Changelogs for 5.0.x

5.0.0-beta1

Released: 24th of July 2025

This is release 5.0.0-beta1 of the Authoritative Server. It contains various bugfixes and improvements over the 5.0.0-alpha1 release, as well as RFC2136 support for the LMDB backend.

New Features

• Provide record timestamps in the API

  References: pull request 15867

• Add record search capability to the LMDB backend

  References: #14079, pull request 15827

• Rework pdnsutil command syntax for more consistency and future flexibility

  References: pull request 15704

• Delete existing matching zones during (re)import (Jamie (Bear) Murphy )

  References: pull request 15855

• Pdnsutil {add-record,delete-rrset}: require NAME to be absolute (Uwe Kleine-König)

  References: pull request 14984, pull request 15849

• Auth feature: RFC9615 (authenticated DNSSEC bootstrapping) (Peter Thomassen)

  References: pull request 14074, pull request 15863

• Lmdb rfc2136 support

  References: #11611, #11612, pull request 15786

• Rec and auth: implement stop command as alias for quit(-nicely)

  References: #15674, pull request 15686

Improvements

• Auth: Use arc4random in TSIG generation

  References: pull request 15763

• Auth LMDB: attempt to have predictable IDs

  References: pull request 15698

• Increase zone serial number after zone key operations

  References: #11733, pull request 15669

• [tools] Let pdnsutil always set up a SOA-EDIT-API metadata when creating zones

  References: #9096, pull request 15417

• Do not use system(3) in pdnsutil

  References: pull request 15581

• Suggest create-zone after view-add-zone of a nonexisting zone

  References: pull request 15604

• Compute LOC text representation without using floating point for latitude and longitude

  References: #10558, pull request 15221

Bug Fixes

• LMDB: honour map-size for all files

  References: #12901, pull request 15677

• Provide an IP_OFFMASK value for systems lacking it

  References: #8060, pull request 15679

• Packet Cache fixes for views

  References: pull request 15609

• Fixes zone2sql include with a comment (replacement PR) (Jamie (Bear) Murphy )

  References: pull request 15854

• Pdnsutil: clarify provenance of default TTL (Jan-Piet Mens)

  References: pull request 15665

• [tools] Honour default-ttl in pdnsutil load-zone

  References: #8494, pull request 15389

• Remove old FSF address (Chris Hofstaedtler)

  References: pull request 15865

• Fix INCEPTION-INCREMENT documentation to match code behavior (@Darwin4053)

  References: pull request 15834

• Docs: zone: modified_at is a separate property when updating RRSets (Uwe Kleine-König)

  References: pull request 15836

• Lmdb NSEC3 record handling hygiene bugfixes

  References: #11611, #11612, #15767, pull request 15767, pull request 15791, pull request 15798

• Pdns: Fix pdnsutil cross-references (Bagas Sanjaya)

  References: pull request 15793

• Auth docker: avoid crash on –version caused by doubly loaded modules

  References: pull request 15594

5.0.0-alpha1

Released: 27th of May 2025

This is release 5.0.0-alpha1 of the Authoritative Server. The major new feature in 5.0.0 is Views support. Besides that, this release also contains a long list of other improvements.

New Features

• new feature: Views

  References: pull request 15393, pull request 15421, pull request 15441, pull request 15470, pull request 15512

• webserver Unix socket support (tacerus)

  References: pull request 15265

• sdig: implement cookie support

  References: pull request 15140

• lua records: new option to set the http status code to match in ifurlup function

  References: pull request 15127

• Add a “failOnIncompleteCheck” option to if*up Lua functions

  References: pull request 15098

• Provide additional answers in NAPTR queries

  References: pull request 15083, pull request 15253

• allow turning off across-zone resolving (zeha)

  References: pull request 14604

• added a new config for direct queries of dnskey signature (d-wibowo)

  References: pull request 14581

• pdnsutil: Add backend-lookup subcommand

  References: pull request 14505

• Add setting to make TSIG required for DNS updates (Assumeru)

  References: pull request 13770

• Lua global include (cmouse)

  References: pull request 11678

• added self weighted lua function (n0tlu5)

  References: pull request 10692

Removed Features

• [feature] remove support for libdecaf

  References: pull request 14926

Improvements

• Fix building with GCC 15.1: missing cstdint include

  References: pull request 15520

• Use a unique type for domain ids

  References: pull request 15474

• Better behaviour with non-working DNSSEC configurations

  References: pull request 15451

• Add a quiet option to pdnsutil

  References: pull request 15443

• Log DNS packet parse errors

  References: pull request 15390

• fix log string in case there are notifies needed

  References: pull request 15353

• [geoip] Try and be more helpful in YAML error exceptions

  References: pull request 15334

• API: allow fetching disabled RRsets

  References: pull request 15299

• Damage control in Lua createForward()

