An saki sakin 3.0.0 na Knot, sabar DNS mai iko babban aiki (an kirkiro mai maimaitawa azaman aikace-aikace daban) wanda ke tallafawa duk kayan aikin DNS na zamani.
Knot DNS sabar ce mai izini tushen tushen sunan yankin An ƙirƙira shi daga tushe kuma CZ.NIC ta haɓaka shi sosai. Makasudin wannan aikin shine samar da madadin buɗe tushen aiwatar da dacewar uwar garken DNS don masu aiki na TLD don haɓaka cikakken tsaro, kwanciyar hankali, da ƙarfin juriya na Tsarin Sunan Yanki.
Ana aiwatar da shi azaman ɗimbin yawa-daemon, ta amfani da yawan dabarun shirye-shirye da tsarin bayanai don sanya sabar cikin sauri.
Game da Knot DNS
Kusa DNS yana amfani da mai nazarin yanki wanda aka rubuta a cikin Ragel don cin nasara da sauri na yankuna a farkon. Hakanan yana da ikon ƙarawa da cire shiyyoyi akan ƙaura ta hanyar sauya fayil ɗin sanyi da sake loda uwar garke ta amfani da 'knotc' mai amfani.
Kusa DNS yana mai da hankali kan sarrafa tambayoyin aiki mai girma, don abin da yake amfani da ɗimbin karatu da kuma akasarin aiwatarwa ba tarewa ba wanda ya dace da tsarin SMP.
Ana ba da fasali kamar ƙarawa da cire shiyyoyi a kan tashi, canja wurin yanki tsakanin sabobin, DDNS (sabuntawa masu ƙarfi), fadada NSID (RFC 5001), EDNS0 da DNSSEC (gami da NSEC3), ƙayyadadden mayar da martani (RRL).
KnotDNS babban labarai
A cikin wannan sabon sigar kara yanayin babban hanyar sadarwa, aiwatarwa ta amfani da tsarin amfani da XDP (eXpress Data Path), wanda ke ba da hanyar aiwatar da fakiti a matakin direba na cibiyar sadarwa kafin aiwatar da tarin kernel na cibiyar sadarwar Linux. Wannan yanayin yana buƙatar kernel na 4.18 na Linux ko daga baya.
Ara Taimako don "Yankin Catalog" don sauƙaƙe kiyayewar sabobin DNS na biyu. Lokacin da aka kunna wannan fasalin, maimakon bayyana mahimman bayanai na kowane yanki na biyu akan sabar sakandare, ana sauya kundin kundin yanki tsakanin sabobin farko da na sakandare, bayan haka wuraren da aka kirkira akan sabar farko aka yiwa alama kamar yadda aka haɗa a cikin kundin. an ƙirƙira ta atomatik akan sabar na biyu ba tare da buƙatar gyara fayiloli ba. Kafa An samarda kcatalogprint mai amfani don sarrafa kundin.
Ara goyon baya ga matsayin sakewa na KSK (mabuɗin sa hannu) (RFC 5011) a cikin yanayin sarrafa maɓallin keɓaɓɓen maɓallin DNSSEC.
Ara tallafi don ƙayyadaddun tsarawar sa hannun dijital ta amfani da algorithms na ECDSA (yana buƙatar GnuTLS 3.6.10 da sabo don aiki).
Na sauran canje-canjen da suka yi fice na wannan sabon sigar:
- Ara sabon yanayin tabbatarwa na DNSSEC.
- Ara kayan aikin kzonesign don tsara tsara sa hannu na dijital don DNSSEC.
- Addara mai amfani kxdpgun tare da aiwatar da babban aikin DNS akan UDP janareta na zirga-zirga na Linux.
- Kdig yana ƙara DNS akan tallafin HTTPS (DoH) tare da GnuTLS da libnghttp2.
- An samar da hanya mai aminci don adanawa da dawo da bayanan yankin na DNS.
- An inganta aikin ƙididdigar ƙididdiga.
- Lokacin da aka ba da damar yin amfani da multithreaded don samar da sa hannu na dijital don yankunan DNS, wasu ƙarin ayyuka tare da yankuna suna daidaita.
- Ingantaccen aikin ɓoye kwalliya da ingantaccen aikin tambaya.
Saukewa kuma shigar
Domin shigar da wannan sabar na DNS akan tsarin ku dole ne ka tattara lambarka kuma saboda wannan dole ne ku sami masu dogaro masu zuwa:
- yi
- libtool
- pkg-jeri
- autoconf> = 2.65
- Python-sphinx
Yanzu kawai ku sami lambar don sabon sigar. Kuna iya yin hakan ta hanyar zuwa gidan yanar gizonta na hukuma kuma a cikin ɓangaren saukarwa zaku iya samun kunshin.
Game da matakan aiwatarwa don tattarawa, ba babbar kimiyya bace, kawai ku aiwatar:
autoreconf -i -f ./configure make
Kuma idan kuna buƙatar ƙarin shigarwa na musamman, zaku iya bincika cikakkun bayanai a cikin mahaɗin mai zuwa.