Ukukhishwa kwe-Knot DNS 3.0.0 sekukhishiwe, iseva enegunya le-DNS ukusebenza okuphezulu (i-recursor yenziwa njengohlelo oluhlukile) esekela zonke izici ze-DNS zesimanje.
I-Knot DNS iseva enegunya uhlelo lwamagama wesizinda esivulekile. Yadalwa kusuka ekuqaleni futhi yathuthukiswa ngenkuthalo yiCZ.NIC. Inhloso yale phrojekthi ukuhlinzeka ngokunye ukusetshenziswa komthombo ovulekile kweseva efanelekile ene-DNS yabahlinzeki be-TLD ukwandisa ukuphepha, ukuzinza nokuqina kohlelo lwe-Domain Name System.
Kwenziwa njenge-daemon enemicu eminingi, kusetshenziswa amasu amaningi wokuhlela nezinhlaka zedatha ukwenza iseva isheshe kakhulu.
Mayelana ne-Knot DNS
I-Knot DNS isebenzisa i-zone analyzer ebhalwe kuRagel ukufeza umthwalo oshesha kakhulu wezindawo ekuqaleni. Iyakwazi futhi ukwengeza nokususa izindawo endizeni ngokushintsha ifayili lokumiswa uphinde ulayishe kabusha iseva usebenzisa insiza ye 'knotc'.
I-Knot DNS igxila ekusebenzeni kombuzo okusebenza okuphezulu, isebenzisa ukusetshenziswa okufundwayo okuningana futhi ikakhulukazi okungavimbeli okulungele kahle amasistimu we-SMP.
Izici ezinjengokungeza nokususa izindawo endizeni zinikezwa, ukudluliswa kwendawo phakathi kwamaseva, i-DDNS (izibuyekezo ezinamandla), izandiso ze-NSID (RFC 5001), i-EDNS0 ne-DNSSEC (kufaka phakathi i-NSEC3), ukukhawulelwa kwesilinganiso sokuphendula (RRL).
Izindaba eziphambili zeKnotDNS
Kule nguqulo entsha ingeze imodi yenethiwekhi yokusebenza okuphezulu, kwenziwe kusetshenziswa uhlelo olungaphansi lwe-XDP (eXpress Data Path), olunikeza izindlela zokucubungula amaphakethe ezingeni lomshayeli wenethiwekhi ngaphambi kokucutshungulwa isitaki senethiwekhi ye-Linux kernel. Le modi idinga i-Linux kernel 4.18 noma kamuva.
Kungeziwe Ukusekelwa kwe- "Catalog Zones" ukwenza lula ukugcinwa kwamaseva we-DNS wesibili. Uma lesi sici sinikwe amandla, esikhundleni sokuchaza amarekhodi ahlukene wezoni ngalinye lesibili kuseva yesibili, ikhathalogi yendawo idluliswa phakathi kwamaseva aphansi nawesibili, ngemuva kwalokho izindawo ezakhiwe kuseva eyinhloko zimakwe ukuthi zifakiwe kukhathalogi kuzoba kudalwe ngokuzenzakalela kuseva yesibili ngaphandle kwesidingo sokuhlela amafayela. Ukusetha. I-kcatalogprint utility inikezwa ukuphatha ikhathalogu.
Kungeziwe ukusekelwa kwesimo sokuchithwa kwe-KSK (ukhiye wokusayina okhiye) (RFC 5011) kumodi yokuphatha ukhiye wemanuwali ye-DNSSEC.
Kungeziwe ukusekelwa kwesizukulwane esinqumayo samasiginesha edijithali kusetshenziswa ubuchule be-ECDSA (idinga i-GnuTLS 3.6.10 nokusha ukusebenza).
Kwezinye izinguquko ezigqamile yale nguqulo entsha:
- Kungezwe imodi yokuqinisekisa ye-DNSSEC entsha.
- Kungezwe insiza ye-kzonesign yokukhiqiza mathupha amasiginesha edijithali we-DNSSEC.
- Kungezwe insiza ye-kxdpgun ngokusetshenziswa kokusebenza okuphezulu kwe-DNS ngaphezulu kwe-UDP traffic generator yeLinux.
- I-Kdig ingeza ukusekelwa kwe-DNS ngaphezulu kwe-HTTPS (DoH) nge-GnuTLS ne-libnghttp2.
- Kuphakanyiswa indlela ephephile yokwenza isipele nokubuyisa idatha yendawo ye-DNS.
- Ukusebenza kwemodyuli yezibalo kuthuthukiswe kakhulu.
- Lapho imodi ye-multithreaded inikwe amandla ukukhiqiza amasiginesha edijithali wezindawo ze-DNS, eminye imisebenzi eyengeziwe enezindawo iyafana.
- Ukusebenza kwesikhashana okulondoloziwe nokusebenza kombuzo okuthuthukisiwe.
Landa futhi ufake
Ukuze ufake le seva ye-DNS kusistimu yakho kufanele uhlanganise ikhodi yakho futhi ngalokhu kufanele ube nokuncika okulandelayo:
- ukwenza
- libtool
- i-pkg-config
- i-autoconf> = 2.65
- i-python-sphinx
Manje kufanele uthole ikhodi yenguqulo yakamuva. Ungakwenza lokhu ngokuya kuwebhusayithi yayo esemthethweni futhi esigabeni sayo sokulanda ungathola iphakethe.
Ngokuqondene nezinyathelo okufanele uzenzele ukuhlanganiswa, akuyona isayensi enhle, kufanele usebenzise nje:
autoreconf -i -f ./configure make
Futhi uma udinga ukufakwa okwenziwe ngezifiso, ungabheka imininingwane kusixhumanisi esilandelayo.