[getdns-api] Candidate for the IETF94 hackathon results release version 0.5.1 of getdns
Willem Toorop
willem at nlnetlabs.nl
Wed Nov 11 14:55:46 CET 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Dear All,
We have a candidate for the special IETF94 hackathon results release;
version 0.5.1 of getdns.
This release contains all contributions added during the hackathon
helt at the IETF94 in Yokahama.
The included contributions are:
* EDNS(0) padding option
With this option, the query size will be padded to be a
multiple of a block size when queried over GETDNS_TRANSPORT_TLS
transport, to eliminate guessing the query by analyzing query
sizes. The block size can be set with
getdns_context_set_tls_query_padding_blocksize() function.
* An EDNS client subnet private option
With this option EDNS client subnet aware upstreams are asked
to not reveal the originating network of the query.
* The return_call_debugging extensions
This extension was already in the API, but had not been
implemented yet. It returns "meta" information about a query in
the response dict (under the name "call_debugging". On top of
the returned information which was already described in the API
spec, this version also returns information about the transport
eventually used to perform the query, and (if applicable)
whether authentication succeeded.
* A dnssec_roadblock_avoidance extension
When set, the library will work in stub resolution mode and try
to get a by DNSSEC validation assessed answer. On BOGUS answers
the library will retry recursive resolution mode. This is the
simplest form of passive roadblock detection and avoidance. For
a very extensive overview of the types of roadblock, see: draft-
ietf-dnsop-dnssec-roadblock-avoidance. Use the --enable-draft-
dnssec-roadblock-avoidance option to configure to compile with
this extension.
Please review this candidate carefully. If no issues arrise the actual
release will follow Wednesday the 18th of November 2015.
link: https://getdnsapi.net/dist/getdns-0.5.1rc1.tar.gz
md5 : cf4fa710cb733b90ae7d512dbb31c7d1
sha1: f3ca92884a9b0b5cd401b57ad9c5fa1c1646e9b6
pgp : https://getdnsapi.net/dist/getdns-0.5.1rc1.tar.gz.asc
ChangeLog
=========
* Bugfix: growing upstreams arrow.
* Bugfix: Segfault on timeout in specific conditions
* Bugfix: install getdns_extra.h from build location
* Bugfix: Don't let cookies overwrite existing EDNS0 options
* Don't link libdl
* The EDNS(0) Padding Option (draft-mayrhofer-edns0-padding).
When using DNS over TLS, query sizes will be padded to multiples
of a block size given with:
getdns_context_set_tls_query_padding_blocksize()
* An EDNS client subnet private option, that will ask a EDNS client
subnet aware resolver to not reveal any details about the
originating network. See: draft-ietf-dnsop-edns-client-subnet
Set with: getdns_context_set_edns_client_subnet_private()
* The return_call_debugging extension. The extension will also return
the transport used on top of the information about the request which
is described in the API spec.
* A dnssec_roadblock_avoidance extension. When set, the library will
work in stub resolution mode and try to get a by DNSSEC validation
assessed answer. On BOGUS answers the library will retry rescursive
resolution mode. This is the simplest form of passive roadblock
detection and avoidance: draft-ietf-dnsop-dnssec-roadblock-
avoidance. Use the --enable-draft-dnssec-roadblock-avoidance
option to configure to compile with this extension.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=wqAU
-----END PGP SIGNATURE-----
More information about the spec
mailing list