  References: pull request 15222

• [pdnsutil] Command aliases

  References: pull request 15207

• [pdnsutil] Suggest increase-serial after create-zone

  References: pull request 15197

• lmdb-safe: add prefix() cursor; use it in list/lookup/get

  References: pull request 15176

• [pdnsutil] dedup in add-record

  References: pull request 15170

• [pdnsutil] Better error message when disk full

  References: pull request 15160

• Make the record representation of ALIAS match CNAME

  References: pull request 15152

• Low-hanging LMDB fruits

  References: pull request 15147

• [pdnsutil] Let add-zone-key use defaults from pdns.conf

  References: pull request 15131

• Let pdnsutil warn when creating local files

  References: pull request 15105

• Grow tinydnsbackend capabilities a bit

  References: pull request 15103

• try to find ldap libs in case pkg-config is missing (happens on debian11)

  References: pull request 15086

• More helpful pdnsutil help output

  References: pull request 15082

• pdnsutil: check for key presence after import

  References: pull request 15080

• Adjust Content-Type header for Prometheus endpoint to include version (Woutifier)

  References: pull request 15072

• Include cstdint to get uint64_t

  References: pull request 15063

• Correctly report SQL insertion errors

  References: pull request 15049

• Exit gracefully on ^D on control-console

  References: pull request 15041

• [lmdb] Ignore unreachable TSIG keys in getTSIGKeys

  References: pull request 15004

• Lua up checks: finer control

  References: pull request 14996

• createForward and createForward6 will use the zone_record as base (BozhanL)

  References: pull request 14993

• prevent createReverse6 from generating illegal IDN record (BozhanL)

  References: pull request 14975

• pdnsutil edit-zone: Emit the updated SOA serial (ukleinek)

  References: pull request 14900

• Rework MDBIn/OutVal

  References: pull request 14782

• pdns: allow empty string in version-string (Bertrand Jacquin)

  References: pull request 14781

• webserver.cc: try to pass exception text with 500 errors

  References: pull request 14670

• sdig: some improvements for stdin mode

  References: pull request 14665

• more and better thread names

  References: pull request 14642

• dnsproxy: make local port range configurable (zeha)

  References: pull request 14591

• ssqlite3: use “begin immediate” to avoid later fights over upgrading to write

  References: pull request 14576

• Add doc reference to oversized chunk message (Josh Soref)

  References: pull request 14561

• allow -lodbc in a non-standard location

  References: pull request 14368

• web: make request/response timeout configurable (Samir Aguiar)

  References: pull request 14218

• Do shuffle TCP responses except *XFRs (Karel Bilek)

  References: pull request 13980

• Add Meson as a build system for auth

  References: pull request 13959

• deprecate output of SHA1, GOST hashes

  References: pull request 13951

• sdig: remove xpf handling

  References: pull request 13930

• LUA: support returning empty set in filterForward

  References: pull request 13879

• on OpenBSD, try harder to send on a non-blocking socket

  References: pull request 13867

• gmysql: modernise implementation of gmysql-ssl flag

  References: pull request 13060

Bug Fixes

• Trust inet_pton to validate IPv6 addresses and nothing more

  References: pull request 15570

• Fix list-all-zones in multi-backend configuration involving LMDB

  References: pull request 15238

• Improve LMDBBackend reliability

  References: pull request 15175

• [pdnsutil] Do not allow increase-serial on secondary zones

  References: pull request 15133

• Avoid LMDB exception during recursive lookup

  References: pull request 15090

• Fix ipv*hint=auto on lmdb backend

  References: pull request 14931

• [bugfix] Reject hexadecimal blobs with odd number of characters

  References: pull request 14913

• fix register type race

  References: pull request 14897

• don’t log absence of GSS-TSIG functionality at such a high level, use DEBUG

  References: pull request 14842

• SVCB parser: allow quotes around port=

  References: pull request 14823

• don’t build .so for non-dyn modules

  References: pull request 14676

• Fix leak of MDB_env object

  References: pull request 14625

• fix domain ordering in query for mysql and odbc-sqlite, and test it

  References: pull request 14500

• catalogs SQL: force order of domains to avoid spurious rehashes

  References: pull request 14454

• Fix compile error on OPENSSL_VERSION_MAJOR < 3

  References: pull request 14419

• ixfrdist: use IPV6_V6ONLY on listening sockets, closes #13878

  References: pull request 13949