RSS Parrot

BETA

🦜 Knot Resolver

@www.knot-resolver.cz@rss-parrot.net

I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.

---

Resolve DNS names like it's 2026

Your feed and you don't want it here? Just e-mail the birb.

Site URL: www.knot-resolver.cz/

Feed URL: www.knot-resolver.cz/feeds/knot-resolver.xml

Posts: 73

Followers: 1

Knot Resolver 6.4.2 released

https://www.knot-resolver.cz/2026-08-05-knot-resolver-6.4.2.html

Published: August 5, 2026 12:45

Bugfixes cache: avoid excessive logging introduced in the last release (!1869) /options/serve-stale: avoid SIGSEGV from a LuaJIT bug (#957) Improvements DoH: add unencrypted mode for reverese proxies (alpha, !1877 …

Knot Resolver 6.4.1 released

https://www.knot-resolver.cz/2026-07-22-knot-resolver-6.4.1.html

Published: July 22, 2026 12:45

Security DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us. DNSSEC correctness issues, acting mainly through the aggressive cache: * dealing with Labels …

Knot Resolver 6.4.0 released

https://www.knot-resolver.cz/2026-06-16-knot-resolver-6.4.0.html

Published: June 16, 2026 12:45

Improvements packaging: rpm: require python3-setuptools (!1830, #952) packaging: rpm: provide user/group (!1837) controller: improved error handling when sending commands to workers (!1834) Bugfixes dns64: fix CNAME problems again (#797 …

Knot Resolver 6.3.0 released

https://www.knot-resolver.cz/2026-04-27-knot-resolver-6.3.0.html

Published: April 27, 2026 12:45

Improvements: /local-data/rpz: support *.some.name. CNAME block.page. (!1808) /local-data/rpz: print line number in the RPZ on error (!1823) /local-data/nodata: also apply to rpz: and records: (!1812 …

Knot Resolver 5.7.5 released

https://www.knot-resolver.cz/2025-04-24-knot-resolver-5.7.5.html

Published: April 24, 2025 12:45

Security DoS: fix unconfirmed crashes with the line below (!1683) [system] requirement "h && h->end > h->begin" failed in queue_pop_impl Improvements tests: disable problematic config.http test (#925, !1678) validator …

Knot Resolver 5.7.4 released

https://www.knot-resolver.cz/2024-07-23-knot-resolver-5.7.4.html

Published: July 23, 2024 12:45

Security reduce buffering of transmitted data, especially TCP-based in userspace Also expose some of the new tweaks in lua: (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000 (require 'ffi' …

Knot Resolver 5.7.3 released

https://www.knot-resolver.cz/2024-05-30-knot-resolver-5.7.3.html

Published: May 30, 2024 12:45

Improvements stats: add separate metrics for IPv6 and IPv4 (!1544) Bugfixes fix NSEC3 records missing in answer for positive wildcard expansion with the NSEC3 having over-limit iteration count (#910, !1550 …

Knot Resolver 5.7.1 released

https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html

Published: February 13, 2024 13:30

Security CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU validator: lower the NSEC3 iteration limit (150 -> 50) validator: similarly also limit excessive NSEC3 salt length cache: limit the amount of …

Knot Resolver 5.6.0 released

https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html

Published: January 26, 2023 17:30

Security avoid excessive TCP reconnections in some cases (!1380) For example, a DNS server that just closes connections without answer could cause lots of work for the resolver (and itself …

Knot Resolver 5.5.2 released

https://www.knot-resolver.cz/2022-08-16-knot-resolver-5.5.2.html

Published: August 16, 2022 12:30

Improvements support libknot 3.2 (!1309) priming module: hide failures from the default log level (!1310) reduce memory usage in some cases (!1328) Bugfixes daemon/http: improve URI checks to …

Knot Resolver 5.5.1 released

https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

Published: June 14, 2022 12:30

Improvements daemon/tls: disable TLS resumption via tickets for TLS <= 1.2 (#742, !1295) daemon/http: DoH now responds with proper HTTP codes (#728, !1279) renumber module: allow rewriting subnet …

Knot Resolver 5.5.0 released

https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html

Published: March 15, 2022 13:30

Improvements extended_errors: module for extended DNS error support, RFC8914 (!1234) policy: log policy actions; useful for RPZ debugging (!1239) policy: new action policy.IPTRACE for logging request origin (!1239) prefill …

Knot Resolver 5.4.3 released

https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

Published: December 1, 2021 12:00

Improvements lua: add kres.parse_rdata() to parse RDATA from string to wire format (!1233) lua: add policy.domains() for exact domain name matching (!1228) Bugfixes policy.rpz: fix origin detection …

