All notable changes to this project will be documented in this file. This project adheres to Semantic Versioning.
All notes should be prepended with the location of the change, e.g. (proto)
or (resolver)
.
- (proto) avoid panicking in parse_time() #1964 by djc
- (server) Merge up deny response in requests to server #1954 by djc
- (proto) remove duplicate is_soa function #1948 by mattsse
- (resolver) Fix minimal tokio version requirement #1931 by Gelbpunkt
- (all) Fix bench errors in rust-analyzer #1777 by jeff-hiner
- (all) Regenerate the test SSL certificates #1781 by ssinger
- (all) Fix some spelling errors #1783 by nhurley3
- (proto) proto: only allow ASCII characters in CAA key/value data #1796 by djc
- (proto) [rfc8659] CAA RR Change references to RFC 6844 to 8659 #1798 by darnuria
- (all) Fixed some clippy warning #1801 by darnuria
- (all) Fix links to client documentation #1808 by clint-white
- (all) fix cleanliness for 1.65 #1821 by bluejekyll
- (proto) Fix stuck of dns over tls with clear text SNI #1826 by mokeyish
- (all) Fix enabling only dns-over-* feature #1833 by NobodyXu
- (proto) OpenSSL 3.0 compliant #1841 by HLFH
- (server) FIX WIP: Zone Parser panics when hostname entry has a leading whitespace. #1842 by wuerges
- (server) Fix $TTL not taken into account with wildcard from zonefile. #1850 by darnuria
- (all) Some cargo clippy fix #1851 by darnuria
- (all) Fix #1835 RUSTSEC-2021-0145 Update clap to 4.0.29. #1853 by darnuria
- (docs) fix DNSSEC typo #1858 by HLFH
- (all) clippy updates for Rust 1.66 #1862 by bluejekyll
- (tests) ignore truncation for fuzz comparison #1872 by bluejekyll
- (tests) fix fuzz build failure #1875 by manunio
- (proto) docs: fix truncated rustdoc TODO on LowerName. #1897 by cpu
- (tests) Fix: invalid benchmark #1900 by XOR-op
- (proto) Fix panics in ClientSubnet conversions #1909 by djc
- (tests) Fix fuzz build #1911 by manunio
- (proto) Fix PTR.to_string() stack overflow #1912 by mokeyish
- (proto) Fix audit upgrade openssl #1914 by mokeyish
- (proto) Fix panic of unexpected close of UDP socket #1915 by mokeyish
- (proto) Lazily reap finished connections in TokioHandle on spawn_bg #1917 by jeff-hiner
- (resolver) Provider API Redesign #1938 by XOR-op
- (all) create default rules for justfile (changed from cargo-make to justfiles) #1951 by bluejekyll
- (all) Bump log to v0.4.18 #1949 by daxpedda
- (proto) Make RData::read() API public #1945 by djc
- (all) Replace lazy_static with once_cell #1944 by daxpedda
- (resolver) Return Self from AsyncResolver::new() #1942 by daxpedda
- (all) Use default-features = false for quinn #1941 by daxpedda
- (all) remove the direct dependency to quinn-udp #1935 by zh-jq
- (resolver) Order name servers by SRTT #1784 by nhurley3
- (resolver) resolver: use errors' Display impl #1785 by hdhoang
- (proto) NameIter use a u8 for start/end. #1787 by darnuria
- (proto) name.rs use DomainNameTooLong in place of Message. #1788 by darnuria
- (proto) Explicit test for label max len and use ProtoErrorKind. #1789 by darnuria
- (cli) Port to clap4 #1791 by darnuria
- (proto) Improve CAA rdata display #1794 by wuerges
- (all) fix #1767 Update tracing-subscriber to 0.3.16 #1797 by darnuria
- (proto) Simplify interface between BinEncoder and MaximalBuf #1802 by djc
- (proto) proto: allow unrestricted length character length in SVCB param values #1806 by djc
- (all) bump MSRV to 1.60 #1813 by bluejekyll
- (all) Lazily reap finished tasks from inner_join_set #1818 by jeff-hiner
- (proto) proto: upgrade to Quinn 0.9 #1822 by djc
- (resolve) Preserve intermediates for TXT records #1828 by schultetwin1
- (all) Feature gate tokio features on mdns crate #1831 by jxs
- (test) python3-ply rather than python-ply #1846 by HLFH
- (docs) Replace http: links with https: #1848 by msrd0
- (docs) Make homepage link simpler for end users #1857 by HLFH
- (resolver) Don't retry authoritative NOERROR with an empty set, from trusted resolvers #1861 by jeff-hiner
- (server) authority: parse with default record class IN. #1874 by cpu
- (resolver) API-breaking change: Deprecate ConnectionProvider with new RuntimeProvider #1876 by XOR-op
- (proto) deps: upgrade Tokio 1.21.0 -> 1.24.1 #1877 by cpu
- (proto) Move client code used by server code down into proto #1879 by djc
- (proto) proto: clean up error logging #1881 by hawkw
- (resolver) Make dns_hostname optional to disable verify #1907 by mokeyish
- (all) Introduce central crate version management #1908 by mokeyish
- (resolver) remove use of time in recursor and client #1918 by zh-jq
- (server) remove named binary #1859 by HLFH
- (docs) project: remove refs. to removed 'named' binary #1873 by cpu
- (all) add an html coverage report for local review of coverage data #1959 by bluejekyll
- (resolver) Add the possibility to shuffle NameServers #1920 by Edu4rdSHL
- (resolver) add test for connecting DoH with pure IP Address #1936 by mokeyish
- (resolver) add NameServerConfigGroup::from_ips_quic #1929 by zh-jq
- (resolve) Add --reverse, --file and --interval to util/resolve #1807 by cunha
- (client) TSIG documenting client tsig code + update rfc link #1810 by darnuria
- (client) Create dedicated Errors types for Tsig error case #1811 by darnuria
- (all) Also declare MSRV in Cargo.toml #1820 by glts
- (proto) Add wireformat buffer to DnsResponse #1855 by mattias-p #1885 by cpu
- (client) client: rm zone parse optional class arg.
