Dear Knot Resolver users,

Knot Resolver 6.0.17 (early-access) has been released!

Improvements:
- kresctl migrate: new command for migrating the configuration to a newer version (!1672)
- manager: basic support for non-Linux systems (macOS, FreeBSD) (!1758)
- cache: collect garbage based on usage statistics (!1726)

  This results in using the cache space better, and in practice
  it reduces latency especially in case of answers that are *not* fully cached.

Incompatible changes:
See upgrading guide for incompatible configuration changes:
https://www.knot-resolver.cz/documentation/v6.0.17/upgrading.html
- Removed options from declarative configuration model (YAML). (!1672, !1754)  
  These are mostly experimental and debugging/testing options that are not useful for general users (remain in Lua):
  - /dnssec/refresh-time
  - /dnssec/hold-down-time
  - /dnssec/time-skew-detection
  - /dnssec/keep-removed
  - /local-data/root-fallback-addresses*
  - /logging/debugging
  - /max-workers
  - /network/tls/auto-discovery
  - /webmgmt
- Renamed/moved options in the declarative configuration model (YAML). (!1672)
  - /cache/garbage-collector -> /cache/garbage-collector/enable
  - /cache/prefetch/prediction -> /cache/prefetch/prediction/enable
  - /defer/enabled -> /defer/enable
  - /dns64: true|false -> /dns64/enable: true|false
  - /dns64/rev-ttl -> /dns64/reverse-ttl
  - /dnssec: true|false -> /dnssec/enable: true|false
  - /dnssec/trust-anchor-sentinel -> /dnssec/sentinel
  - /dnssec/trust-anchor-signal-query -> /dnssec/signal-query
  - /logging/dnstap -> /logging/dnstap/enable
  - /logging/dnssec-bogus -> /dnssec/log-bogus
  - /monitoring/enabled -> /monitoring/metrics
  - /monitoring/graphite -> /monitoring/graphite/enable
  - /network/proxy_protocol -> /network/proxy_protocol/enable
  - /network/tls/files-watchdog -> /network/tls/watchdog
  - /rate-limiting -> /rate-limiting/enable
- Changed default values in declarative configuration model (YAML). (!1672)
  - /logging/dnstap/log-queries: true -> false
  - /logging/dnstap/log-responses: true -> false
  - /logging/dnstap/log-tcp-rtt: true -> false

Full changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v6.0.17/NEWS

Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-6.0.17.tar.xz

GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-6.0.17.tar.xz.asc

Documentation:
https://www.knot-resolver.cz/documentation/v6.0.17/