Dear Knot DNS users, we've just released a Release Candidate of Knot DNS 1.1. The new version brings a lot of enhancements and bugfixes which improve stability and interoperability of Knot DNS. It also contains a complete User manual for easier deployment. The manual can be either built from the sources ('make pdf' or 'make html'), or accessed online via Knot DNS website (http://www.knot-dns.cz). Here are some highlights of changes in the new version: - Improved speed of incoming IXFR even more. - Optimized loading of many zones. - Option to disable authoritative ANY answers as a mitigation to recent DDoS reflection attacks. - Fixed some problems and leaks cased if an IXFR transfer failed (e.g. because of malformed data). - Improved malformed packet parsing and handling. - Fixed answering in some special cases. We also implemented an option to generate zone differences from zone reload and using them for IXFR journal. Thus Knot DNS may serve as IXFR primary master (until now, it needed to obtain the differences by a transfer from some other master). However, this feature is only experimental, so use it with care. We do not guarantee that the results will be always good or that it won't compromise the stability of the server. For full list of changes see RELNOTES in the source directory or here: https://git.nic.cz/redmine/projects/knot-dns/repository/revisions/v1.1.0-rc… Source files can be downloaded here: http://public.nic.cz/files/knot-dns/knot-1.1.0-rc1.tar.gz GPG signature: Packages will be available soon on http://www.knot-dns.cz. Kind regards, Lubos -- Ľuboš Slovák Knot DNS CZ.NIC Labs http://www.knot-dns.cz ------------------------------------------- Americká 23, 120 00 Praha 2, Czech Republic Email: lubos.slovak(a)nic.cz WWW: http://labs.nic.cz http://www.nic.cz ------------------------------------------- Please consider the environment before printing this email. Join the campaign at http://thinkBeforePrinting.org