- (proto) Implement EDNS Client Subnet ECS reading and writing #1906 by mokeyish
- (server) drop response messages #1952 by @djc
- (deps) don't pull in env_logger if we aren't actually a binary #1701 by @Noah-Kennedy
- (resolver) Add option to use a provided name server order #1766 by @nhurley3
- (proto) Add invalid utf8 output test for TXT::fmt. #1755 by darnuria
- (proto) Support 0-RTT in DNS over QUIC #1716 by msoxzw
- (recursor) new A Trust DNS based Recursor!!! #1710 by @bluejekyll
- (resolver) Allow customizing the static hosts configuration #1705 by @fantix
- (proto/server) Support loading pkcs#1 private key as well #1704 by @lisongmin
- (util) Trust
dns
client cli (likedig
) #1680 by @bluejekyll
- (proto) Only retry UDP socket bind if it returned EADDRINUSE #1761 by @peterthejohnston
- (all) Add necessary conditional compilation cfgs #1752 by @trevor-crypto
- (server) Populate name_pointers correctly via MessageResponseBuilder request #1744 by @jeff-hiner
- (resolver) Do not fail parse_resolv_conf on invalid hostname #1740 by @schultetwin1
- (all) doc: Fix warnings reported by cargo doc #1737 by @wiktor-k
- (proto) Use
u16::*_be_bytes
represent length field (fixes DoQ) #1715 by @msoxzw - (proto) Prevent invalid 0-length labels via from_raw_bytes #1700 by @jonasbb
- (proto/server) Drop UDP packets on send failure #1696 by @jeff-hiner
- (all) removed
.max(0)
, unnecessary withu32
's #1691 by @bluejekyll - (server) sanitize all addresses received by the server before attempting any r… #1690 by @bluejekyll
- (server) Remove forced (unecessary) Mutex from handler #1679 by @jeff-hiner
- (proto) Fix
SvcParamKey::Unknown
parsing #1678 by @jeff-hiner
- (all) Minimum Rust Version now 1.59 #1771 by bluejekyll
- (client) Parser panic to result #1758 by darnuria
- (client) Avoid 3 unwrap() call inc Parser::flush_record. #1757 by @darnuria
- (client) Cleanup lex #1756 by darnuria
- (resovler) Make maximum request depth configurable #1749 by @wiktor-k
- (server) Clean up ForwardAuthority api #1748 by @chotchki
- (resolver) Relax mut requirements for resolver.clear_cache() and add cache flushing example #1747 by @dns2utf8
- (resolver) Lookup access Records list directly #1746 by @izissise
- (proto) Pass DnsRequestOptions to DNSSEC validating routines #1742 by @wiktor-k
- (proto) Increase the maximum request depth to 26 #1736 by @wiktor-k
- (server) Mark ForwardLookup as public #1729 by @chotchki
- (all) upgrade windows openssl version to 1_1_1p #1728 by @bluejekyll
- (all) Converted to
tracing
fromlog
#1706 by @erikh and @bluejekyll - (server) Move logger setup code into binary #1703 by @djc
- (proto) ignore errors when disconnected #1695 by @edevil
- (server) RequestInfo derives Clone trait. #1693 by @humb1t
- (proto/server) make doq transport settings more consistent with RFC #1682 by @bluejekyll
- (all) Included githubactions in the dependabot config #1681 by @naveensrinivasan
- (proto) deprecated
edns
methods on request and replaced withextensions
and better scemantics #1675 by @leshow
- (proto) add PartialEq+Hash derives, #1661 by @leshow
- (server) fix panic when tcp connect goes away before handling, #1668
- (server) crates/server, InMemoryStore: Use a RwLock instead of a Mutex to manage inner storage, #1665 by @erikh
- (all) fix audit regex failure, #1658
- (resolver) Stop searching for additional records when encountering a name already seen, #1657 by @Mossop
- (proto) fix time txt parsing in SOA records, #1656
- (all) remove old crates (the ones moved into proto, tag v0.21.1 can get if needed for crates.io), #1655
- (resolver) keep any address records included in the response to an NS query, #1672 by @db48x
- (resolver) force forwarder to preserve_intermediates, #1660 by @vlmutolo
- (resolver) make constructors for AsyncResolver with custom providers public, #1654 by @Noah-Kennedy
- (util) fixed feature build issue in
resolve
#1649
- (client) Parse DS records (@kmkaplan) #1635
- (fuzz) Added fuzzing configuration (@saethlin) #1626
- (resolver) Add
resolver.clear_cache()
sync and async (dns2utf8) #1611 - (proto) Add CDS/CDNSKEY records from RFC7344 (frelon) #1595
- (resolver) Configuration of outbound bind address for resolver (@surban) #1586
- (proto) Add
CSYNC
record from RFC7477 (@frelon) #1583 - (proto) trust_dns_proto::rr::Record now serializable (@mvforell) #1536
- (client) new
zone_transfer
method forAXFR
andIXFR
use cases, client only (@trinity-1686a) #1478 - (client) Flag for
use_edns
configuration onAsyncClient
(@astro) #1492 - (client) support for
TSIG
authentication (@trinity-1686a) #1459
- (util) openssl is no longer default enabled in trust-dns-utils, bins marked as required as necessary #1644
- (proto) deprecate outdated dnssec algorithms #1640
- (resolver) BREAKING removed
DnsRequestOptions
parameter fromAsyncResolver::lookup
, this is derived fromResolverOpts
- (server) pass RequestInfo into Authority on search #1620
- (proto) SSHFP: Ed448 is assigned algorithm 6 in RFC 8709 #1604
- (resolver) Do not retry the same name server on a negative response (@peterthejohnston) #1589
- (all)
with-backtrace
feature renamed tobacktrace
(@pinkisemils) #1577 - (resolver) TCP for truncated message responses, but not for other failures on responses (switch for old behavior
try_tcp_on_error
) ( @peterthejohnston) #1562 - (server) Multiple queries in a message will always result in a FormError now #1554
- (server)
ServerFuture
and otherCatalog
related API changes #1554 - (server) By default, the server will now only log a single log line based for a given request (debug will be needed for more details) #1554
- (server)
ResponseHandler
now must return aResponseInfo
to allow for more consistent logging #1554 - (resolver) Correct behavior around trust_nx_responses (@peterthejohnston) #1556
- (server)
ResponseHandler
trait is nowasync_trait
, requires all impls to be annotated with#[async_trait]
#1550 - (server)
Authority
impls required to be internally modifiable andSend + Sync
#1550 - (server) Most
Authority
methods changes toasync fn
rather than returning customFuture
impls #1550 - (server)
Authority
trait is nowasync_trait
, requires all impls to be annotated with#[async_trait]
#1550 - (proto) Header now stores ResponseCode instead of just u8 #1537
- (client) improved async client example documentation (@ErwanDL) #1539
- (resolver) on
REFUSED
(and other negative) response(s), fall back to other nameservers (@peterthejohnston) #1513 #1526 - (client) the feature
dnssec
is no longer enabled by default, usednssec-ring
ordnssec-openssl
#1506 - (server) dnssec functions of
Authority
moved intoDnsSecAuthority
#1506 - (all) Most public enum types are now marked
#[non_exaustive]
#1426 - (resolver) DnsRequestOptions and ResolverOpts now
#[non_exaustive]
#1426 - (proto) all I/O Streams now use
BufDnsStreamHandle
rather than genericDnsStreamHandle
#1433 - (proto)
DnsResponse
response now contains only a single Response #1433 - (proto)
Name::append_name
andName::append_domain
now properly fallible when name is too long #1448 - (resolver) special handling of the
onion.
