssec: true|false -> /dnssec/enable: true|false
- /dnssec/trust-anchor-sentinel -> /dnssec/sentinel
- /dnssec/trust-anchor-signal-query -> /dnssec/signal-query
- /logging/dnstap -> /logging/dnstap/enable
- /logging/dnssec-bogus -> /dnssec/log-bogus
- /monitoring/enabled -> /monitoring/metrics
- /monitoring/graphite -> /monitoring/graphite/enable
- /network/proxy_protocol -> /network/proxy_protocol/enable
- /network/tls/files-watchdog -> /network/tls/watchdog
- /rate-limiting -> /rate-limiting/enable
- Changed default values in declarative configuration model (YAML). (!1672)
- /logging/dnstap/log-queries: true -> false
- /logging/dnstap/log-responses: true -> false
- /logging/dnstap/log-tcp-rtt: true -> false
Full changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v6.0.17/NEWS
Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-6.0.17.tar.xz
GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-6.0.17.tar.xz.asc
Documentation:
https://www.knot-resolver.cz/documentation/v6.0.17/
--
Ales Mrazek
PGP: 3057 EE9A 448F 362D 7420 5A77 9AB1 20DA 0A76 F6DE