Knot Resolver 5.4.2 released

https://www.knot-resolver.cz/2021-10-13-knot-resolver-5.4.2.html

Published: October 13, 2021 12:00

Improvements dns64 module: also map the reverse (PTR) subtree (#478, !1201) dns64 module: allow disabling based on client address (#368, !1201) dns64 module: allow configuring AAAA subnets not allowed in …

Knot Resolver 5.4.0 released

https://www.knot-resolver.cz/2021-07-29-knot-resolver-5.4.0.html

Published: July 29, 2021 14:00

Improvements fine grained logging and syslog support (!1181) expose HTTP headers for processing DoH requests (!1165) improve assertion mechanism for debugging (!1146) support apkg tool for packaging workflow (!1178) support …

Knot Resolver 5.3.2 released

https://www.knot-resolver.cz/2021-05-05-knot-resolver-5.3.2.html

Published: May 5, 2021 10:00

Security validator: fix 5.3.1 regression on over-limit NSEC3 edge case (!1169) Assertion might be triggered by query/answer, potentially DoS. Improvements cache: improve handling write errors from LMDB …

Knot Resolver 5.3.1 released

https://www.knot-resolver.cz/2021-03-31-knot-resolver-5.3.1.html

Published: March 31, 2021 15:00

Improvements policy.STUB: try to avoid TCP (compared to 5.3.0; !1155) validator: downgrade NSEC3 records with too many iterations (>150; !1160) additional improvements to nameserver selection algorithm (!1154 …

Knot Resolver 5.3.0 released

https://www.knot-resolver.cz/2021-02-25-knot-resolver-5.3.0.html

Published: February 25, 2021 13:00

Improvements more consistency in using parent-side records for NS addresses (!1097) better algorithm for choosing nameservers (!1030, !1126, !1140, !1141, !1143) daf module: add daf.clear() (!1114) dnstap module: more …

Knot Resolver 5.2.1 released

https://www.knot-resolver.cz/2020-12-09-knot-resolver-5.2.1.html

Published: December 9, 2020 10:00

Improvements doh2: send Cache-Control header with TTL (#617, !1095) Bugfixes fix map() command on 32-bit platforms; regressed in 5.2.0 (!1093) doh2: restrict endpoints to doh and dns-query (#636 …

Knot Resolver 5.2.0 released

https://www.knot-resolver.cz/2020-11-11-knot-resolver-5.2.0.html

Published: November 11, 2020 13:00

Improvements doh2: add native C module for DNS-over-HTTPS (#600, !997) xdp: add server-side XDP support for higher UDP performance (#533, !1083) lower default EDNS buffer size to 1232 bytes (#538 …

Knot Resolver 5.1.3 released

https://www.knot-resolver.cz/2020-09-08-knot-resolver-5.1.3.html

Published: September 8, 2020 11:59

Improvements capabilities are no longer constrained when running as root (!1012) cache: add percentage usage to cache.stats() (#580, !1025) cache: add number of cache entries to cache.stats() (#510 …

Knot Resolver 5.1.2 released

https://www.knot-resolver.cz/2020-07-01-knot-resolver-5.1.2.html

Published: July 1, 2020 12:30

Bugfixes hints module: NODATA answers also for non-address queries (!1005) tls: send alert to peer if handshake fails (!1007) cache: fix interaction between LMDB locks and preallocation (!1013) cache garbage …

Knot Resolver 5.1.1 released

https://www.knot-resolver.cz/2020-05-19-knot-resolver-5.1.1.html

Published: May 19, 2020 09:00

Security fix CVE-2020-12667: mitigation for NXNSAttack DNS protocol vulnerability Bugfixes control sockets: recognize newline as command boundary For more information please see blog post about NXNSAttack.

Knot Resolver 5.1.0 released

https://www.knot-resolver.cz/2020-04-29-knot-resolver-5.1.0.html

Published: April 29, 2020 11:30

Improvements cache garbage collector: reduce filesystem operations when idle (!946) policy.DEBUG_ALWAYS and policy.DEBUG_IF for limited verbose logging (!957) daemon: improve TCP query latency under heavy TCP load (!968 …

Knot Resolver 5.0.1 released

https://www.knot-resolver.cz/2020-02-05-knot-resolver-5.0.1.html

Published: February 5, 2020 15:30

Bugfixes systemd: use correct cache location for garbage collector (#543) Improvements cache: add cache.fssize() lua function to configure entire free disk space on dedicated cache partition (#524, !932)

