Development Update #2203

Photo by Roberto Huczek on Unsplash

Releases

There’s been a bunch of releases over the last couple of months so here is a short summary of most of them.

dnsperf v2.9.0

  • Messages about receiving unexpected DNS IDs can now be suppressed with `-O suppress=unexpected`
  • Control the number of queries sent over a connection before triggering a re-connect event with `-O num-queries-per-conn=<num>`

dsc v2.12.0

  • Added option `tld_list` to control what DSC considers are TLDs, this can be used to gather statistics on domains like `co.uk` and `net.au` that would otherwise be counted as `uk` and `au`
  • Added a script to convert the Public Suffix List to this format, see `man dsc-psl-convert` for more information
  • Updated man-pages to clarify how to use multiple interface and other similar options
  • Removed deprecated cron upload scripts

dnswire v0.3.x

  • Updated the Protobuf definition for DNSTAP to include new message types, new protocols and the new Policy object

dsc v2.13.0

  • Use the new dnswire version to support the new DNSTAP message types and protocols
  • Big performance boost when hashing IPv6 addresses, see changelog for more information
  • New indexer `label_count`: Number of labels in the QNAME
  • New indexer `encryption`: Indicates whether the DNS message was carried over an encrypted connection or not, and if so over which (for example “unencrypted”, “dot”, “doh” etc)

dnscap v2.0.2

  • Fixed memory leaks when using `-x`/`-X` regexp filtering due to incorrect usage of LDNS library

PacketQ v1.6.0

  • Added new SQL function `netmask()` for masking addresses
  • Added support for Pcap’s LINUX_SLL link layer

Prometheus output for dsc-datatool

I recently added support to dsc-datatool for feeding Prometheus via its `node_exporter` and using the Textfile Collector.

Check My DNS — RPKI OV positive-false fix

There was an issue in Check My DNS where it could falsely show that you had RPKI origin validation on if the proxy for that check was down. This has been fixed so it will now only show success for RPKI OV if the proxy is up and there was no traffic to the invalid prefix.

OARC member survey — one big project going forward

I recently conducted a survey amongst our members about what area to focus on and some big multi-year project ideas. The two suggested focus areas (Testing vs Statistics+measurement tools) gave an almost clean 50/50 split — so I guess we’re going to focus on both of them. From the 5 suggested projects a couple of them seem like clear winners so the plan is now to start writing them up, decide and present it at OARC38.

Wanted: Engineers!

We’re currently looking for both short-term and long-term engineering positions within Systems, Software and Networks — see our Careers page for more information.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
DNS-OARC

DNS-OARC

Domain Name System Operations Analysis and Research Center