This article is in a list format that may be better presented using prose. (January 2018)
This article does not cite any sources. (January 2018) (Learn how and when to remove this template message)
|Initial release||November 3, 2011|
2.6.8 / July 10, 2018
Knot DNS is an open-source server for the Domain Name System. It was developed by CZ.NIC, the .CZ domain registry, from scratch as an authoritative name server. The goal was to add one more open-source implementation suitable for TLD operators to increase overall security, stability and resiliency of Domain Name System. It is implemented as threaded daemon which uses number of programming techniques to make it very fast. Notably Read-copy-update.
Knot DNS uses a zone parser written in Ragel to achieve very fast loading of the zones at the startup. It is also able to add and remove zones on the fly by changing the configuration file and reloading the server using 'knotc' utility.
New in 1.3.0: new zone parser in Ragel (replaces zone compilation) and client utilities (kdig, khost and knsupdate).
New in 1.4.0: automatic DNSSEC signing of the managed zones.
New in 1.5.0: query modules with two new modules: "Automatic forward/reverse records" and dnstap.
New in 1.6.0: persistent timers for slave zones (expire, refresh, and flush) using LMDB.
New in 2.0.0: new YAML-based configuration, and new DNSSEC implementation using GnuTLS.
New in 2.1.0: dynamic configuration, PKCS#11 interface, and online DNSSEC signing.
New in 2.2.0: Response Rate Limiting white listing, support for URI (RFC 7553) and CAA (RFC 6844) resource record types, interactive mode for 'knotc', new control interface for the server including simple Python bindings.
New in 2.3.0: DNSSEC signing configured in server configuration, automatic NSEC3 resalting, zone operations over server control interface, TLS in kdig.
New in 2.4.0: Unified LMDB based journal, new statistics module, automatic deletion of retired DNSSEC keys.
New in 2.5.0: LMDB based KASP databas, KSK rollover, dynamic modules, zone freeze/thaw, zone contents in journal.
New in 2.6.0: On-slave DNSSEC signing, automatic DNSSEC algorithm rollover, Ed25519 algorithm support, TCP Fast Open.