[nsd-users] NSD 4 beta 5

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

The new beta for NSD4 is available, NSD 4.0.0b5:
http://nlnetlabs.nl/downloads/nsd/nsd-4.0.0b5.tar.gz
SHA1 57febff2dc41841b2b0c19917d9e8b1bdf4b55c0
SHA256 e949c9406562ace1c158a53a53cc4bbf57a6861bd55d5c72373be844ddddb2ac

This software is in beta.  This version fixes a number of important
bugs, and smaller bugs, found in the beta phase.  The software has
also been optimised.

The beta5 version uses about 45% of the memory that beta4 used.  Disk
access speed has improved, and also queries per second, UDP and TCP,
have improved, mostly with responses handled at a spike in the load.

Bug fixes have been merged with NSD 3.2.16.  NSD 4.0.0b5 contains the
RRL ratelimiting implementation (configure with --enable-rate-limit).

FEATURES:
- - Optimizations for startup, qps and tcp speed, beta bug fixes and
  merge with code changes with NSD 3.2.16.
- - nsd-mem tool (make nsd-mem) to estimate memory usage.
- - Same as NSD 3.2.16: --enable-draft-rrtypes(EUI48, EUI64), rrl-slip,
  rrl-ipv[46]-prefix-length, ip-transparent config options.
- - configure option --disable-flto.
- - improved RRL logging (query details that caused blockage).
- - nsd-control status prints out ratelimit if ratelimit is enabled.
- - nsd-control verbosity prints out verbosity level without argument.
- - Fix #491: pick program name (of executable) as syslog identity.
- - printout percentage for long activities (to log).  After about 5
  seconds have passed.

BUG FIXES:
- - The same fixes up to NSD 3.2.16.
- - Fix that old zonefile does not override newer AXFR for slave zones.
- - Nicer printout of notify.
- - Fix tcp zonetransfer pipeline lookup function.
- - Fixup the growth and shrinkage of nsd.db.  This should use less
  calls to remap and change the file and mmap size.
- - notify information is logged at correct verbosity level, 1.
- - Fix memory statistics in nsd_munin_.
- - faster nsec3 updates.
- - Fixup contrib/bug390.patch for 4.0.0b4.
- - remove leak of nsec3.
- - allocate radixtree in region for small (5%) total savings and
  about 15% savings in the radixtree itself (due to many small alloc
  savings in region).
- - Patch from Lukas Wunner that makes nsd.conf include files work
  inside chroot/etc environments on repattern and reconfig.
- - Fix race on exit of nsd, for restarts, so that the pidfile-pid
  process waits until port53 has been closed before exiting.
- - Patch from Lukas Wunner that makes chroot more consistent.
  Make all paths absolute with the chrootdir in front, or use
  an absolute zonesdir with other paths relative to that.
- - Fix segfault on repeated reconfigs, double free of zone apex name.
- - Fix zone parser allocations are put in the db region.
- - Fix memory leak in zone parser for txt record.
- - Optimizations: -O3 if possible (user can override CFLAGS), udp
  buffers are set to 1m by default (if socket options exist),
  use recvmmsg and sendmmsg, or only recvmmsg, or recvfrom.
- - nsd.db 12% smaller, no nsec3 hash storage.  Also ups udb version
  because of the format change.  The nsd.db is recreated when a
  different version number is detected on startup.
- - Fix region-allocator for speedup of load and change of large data.
- - Increase tcpbacklog default to 256 (silently capped to 128 on BSD).
  For remote control keep it at 16, it has less TCP load.
  It does not actually increase TCP performance (some except), but
  reduces connection loss when there is a spike in TCP connections.
- - unlink xfr file if transfer is stopped, timeouted or interrupted.
  And unlink xfr file in progress when the zone is deleted.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=YWUA
-----END PGP SIGNATURE-----