TLD added to static resolution with negative responses (@trinity-1686a) #1479 - (proto) internal Futures converted to Streams to support multiple responses, e.g.
AXFR
(@trinity-1686a) #1478 - (proto) renamed
Signer
toSigSigner
to differentiate fromTSigner
#1498
- (all) removed
structopt
dependency #1644 - (all) removed
chrono
dependency #1569 - (client) Remove AsyncClientConnect and AsyncSecureClientConnect (future impls) in favor of async constructors (@ErwanDL) #1541
- (proto) removed
RecordType::DNSSEC
and moved all variants ofDNSSECRecordType
intoRecordType
#1506 - (proto) removed
BufStreamHandle
andStreamHandle
#1433 - (response) disabled
mdns
to work on a new solution #1433
- (proto) fix CAA .to_string() crash and format (@hartshorne) #1631
- (proto) fix DoubleEndedIterator impl for Name #1639
- (client) Fix AsyncClient::clone always setting use_edns (@ecton) #1598
- (resolver) Use stream connections if datagram connections are not available (@pinkisemils) #1592
- (server) Release resources when a server future is dropped (@pinkisemils) #1587
- (proto) Panic when name exceeds maximal domain name length during display #1447
- (all) updated tokio dependencies to 1.16 #1623
- (all) removed audit chrono due to rustsec audit failure (backport) #1623
- (all) Increased MSRV to 1.51
- (resolver) Fix Windows build without system-config feature (@stephank) #1481
- (proto) Panic on bad length in SVCB for record length #1465
- (proto) HINFO record type support (@vlad20012) #1361
- (proto) proto: add into_parts methods (@leshow) #1397
- (proto) new HTTPS and SVCB record types #1402
- (resolver) predefined Quad9 HTTPS resolver configuration (@zonyitoo) #1413
- (proto) Don't kill a DnsExchangeBackground if a receiver is gone (see #1276) (@djc) #1356
- (proto) Take the current header truncated bit into account (@ilaidlaw) #1384
- (async-std-resolver) Re-export AsyncStdConnection(Provider) (@romanb) #1354
- (proto) Mutate edns & remove edns options (@leshow) #1363
- (proto) Change Edns set_* to -> &mut Self (@leshow) #1369
- (resolver) Enable RuntimeProvider in DoT implementations (@chengyuhui) #1373
- (proto) Optimize name parsing (@saethlin) #1388
- (proto) Remove a lot of bounds checks in BinDecoder by tracking position with a second slice (@saethlin) #1399
- (proto) Make errors/error reporting more lightweight (@saethlin) #1409
- (all) upgraded to Tokio 1.0 (@messense) #1330 (0.3 updates in #1262)
- (proto) Add serde support for the RecordType in the proto crate (@LEXUGE) #1319
- (https) dns_hostname args all are
Arc<str>
rather thanArc<String>
, useArc::from
- (proto) Set TCP_NODELAY when building a TCP connection (@djc) #1249
- (all) BREAKING The
UdpSocket
trait has grown an associatedTime
type. - (all) BREAKING The
Connect
trait has lost itsTransport
associated type, instead relying on theSelf
type. - (all) BREAKING Introduced a new
DnsTcpStream
trait, which is now a bound for implementing theConnect
trait. - (resolver) BREAKING Move
CachingClient
fromlookup_state
tocaching_client
module - (resolver) BREAKING Move
ResolverOpts::distrust_nx_responses
toNameServerConfig::trust_nx_responses
(@djc) #1212 - (proto)
data-encoding
is now a required dependency #1208 - (all) minimum rustc version now
1.45
- (resolver) For all NxDomain and NoError/NoData responses,
ResolveErrorKind::NoRecordsFound
will be returned #1197 - (server) Support for lowercase DNSClass and RecordType fields in zonefiles (@zhanif3) #1186
- (resolver) Make EDNS optional for resolvers (@CtrlZvi) #1173
- (all) Fully support ring for all DNSSEC operations. #1145
- (all) No more
master
(branch, moved tomain
) slave, in honor of Juneteenth #1141 - (all) Minimize
futures
dependencies (@JohnTitor) #1109 - (proto) increases the UDP buffer size from 2048 to 4096 to allow larger payloads (@DevQps) #1096
- (resolver) use IntoName trait on synchronous resolver interface (@krisztian-kovacs) #1095
- (resolver) BREAKING removed async for
AsyncResolver::new
(@balboah) #1077 #1056 - (server) BREAKING removed
Runtime
fromServerFuture::register_socket
(@LucioFranco) #1088 #1087 - (proto) Breaking Adjust the return value from
ResponseCode::high
from u16 to u8 #1202
- (client) Support reading the root hints file (@mattias-p) #1261
- (resolver) Fix Glue records resolving (@wavenator) #1188
- (resolver) Only fall back on TCP if cons are available (@lukaspustina) #1181
- (proto) fix empty option at end of edns (@jonasbb) #1143, #744
- (resolver) Return
REFUSED
instead ofNXDOMAIN
when server is not an authority (@AnIrishDuck) #1137 - (resolver) forwarder: return NXDomain on
e.is_nx_domain()
(@balboah) #1123 - (resolver) Regards NXDomain and NoError empty responses as errors (continues searching for records), #1086 #933
- (util) new Add resolve.rs as CLI for trust-dns-resolver #1208
- (proto) Added proper zone display to all RData as an impl of Display #1208
- (proto)
xfer::dns_response::NegativeType
andDnsResponse::negative_type