Knot Resolver 5.0.0 released

https://www.knot-resolver.cz/2020-01-27-knot-resolver-5.0.0.html

Published: January 27, 2020 13:00

Incompatible changes see upgrading guide: https://knot-resolver.readthedocs.io/en/stable/upgrading.html systemd sockets are no longer supported (#485) net.listen() throws an error if it fails to bind …

Knot Resolver 4.3.0 released

https://www.knot-resolver.cz/2019-12-04-knot-resolver-4.3.0.html

Published: December 4, 2019 14:30

Security - CVE-2019-19331 fix speed of processing large RRsets (DoS, #518) improve CNAME chain length accounting (DoS, !899) Bugfixes http module: use SO_REUSEPORT (!879) systemd: kresd@.service now properly starts after …

Knot Resolver 4.2.1 released

https://www.knot-resolver.cz/2019-09-26-knot-resolver-4.2.1.html

Published: September 26, 2019 12:30

Bugfixes rebinding module: fix handling some requests, respect ALLOW_LOCAL flag fix incorrect SERVFAIL on cached bogus answer for +cd request (!860) (regression since 4.1.0 release, in less common …

Knot Resolver 4.2.0 released

https://www.knot-resolver.cz/2019-08-05-knot-resolver-4.2.0.html

Published: August 5, 2019 15:00

Improvements queries without RD bit set are REFUSED by default (!838) support forwarding to multiple targets (!825) Bugfixes tls_client: fix issue with TLS session resumption (#489) rebinding module: fix another …

Knot Resolver 4.1.0 released

https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html

Published: July 10, 2019 12:40

Security fix CVE-2019-10190: do not pass bogus negative answer to client (!827) fix CVE-2019-10191: do not cache negative answer with forged QNAME+QTYPE (!839) Improvements new cache garbage collector is …

Knot Resolver 4.0.0 released

https://www.knot-resolver.cz/2019-04-18-knot-resolver-4.0.0.html

Published: April 18, 2019 16:00

Incompatible changes see upgrading guide: https://knot-resolver.readthedocs.io/en/stable/upgrading.html configuration: trust_anchors aliases .file, .config() and .negative were removed (!788) configuration: trust_anchors.keyfile_default is no longer…

Knot Resolver 3.2.1 released

https://www.knot-resolver.cz/2019-01-10-knot-resolver-3.2.1.html

Published: January 10, 2019 12:00

Bugfixes trust_anchors: respect validity time range during TA bootstrap (!748) fix TLS rehandshake handling (!739) make TLS_FORWARD compatible with GnuTLS 3.3 (!741) special thanks to Grigorii Demidov for his …

Knot Resolver 3.2.0 released

https://www.knot-resolver.cz/2018-12-17-knot-resolver-3.2.0.html

Published: December 17, 2018 14:00

New features module edns_keepalive to implement server side of RFC 7828 (#408) module nsid to implement server side of RFC 5001 (#289) module bogus_log provides .frequent() table (!629, credit Ulrich …

Knot Resolver 3.1.0 released

https://www.knot-resolver.cz/2018-11-02-knot-resolver-3.1.0.html

Published: November 2, 2018 15:00

Incompatible changes hints.use_nodata(true) by default; that's what most users want libknot >= 2.7.2 is required Improvements cache: handle out-of-space SIGBUS slightly better (#197) daemon: improve TCP timeout …

Knot Resolver 3.0.0 released

https://www.knot-resolver.cz/2018-08-20-knot-resolver-3.0.0.html

Published: August 20, 2018 09:00

Incompatible changes cache: fail lua operations if cache isn't open yet (!639) By default cache is opened after reading the configuration, and older versions were silently ignoring cache operations. Valid …

Knot Resolver 2.4.1 released

https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.html

Published: August 2, 2018 12:00

Security fix CVE-2018-10920: Improper input validation bug in DNS resolver component (security!7, security!9) Bugfixes cache: fix TTL overflow in packet due to min_ttl (#388, security!8) TLS session …

Knot Resolver 2.3.0 released

https://www.knot-resolver.cz/2018-04-23-knot-resolver-2.3.0.html

Published: April 23, 2018 12:00

Security fix CVE-2018-1110: denial of service triggered by malformed DNS messages (!550, !558, security!2, security!4) increase resilience against slow lorris attack (security!5) Bugfixes validation: fix SERVFAIL in …

