Knot DNS

Knot DNS is an open-source authoritative-only server for the Domain Name System. It was created from scratch and is actively developed by CZ.NIC, the .CZ domain registry. The purpose of this project is to supply an alternative open-source implementation of an authoritative DNS server suitable for TLD operators to increase overall security, stability and resiliency of the Domain Name System. It is implemented as a multi-threaded daemon, using a number of programming techniques and data structures to make the server very fast,[1] notably Read-copy-update[2] or a special kind of a radix tree.

Knot DNS
Developer(s)CZ.NIC
Initial releaseNovember 3, 2011 (2011-11-03)
Stable release
3.0.4 / January 20, 2021 (2021-01-20)
Repository
Operating systemUnix-like
TypeDNS server
LicenseGPL license
Websitewww.knot-dns.cz

Knot DNS uses a zone parser written in Ragel to achieve very fast loading of the zones at the startup. It is also able to add and remove zones on the fly by changing the configuration file and reloading the server using the 'knotc' utility.

Since version 3.0.0, Knot DNS supports a high performance XDP mode in Linux, which can improve UDP response performance significantly. [3] [4]

Changelog

New in 1.2.0: Response Rate Limiting, Dynamic DNS, and a new remote control utility.

New in 1.3.0: new zone parser in Ragel (replaces zone compilation) and several client utilities (kdig, khost and knsupdate).

New in 1.4.0: automatic DNSSEC signing of the managed zones.

New in 1.5.0: query modules with two new modules: "Automatic forward/reverse records" and dnstap.

New in 1.6.0: persistent timers for slave zones (expire, refresh, and flush) using LMDB.

New in 2.0.0: new YAML-based configuration, and new DNSSEC implementation using GnuTLS.

New in 2.1.0:[5] dynamic configuration, PKCS#11 interface, and online DNSSEC signing.

New in 2.2.0:[6] Response Rate Limiting white listing, support for URI (RFC 7553) and CAA (RFC 6844) resource record types, interactive mode for 'knotc', new control interface for the server including simple Python bindings.

New in 2.3.0:[7] DNSSEC signing configured in server configuration, automatic NSEC3 resalting, zone operations over server control interface, TLS in kdig.

New in 2.4.0:[8] Unified LMDB based journal, new statistics module, automatic deletion of retired DNSSEC keys.

New in 2.5.0:[9] LMDB based KASP database, KSK rollover, dynamic modules, zone freeze/thaw, zone contents in journal.

New in 2.6.0:[10] On-slave DNSSEC signing, automatic DNSSEC algorithm rollover, Ed25519 algorithm support, TCP Fast Open.

New in 2.7.0:[11] Performance improvement, new module for DNS Cookies, new module for GeoIP, support for ECS.

New in 2.8.0:[12] Offline-KSK, multithreaded DNSSEC signing, extended ACL for DDNS, zone update speed-up.

New in 2.9.0:[13] Significant zone update speed-up, TCP optimizations, configuration cleanup.

New in 3.0.0:[14] High performance XDP mode for Linux, catalog zones support, continuous DNSSEC validation, kzonesign and kxdpgun utilities, DoH support in kdig, deterministic ECDSA support, on-line backup of persistent data. [15]

See also

References
  1. Response rate benchmark of several OSS authoritative name servers
  2. Knot DNS memory requirements
  3. Peltan, Libor (2020-02-08). "DNS response rate speedup by using XDP". Presentation at DNS OARC 32. Retrieved 2020-09-09.
  4. Knot DNS 3.0 Benchmarking
  5. Knot DNS 2.1.0
  6. Knot DNS 2.2.0
  7. Knot DNS 2.3.0
  8. Knot DNS 2.4.0
  9. Knot DNS 2.5.0
  10. Knot DNS 2.6.0
  11. Knot DNS 2.7.0
  12. Knot DNS 2.8.0
  13. Knot DNS 2.9.0
  14. Knot DNS 3.0.0
  15. Peltan, Libor (2020-09-09). "Knot DNS 3.0 News". Blog of CZ.NIC staff. Retrieved 2020-09-09.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.