to classify negative response type #1197 - (proto)
DnsResponse::contains_answer
to determine if a response message has data related to the query #1197 - (proto)
RecordType::is_soa
andRecordType::is_ns
to easily check for these types #1197 - (proto)
Message::all_sections
to allow iteration over allRecords
in all sections in a Message #1197 - (proto)
Message::take_queries
to remove from a Message without requiring clone #1197 - (proto)
DnsHandle::Error
associated type to support generic errors across trust-dns libraries #1197 - (resolver) Add support for tlsa RRs in trust_dns_resolver (@smutt) #1189
- (resolver) Support pointer ending label compression (@jacoblin1994) #1182
- (proto) Keep OS error information on
io::Error
(@brunowonka) #1163 - (proto) Support mDNS cache-flush bit (@fluxxu) #1144
- (proto) Allow creating TXT Rdata with binary data (@bltavares) #1125
- (proto) Add mutable access to Message fields (@leshow) #1118
- (proto) Add Name.parse_ptr_name, to IP address (@Mygod) #1107
- (resolver) Allow HTTPS to be generic over Runtime (@balboah) #1077 #1074
- make
backtrace
an optional dependency, backported from 0.20 (@jmagnuson) #1387
- bump resolv-conf from 0.6.0 to 0.7.0, fixes system resolv.conf parse issue (@wg) #1285
- (server) updated rusqlite to 0.23.1 #1082
- (resolver) properly reuse connections, for TCP, TLS, and HTTPS #1058
- (resolver) option to include intermediate (CNAME) records in results (@balboah) #1028
- (async-std-resolver) added implementation for async-std! woohoo! (@belak) #1067 #1051 #926
- (server) add support for $INCLUDE in zone files (@kachayev) #1027
- (proto) exposed LabelIter from Name (@avitex) #1064
- (all) updated rustls to 0.17
- (all) updated tokio-rustls to 0.13
- (all) min rustc compiler version now 1.40
- (all) update all dependencies
- (all) minimize
futures
dependency tostd
features (@antonylsg) #1003 - (all) cleanup clippy warnings for Rust v.1.41 #1008
- (proto) make all fields public on
ResolverOpts
for ease of use (@ackintosh) #1009
- (resolver) make system config loading optional to support fuchsia (@chunyingw) #996
- (resolver) dependency on
trust-dns-proto
no is no-default-features (@chunyingw) #993
- (resolver) AsyncResolver abstract over
RuntimeProvider
(@chunyingw) #975 - (resolver) TokioAsyncResolver implementation now has default methods that have a default Handle::current set
TokioAsyncResolver::tokio
- (resolver) testing module for generic tests across generic async runtime impls (@chunyingw) #979
- (proto) support for building into WASM (@moshevds) #987 #990 #991
- (all) failure is no longer used for error types, std::Error impls only
- (server) Fix issue when MX or other records collect additionals based of
.
, root, targets #980
- (all) CHANGELOG.md is now merged from the Resolver crate and the top-level. All notes from the Resolver CHANGELOG were merged into this changelog, with the format
## {version} (Resolver)
and the existing notes from the top-level are formatted as## {version} (Client/Server
. This should make notes on releases easier. Going forward the scope of changes across crates will be captured as- ({crate}) {note}
where all is used for across the board updates. - (all) After the 0.18 release, all crates will be versioned uniformally, and released at the same time, this will resolve some issues around consistency with releases. The final Resolver release before this was
0.12
. - breaking Generally, any interface that took a 0.1 Future, now returns or consumes a std::future::Future
- breaking (client) rebranded from
trust-dns
totrust-dns-client
- breaking (named) moved from
trust-dns-server
totrust-dns
, in bin/** - breaking (all) all internals updated to std::future and async/await (requires
Rust 1.39
minimum) - breaking (client) AsyncClient now returns a connect future which resolves to the client and it's background.
- breaking (resolver) AsyncResolver::new changed to AsyncResolver::connect, requires awaiting the returned future
- (client) ClientFuture renamed to AsyncClient
- (resolver) AsyncResolver now requires a ConnectionProvider type parameter, see TokioAsyncResolver as a predefined type without it
- (resolver) Now returns a connect future to connect the start all background tasks
- (proto, resolver) renamed the
tokio-compat
feature totokio-runtime
- (all) added cargo-make Makefile.toml to support all automation in Github workflow
- (proto) renamed
SecureDnsHandle
toDnssecDnsHandle
- (client) renamed
SecureSyncClient
toSyncDnssecClient
- Abstractions around Tokio for generic Executors #960 (@chunyingw)
- Enable early data on tokio-rustls #911 (@daareiza)
- (proto) Removed deadlock from UDPSocket stream impl
- (named) made tests a little more resilient to port stealing
- (proto) Unknown ResponseCodes will no longer cause a panic
- (client) client::BasicClientHandle, ClientFuture no longer requires Background or the separate Handle, this can generally be replaced with just ClientFuture itself in most use cases.