Knot Resolver 2.2.0 released

https://www.knot-resolver.cz/2018-03-28-knot-resolver-2.2.0.html

Published: March 28, 2018 12:00

New features cache server unavailability to prevent flooding unreachable servers (Please note that caching algorithm needs further optimization and will change in further versions but we need to gather operational …

Knot Resolver 2.1.1 released

https://www.knot-resolver.cz/2018-02-23-knot-resolver-2.1.1.html

Published: February 23, 2018 13:00

Bugfixes when iterating, avoid unnecessary queries for NS in insecure parent. This problem worsened in 2.0.0. (#246) prevent UDP packet leaks when using TLS forwarding fix the hints …

Knot Resolver 2.1.0 released

https://www.knot-resolver.cz/2018-02-16-knot-resolver-2.1.0.html

Published: February 16, 2018 14:00

Incompatible changes stats: remove tracking of expiring records (predict uses another way) systemd: re-use a single kresd.socket and kresd-tls.socket ta_sentinel: implement protocol draft-ietf-dnsop-kskroll-sentinel-01 (our…

Knot Resolver 2.0.0 released

https://www.knot-resolver.cz/2018-01-31-knot-resolver-2.0.0.html

Published: January 31, 2018 14:00

Incompatible changes systemd: change unit files to allow running multiple instances, deployments with single instance now must use kresd@1.service instead of kresd.service; see kresd.systemd(8) for …

Knot Resolver 1.5.2 released

https://www.knot-resolver.cz/2018-01-22-knot-resolver-1.5.2.html

Published: January 22, 2018 12:00

Knot Resolver 1.5.2 is a small security release. Security fix CVE-2018-1000002: insufficient DNSSEC validation, allowing attackers to deny existence of some data by forging packets. Some combinations pointed …

Knot Resolver 1.5.1 released

https://www.knot-resolver.cz/2017-12-12-knot-resolver-1.5.1.html

Published: December 12, 2017 13:00

Incompatible changes script supervisor.py was removed, please migrate to a real process manager module ketcd was renamed to etcd for consistency module kmemcached was renamed to memcached for consistency …

Knot Resolver 1.5.0 released

https://www.knot-resolver.cz/2017-11-02-knot-resolver-1.5.0.html

Published: November 2, 2017 13:00

Knot Resolver 1.5.0 has been released. Bugfixes fix loading modules on Darwin Improvements new module ta_signal_query supporting Signaling Trust Anchor Knowledge using Keytag Query (RFC 8145 section 5 …

Knot Resolver 1.4.0 released

https://www.knot-resolver.cz/2017-09-22-knot-resolver-1.4.0.html

Published: September 22, 2017 10:00

Knot Resolver 1.4.0 has been released. Incompatible changes lua: query flag-sets are no longer represented as plain integers. kres.query.* no longer works, and kr_query_t lost trivial methods …

Knot Resolver 1.2.5 released

https://www.knot-resolver.cz/2017-04-05-knot-resolver-1.2.5.html

Published: April 5, 2017 13:30

Knot Resolver 1.2.5 has been released. Security layer/validate: clear AD if closest encloser proof has opt-outed NSEC3 (#169) layer/validate: check if NSEC3 records in wildcard expansion …

Knot Resolver 1.2.3 released

https://www.knot-resolver.cz/2017-02-23-knot-resolver-1.2.3.html

Published: February 23, 2017 15:00

Knot Resolver 1.2.3 has been released. Bugfixes: Disable storing GLUE records into the cache even in the (non-default) QUERY_PERMISSIVE mode iterate: skip answer RRs that don't match the …

Knot Resolver 1.2.2 released

https://www.knot-resolver.cz/2017-02-10-knot-resolver-1.2.2.html

Published: February 10, 2017 12:00

Knot Resolver 1.2.2 has been released. Bugfixes: Fix -k argument processing to avoid out-of-bounds memory accesses lib/resolve: fix zonecut fetching for explicit DS queries hints: more NULL …

Knot Resolver 1.0.0 released

https://www.knot-resolver.cz/2016-05-30-knot-resolver-1.0.0.html

Published: May 30, 2016 08:10

Knot Resolver 1.0.0 has been released. The first production-ready release of Knot Resolver has been released. The list of notable features: Full DNSSEC Support Automated Root Trust Anchor …

Knot Resolver Beta 3 released

https://www.knot-resolver.cz/2016-01-31-knot-resolver-beta3.html

Published: January 31, 2016 09:00

Knot Resolver 1.0.0-beta3 released. Outbound query deduplication CLI tools: kresd-host and kresd-query Automatic bootstrap of root TA Built-in hardening More metrics (dropped, nodata, timeout) Ported to libknot 2 …