- breaking (resolver) Background type removed
- (resolver) removed deprecated AsyncResolver::lookup_service, see AsyncResolver::lookup_srv
- (client) removed all deprecated reexports from trust_dns_proto
- (proto) removed unused xfer::BasicDnsHandle, xfer::MessageStreamHandle
- (resolver) removed all unused custom LookupFuture types SrvLookupFuture, ReverseLookupFuture, Ipv4LookupFuture, Ipv6LookupFuture, MxLookupFuture, TxtLookupFuture, SoaLookupFuture, NsLookupFuture
- (resolver) removed Background, BackgroundLookup, and BackgroundLookupIp
- (resolver|client) DoH no longer sends User-Agent header #962 (@quininer)
- (proto) proto now has a
testing
feature to allow dependencies that might want access to some of the testing harnesses. #936 (@chunyingw)
- (all) Licenses copied into all crates #832 (@divinerapier)
UdpSocket
for compatibility with Tokio, when not using non-Tokio executors #824 (@chunyingw)Connect
for Tcp connection compatibility with Tokio, when not using non-Tokio executors #794 (@chunyingw)
- breaking (client) TcpClientConnect requires generic stream param #794 (@chunyingw)
- breaking (client) UdpClientStream requires generic socket param #824 (@chunyingw)
- breaking (proto) UdpStream and UdpClientStream requires generic socket #824 (@chunyingw)
- breaking (proto) TcpStream and TcpClientStream require generic stream param #794 (@chunyingw)
- Algorithm::from_u8 is now infallible #800 (@zackangelo)
- Algorithm::hash_len now returns Option #800 (@zackangelo)
byteorder
dep dropped in favor ofstd
implementations #844 (@lukaslueg)
- disables the
socket2/reuseport
feature except whenmdns
is enabled
- (proto) UDP Sockets not being properly closed in timeout scenarios #635
- (server) CNAME resolutions #720
- (server) NSEC evaluation for NODATA and NXDOMAIN responses #697
- (server) Call add_update_auth_key in named.rs #683 (@Darkspirit)
- (proto) support for the OPENPGPKEY and SSHFP record types #646 #647
- (server/client) support ECDSA signing with ring #688 (@Darkspirit)
- (server) forwarding support in server with trust-dns-resolver (default feature) #674
- (server) Authority trait for generic Authorities (File, Sqlite, Forwarder) #674
- (server) ANAME resolutions #720
- (server) Additional section processing for ANAME, CNAME, MX, NS, and SRV #720
- (server) Added endpoint name config to DoH and DoT TLS endpoint #714
- (proto) NAPTR record data (no additional record processing support) #731
- (server) Added support for wildcard lookups, i.e.
*.example.com
in zone files
- breaking (proto) UdpClientStream and UdpClientConnection refactored to associate UDP sockets to single requests #635
- breaking (server) configuration for sqlite dynamic update different, see dnssec_with_update.toml for example #622
- breaking (util)/dnskey_to_pem has been renamed to bind_dnskey_to_pem for clarity #622
- breaking (proto) Record::from_rdata no longer requires RecordType parameter #674
- breaking (server) AuthLookup inner types simplified #674
- breaking (server) RequestHandler now requires associated type for Future results of lookups #674
- breaking (server) ResponseHandler now requires Clone and 'static #674
- breaking (server) Catalog::lookup takes ownership of MessageRequest and returns a LookupFuture #674
- breaking (server) MessageRequest and Queries no longer carrying lifetime parameters #674
- Fix two separate integer overflows from subtractions #585 (@oherrala)
- strictly enforce name and label lengths during label parsing #584
- enforce that only prior labels are used in label expansion, decompression #578 (@oherrala)
- CAA now properly performs case-insensitive compares #587 (@oherrala)
- overhauled rdata parsers with Restrict type to reduce potential of overflowing operations #586
- feature
dns-over-rustls
totrust-dns-server
(server) andtrust-dns
(client) - feature
dns-over-https-rustls
experimental #557 - new configuration options for tls, see
server/tests/named_test_configs/dns_over_tls_rustls_and_openssl.toml
- new utility for querying root key-signing-keys,
util/get-root-ksks
- updated root trust-anchor to include new
20326
RSA root ksk
- Make trust_dns_server::server::ResponseHandler Send #593 (sticnarf)
- Wrap types in Restrict and force validation before usage from streams #586
- breaking Overhauled all
ClientFuture
implementations to align with newDnsExchange
andDnsMultiplexer
components in proto. - breaking
ClientFuture
after construction, now returns a "background"ClientFuture
and a "foreground"BasicClientHandle
- breaking
Client
has more type parameters, these match with the same types returned by the*ClientConnection
constructors - breaking all default features, removed: "dns-over-openssl", "dnssec-openssl". Use --features=dns-over-openssl,dnssec-openssl to enable
- breaking
named
configuration now has AXFR disabled by default. - breaking Migrated from error_chain to Failure #474 (@silwol)
- feature
tls
renamed todns-over-openssl
- upgraded
native-tls
andtokio-tls
to 0.2 - upgraded
rusqlite
to 0.15
- Updated
trust-dns-proto
to0.3
, which brings in betterName
andLabel
impls - rusqlite updated to 0.13 #331 (@oherrala)
- Many serialization improvements #317
- Use tokio-timer (part of tokio upgrade) @justinlatimer #411
- Backtrace now optional @briansmith #416
- Use tokio-tcp (part of tokio upgrade) @Keruspe #426
- Use tokio-udp (part of tokio upgrade) @Keruspe #426
- Upgrade to tokio-executor (tokio upgrade) @Keruspe and @justinlatimer #438
- Send (Sync where applicable) enforced on all DnsHandle::send and other interfaces #460
- ClientHandle api return Send @ariwaranosai #465
Name
andLabel
now support idna, punycode, seeName::from_str
trust_dns::rr::ZoneUsage
for detecting restrictions onName
s and their associated zones
- octal escapes fixed in
Name
parsing #330 NULL
record type incorrectly valued at0
to proper10
#329 (@jannic)- BinEncoder panic on record sets of extreme sizes #352
- Panic when oneshot channel receiver goes away #356
- Hung server on UDP due to bad data #407
- usage of tokio-core::Core @Keruspe #446
- Trust-DNS Proto crate to separate server management from base operations #222
- Trust-DNS Util crate for dnssec management tools (@briansmith)
- Integration tests for Server to validate all supported DNSSEC key types
- breaking Common features
dnssec-ring
,dnssec-openssl
, anddnssec
across all crates (replacesopenssl
andring
features) - Clarified
tls
feature withtls-openssl
, andtls
in server (in preparation fortls-rustls
) - Support for rfc6844, CAA record type #234
- Support for rfc6698, TLSA record type #285
- Clippy validation in CI #288 (@little-dude)
- DNSKEY is now self-signed
- Internal API changes to
client
calling intoproto
for actual implementations - Large refactoring of internal APIs to more cleanly support *ring* and OpenSSL features (@briansmith)
ClientHandle::send
moved totrust_dns_proto::DnsHandle::send
(internal API)- Many interfaces moved from
client::ClientStreamHandle
totrust_dns_proto::DnsStreamHandle
Message::sign
has been renamed and change to the more general methodMessage::finalize
- Some
io::Error
s have been converted totrust_dns_proto::ProtoError
SyncClient
andSecureSyncClient
are nowSend + Sync
#245- Unknown RecordTypes and RDatas will no longer error #294
- Server: signing issues when loading from persistence
- Server: When SupportedAlgorithms (rfc6975) not supplied default to returning all signatures #215
- Proto: u16::from(DNSClass) now enforces OPT is greater than/or 512 per spec #303
- Improve usage of Rand for message ids and port assignment #291 & #292
- NxDomain and empty NoData responses to be compliant #286 (lots of help from @Darkspirit)
- Removed the
NativeTls
andOpenSSL
ClientConnection
variants, use the Rustls impls or the tokio basedTlsClientStream
instead. This was required forSyncClient
beingSend + Sync
- Server: no longer auto-generate keys on startup #218
- All deprecated APIs removed from -proto #262
- Server: removed deprecated RSA config loading options, see reference test cargo.tomls #276 (@briansmith)
- Internal updates related to generification of executors
- Server was not properly signing zone after fresh start
- RSA and ECDSA validation with ring for DNSSEC, removes dependency on openssl (@briansmith)
lookup
toClientHandle
, simpler form withQuery
query
toQuery
for ease of Query creation
- Large celanup of signing and verification paths in DNSSEC (@briansmith)
- breaking changed
TrustAnchor::insert_trust_anchor
to more safely consumePublicKey
rather thanVec<u8>
(README.md documentation changes for crates.io)
- disables the
socket2/reuseport
feature except whenmdns
is enabled
- Updates to
Name::is_fqdn
for more accuracy (@rushmorem)
- per project Readme.md for crates.io
- Ignore UDP responses not from target src address #629 #630 #631 (@aep)
- Improved NSEC validation of responses #697
- New option to execute queries concurrently, default is 2 #615
- Lookup::record_iter for listing all records returned in request #674
- NAPTR record data (no additional record processing support) #731
- Added option to distrust Nameservers on SERVFAIL responses, continue resolution #613
- breaking Record::from_rdata no longer requires RecordType parameter #674
- LRU cache is now based on Query rather than just name #674
Name::FromStr
for simpler parsing, specify trailing.
for FQDNName::append_label
for clearer usage while appending labels to a NameName::append_name
for clearer usage while appending one name to anotherName::append_domain
alias for append_name and marking as FQDN
- breaking all
&mut self
methods onName
deprecated as unsafe, Name labels are now immutable. - breaking All
ClientHandle
traits now take&Handle
instead ofHandle
(@rushmorem) - warning
Name
now tracks if it is a fully qualified domain name, slightly changes name parsing rules, allowingwww.example.com
without the trailing.
, which means that FQDN names are not enforced.
- deprecated
Name::with_labels
seeName::from_labels
- deprecated
Name::append
wasn't clean, seeName::append_name
- deprecated
Name::add_label
exposed internal data structure, seeName::append_label
- deprecated
Name::label
unclear usage/name, seeName::append_label
- deprecated
Name::prepend_label
exposed internal data structure, unclear usage no replacement - deprecated
Record::add_name
unclear usage no replacement
- Library documentation, examples for client query and update
- ServerFuture now Accepts generic RequestHandler (@Antti)
- Allow more options with Key and KeyUsage
- Initial Resolver implementation
- NSEC coverage bitmap overflow in nightly
- Name::zone_of panic (@SAPikachu)
- Proper TCP connection timeout
- Fixed signature format of ECDSA (@SAPikachu) #141
- all optional dependencies updated #640
- Fixed format of ED25519 keys (@briansmith) #129
- Revamped signer and keypair to better deal with public key (possible breaking change)
- Upgraded ring to 0.9.x series, requires pkcs8 for key storage
- Dropped support for dangerous private key byte access (possible breaking change)
- Upgraded tokio-rustls and rustls dependencies to support ring updates
- PublicKey and Verifier for verifying with zero copy from KEY and DNSKEY (possible breaking change)
- Pkcs8 as a supported KeyFormat for storage (possible breaking change)
- UDP Sockets not being properly closed in timeout scenarios #635
- Added
From<IpAddr>
for Name (reverse DNS) #105 - AppVeyor support #103
- rustls client tls support (separate crate)
- full support for KEY RR in client
- compatibility tests with BIND for SIG0 updates
- Added full implementation of KEY type
- Updated TLS documentation, added more elsewhere, docs required; fixes #102
- Upgraded tokio-core and moved to tokio-io
- Important Some
Server
types have been migrated to RFC#344 style.get_field()
->field()
;field()
->set_field()
- Moved native-tls client impl to separate crate
- Defaulted to OpenSSL for tls implementation
- key_tag calculation for DNSKEY and KEY now correct #118 (@jannic)
- SIG0 signing fixed to match RFC and BIND #120 (@jannic)
- Fix two separate integer overflows from subtractions #585 (@oherrala)
- strictly enforce name and label lengths during label parsing #584
- enforce that only prior labels are used in label expansion, decompression #578 (@oherrala)
- CAA now properly performs case-insensitive compares #587 (@oherrala)
- overhauled rdata parsers with Restrict type to reduce potential of overflowing operations #586
- Propagate TTLs for NXDOMAIN responses #485 (@hawkw)
- LookupIpFuture implementation to be proper in regards to loop control #480 (@hawkw)
- max query depth tracking in Resolver #469
- Wrap types in Restrict and force validation before usage from streams #586
- Delays all connections until actual use #566
- Relax parsing rules for CAA issuer keys and values #517
ResolverFuture
renamed toAsyncResolver
#487 (@hawkw)- breaking
AsyncResolver::new
returns a tuple of anAsyncResolver
and a future that drives DNS lookups in the background #487 (@hawkw) - breaking All
AsyncResolver
lookup methods returnBackgroundLookup<T>
rather thanT
#487 (@hawkw) - breaking Migrated from error_chain to Failure #474 (@silwol)
- improve truncation to always return records #497
- updated root trust-anchor to include new
20326
RSA root ksk - DNS over HTTPS support #520
- Important Possible breaking API change, the original Client has been renamed.
In an attempt to reduce the overhead of managing the project. The original
Client has now been revamped to essentially be a synchronous Client over the
ClientFuture implementation. The ClientFuture has proven to be a more stable
and reliable implementation. It was attempted to make the move seamless,
but two new types were introduced, SyncClient
and SecureSyncClient
, which
are both synchronous implementations of the old Client function interfaces.
Please read those docs on those new types and the Client trait.
- When EDNS option is present, return only the digest understood matching RRSETs
- All code reformatted with rustfmt
- Important breaking change, all
Record
and associated types have been migrated to RFC#344 style.get_field()
->field()
;field()
->set_field()
- Important The original Server implementation was removed entirely.
Please use the ServerFuture implementation from now on. Sorry for the inconvenience, but this is necessary to make sure that the software remains at a high quality and there is no easy way to migrate the original Server to use ServerFuture.
- Initial support for ECDSAP256SHA256, ECDSAP384SHA384 and ED25519 (client and server)
- additional config options for keys to named, see
tests/named_test_configs/example.toml
- Added DNS over TLS support, RFC 7858, #38
- Added native-tls with support for macOS and Linux (DNS over TLS)
- matrixed tests for all features to Travis
- updated to rust-openssl 0.9.x series
- restructured dnssec code to better support alternate key formats
- mio_client is now an optional feature in favor of the futures-rs ClientFuture
- Fixes the MAX TTL being outside the bounds of 32bit systems, reduces max to 1 day #528
- OpenSSL is now an optional feature for the client
- DNS-over-TLS configurations (requires one of
dns-over-native-tls
ordns-over-rustls
features) #396 - Experimental DNS-SD, service discovery (RFC 6763,
mdns
feature required) #363 - Experimental mDNS, multicast DNS, known issues persist (RFC 6762,
mdns
feature required) #337 - Exposed TTLs on
Lookup
objects @hawkw #444 - Added global resolver example #460
- Use tokio-timer (part of tokio upgrade) @justinlatimer #411
- Backtrace now optional @briansmith #416
- Upgrade to tokio-tcp (tokio upgrade) @Keruspe #426
- Upgrade to tokio-udp (tokio upgrade) @Keruspe #427
- Upgrade to tokio-executor (tokio upgrade) @Keruspe and @justinlatimer #438
- Always reattempt nameserver reconnections regardless of time #457
- Defaulted type parameter for LookupFuture, removed InnerLookupFuture #459
- BinEncoder panic on record sets of extreme sizes #352
- Panic when oneshot channel receiver goes away #356
- Incorrect IPv6 configuration for Google nameservers #358
- Properly yield on failure to acquire lock #372
- Correct order of search list with ndots variable #410
- Send (Sync where applicable) enforced on all DnsHandle::send and other interfaces #460
- Properly track max query depth as a
task_local
notthread_local
#460, #469 - IPv4 like name resolution in lookup_ip with search order #467
- usage of tokio-core::Core @Keruspe #446
- new ServerFuture tokio and futures based server, #61
- UdpStream & TcpSteam to support stream of messages with src address
- TimeoutStream to wrap TcpStreams to help guard against malicious clients
- Added Notify support to ClientFuture
- Added IntoRecordSet and conversion impls for RecordSet and Record
- Split Server and Client into separate crates, #43
- Moved many integration tests to
tests
fromsrc
, #52 - Migrated all handles to new futures::sync::mpsc impls
- Modified all requisite client methods for IntoRecordSet.
- All client methods now support multiple records per query, update, notify and delete
- Flush TcpStream after fully sending Message
- Recognize no bytes read as closed TcpStream
- Make read_system_conf() function public #338 (@oherrala)
- Hosts map was not properly reference counted #342
- Panic in edge case of label compression #341 (@SAPikachu)
- Fix
localhost
lookup and no longer panic on no names #343
- Fix build on rustc 1.11, #66
- Updated
trust-dns-proto
to0.3
, which brings in betterName
andLabel
impls - Dropped LALRPOP
resolv.conf
parser in favor of theresolv-conf
#335 (@cssivision & @little-dude) - Improved message serialization #311 (@little-dude)
- Many serialization improvements #317
- Dependencies updated #334 (@oherrala)
Name
andLabel
now support idna, punycode, seeName::from_str
- Clippy added to build #304! (@neosilky)
from_system_conf
on now supported on Windows 32bit targets (previously just 64bit) #313 (@liranringel)
- octal escapes fixed in
Name
parsing #330 NULL
record type incorrectly valued at0
to proper10
#329 (@jannic)
- SecureClientHandle, for future based DNSSEC validation.
- ClientFuture, futures based client implementation, #32
- Randomized ports for client connections and message ids, #23
- OpCode::From for u8 removed, added OpCode::from_u8(), #36
- Fix for named startup related to ipv6, #56
- Upgraded OpenSSL to 0.8.* #50
- Cleaned up the Server implementation to isolate connection handlers
- Deprecated old Client will possibly remove in the future
- Issue #27: label case sensitivity revisited for RRSIG signing, RFC 6840
- TCP reregister on would-block errors
- Issue #28: RRSIG validation of wildcards, label length > wildcard length
- Issue #27: remove implicit case conversion of labels (fixes NSEC validation)
- Resolver no longer depends on Client
- breaking Resolver no longer returns io:Errors, use
From<ResolveError>
forio::Error
- Resolver is now
Send
- DNSSEC now disabled by default in Resolver, see
dnssec-ring
ordnssec-openssl
features #268 - CNAME chaining was cleaned up #271 (@briansmith)
- On hostname parsing to IpAddr, return without lookup #302 (@cssivision)
- Change default
LookupIpStrategy
fromIpv4AndIpv6
toIpv4thenIpv6
#301 (@cssivision)
- ResolveError and associated types
- Cleaned up CNAME chained lookups, better TTL enforcement, etc #298
- Added recovery from journal to named startup
- SQLite journal for dynamic update persistence
- Private Key generation during startup, for dnssec zones
- Read private key from filesystem during start and registers to zone
- Removed many of the unwraps in named binary
- Reworked all errors to use error-chain
- Adjusted interface for Signer to use duration
- All
#[cfg(ftest)]
tests now#[ignore]
- TXT record case sensitivity
- Split UDP and TCP into different NS pools, prefer UDP lookups first
- On truncated UDP responses, promote to TCP for resolution
- 64bit Windows support for reading DNS configuration! (@liranringel)
- CNAME chain resolution (where CNAME results are not returned in the same query)
- Resolution prefers
/etc/hosts
before querying (@cssivision)
- Documentation on all modules, and many standard RFC types
- Authority zone signing now complete, still need to load/save private keys
- DNSKEYs auto inserted for added private keys
- New mocked network client tests, to verify zone signing
- NSEC record creation for zone, with tests
- SIG0 validation for Authentication on for dynamic updates
- Client CQADDD operations, delete_by_rdata, delete_rrset, delete_all
- Client compare_and_swap operation... atomics are here!
- Added loop on TCP accept requests
- Added loop on UDP reads
- Upgraded to mio 0.5.1 for some bug fixes
- Not returning RRSIGs with SOA records on authoritative answers
- Internal representation of record sets now a full data structure
- Better rrset keys for fewer clones
- Removed many excessive clones (should make requests even faster)
- Cleaned up authority upsert and lookup interfaces
- All authorities default to IN DNSCLASS now (none others currently supported)
- Cleaned up the Signer interface to support zone signing
- Simplified RData variant implementations
- Improved ENDS and SIG0 parsing on Message deserialization
- combined the TCP client and server handlers
- reusing buffer in TCP handler between send and receive (performance)
- updated mio to 0.5.0
- updated chrono to 0.2.21
- updated docopt to 0.6.78
- updated log to 0.3.5
- updated openssl to 0.7.8
- updated openssl-sys to 0.7.8
- updated rustc-serialize to 0.3.18
- updated toml to 0.1.28
- NSEC3 resolver validation
- data-ecoding as a dependency (base32hex)
- trust-dns banner on boot of server
- Changed the bin.rs to named.rs, more accurate, allow for other binaries
- breaking
LookupIp
now returns an iterator over owned data (IpAddr is Copy + Clone ref not necessary) - breaking
Resolver::lookup
will now return an Err on NxDomain and NoData responses - rewrote much of the caching and lookup functionality for generic RecordType lookups
- removed &mut from resolver fn interfaces, make it easier to use
- Generic record type lookup
- reverse_lookup for IP to Name lookups
- ipv4_lookup for looking up only ipv4 (lookup_ip has options for dual-stack)
- ipv6_lookup for looking up only ipv6 (lookup_ip has options for dual-stack)
- mx_lookup for querying mail exchanges
- srv_lookup for service records and also a specialized form for ease of use lookup_service
- txt_lookup for text record lookups
- Updated rust-openssl to 0.7.8 which include new RSA creation bindings
- NSEC resolver validation
- NSEC3 parsing support
- DNSSEC validation of RRSIG and DNSKEY records back to root cert
- Integration with OpenSSL (depends on fork until rust-openssl 0.7.6+ is cut)
- Binary serialization and deserialization of all DNSSEC RFC4034 record types
- EDNS support
- Coveralls support added
- Partial implementation of SIG0 support for dynamic update
- SRV record support
- Dual licensed with MIT (and Apache 2.0)
- Abstracted Client over TCP and UDP for common implementation of queries
- Binary Serialization and Deserialization of NSEC3
- AXFR SOA ordering
- Travis build failing
- See updated trust_dns::client::Client API
- breaking impl
Iterator
removed fromLookupIp
result type, seeLookupIp::iter
for replacement
- Support for DNSSEC validation
- LRU Cache
- Added AXFR support
- Dynamic update support
- Name pointer support
- Removed buffer clone during label pointer decoding (speed/memory)
- Removed a lot of unnecessary clones, heavier use of Rc
- Binary server bugs (fully functional)
options attempts:N
akaResolverOpts::attempts
support, aka retries- Google IPv6 nameservers as defaults for
ResolverConfig::default
- support for domain name search in
ResolverConfig
andLookupIpFuture
- support for search names in
ResolverConfig
andLookupIpFuture
LookupIpFuture
type alias toLookupIpFuture<NameServerPool>
compatibility
- breaking
LookupIpFuture
renamed toLookupIpFuture
- breaking
LookupIpFuture
now takes a generic parameter, generally<NameServerPool>
- Zone files support BIND time formats, e.g. #h#d
- Toml config file support (not compatible with BIND)
- Functional tests to verify against other DNS servers
- mio replaced std::net operators
- ipv6 parallel lookup
- multiple ipv4 and ipv6 lookup strategies
- library documentation examples
- test coverage for resolver
- Server support with catalog and tests for example.com
- Parsing example rfc1035 zone file
- new lexer for zone files with simplified FSM
- Travis CI testing support
- Supported Client with operational query
- Writers for Record Data
- All RFC1035 fields parsing!
- label parsing with UTF8 support
- DNS Class and RecordType enums
- Crates.io keywords, etc.
- Cleaned up binary encoders and decoders with objects
- Initial release of the Trust-DNS Resolver
- Started parsing resource records
- Initial Commit!