PowerDNS: 2016 in review
Hi everyone, As 2016 draws to a close, we’d like to share a few words on what has been achieved over the past year, our second year within Open-Xchange. This post will cover both our technical and...
View ArticlePowerDNS Jobs, 4.1 roadmap, DNSSEC research
Hi everyone, In this post, we want to mention a few things: PowerDNS Jobs, 4.1 plans & some DNSSEC research. First, PowerDNS is growing rapidly as more and more large scale service providers...
View ArticlePowerDNS Recursor 4.1 Development Plans
Hi everyone, In this message, we ask you to look at our intended PowerDNS Recursor 4.1 development plan. The 4.0 release train has been very successful and reliable for a major ‘.0’ release and is...
View ArticleOX Summit & other conferences
Hi everyone, As we are working on the 4.1 & 1.2 releases, please know you can also meet us in real life! We are just back from IETF in Prague, here is a list of other places where we will be...
View ArticleDNS performance metrics: the logarithmic percentile histogram
DNS performance is always a hot topic. No DNS-OARC, RIPE or IETF conference is complete without new presentations on DNS performance measurements. Most of these benchmarks focus on denial-of-service...
View ArticlePowerDNS Authoritative: Lua Records
Hi everyone, We are happy to share a new development with you, one that we hinted at over a year ago: Lua resource records. In this post, we ask for your help: did we get the feature right? Are we...
View ArticlePowerDNS end of year post: Thank you!
Greetings! 2017 has been a great year for PowerDNS and Open-Xchange. In this post, we want to thank everyone that contributed, and highlight some specific things we are happy about. HackerOne bug...
View Article“The DNS Camel”, or, the rise in DNS complexity
This week was my first IETF visit. Although I’ve been active in several IETF WGs for nearly twenty years, I had never bothered to show up in person. I now realize this was a very big mistake – I...
View ArticleOn Firefox moving DNS to a third party
DNS lookups occur for every website visited. The processor of DNS requests gets a complete picture of what a household or phone is doing on the internet. In addition, DNS can be used to block sites or...
View ArticleSpoofing DNS with fragments
With some care, it turns out to be possible to spoof fake DNS responses using fragmented datagrams. While preparing a presentation for XS4ALL back in 2009, I found out how this could be done, but I...
View ArticlePowerDNS Authoritative Server 4.2.0-alpha1: Lua records, ixfrdist, swagger
We’re proud to release the first alpha version of the PowerDNS Authoritative Server 4.2 series. While some users have already deployed this version straight from our package builders or master...
View ArticleDomain security outside of DNS: Getting hacked administratively
This is a brief blogpost on the news that has been sent to us by many people, namely that there is a suspected Iranian group that is “hijacking DNS”. I was about to be interviewed on this subject but...
View ArticleThe big DNS Privacy Debate at FOSDEM
This weekend at the excellent FOSDEM gathering there were no less than three presentations on DNS over HTTPs. Daniel Stenberg presented a keynote session “DNS over HTTPS – the good, the bad and the...
View ArticleHow PowerDNS is Open Source & a successful business, or, why are we talking...
What does PowerDNS actually do? This is a good question, one we can ask about any company. How do they stay alive, what services do they deliver, who do they sell them to? For Open Source companies,...
View ArticleCentralised DoH is bad for privacy, in 2019 and beyond
Recently, Mozilla announced it would be moving Firefox DNS lookups to Cloudflare by default, for its American audience. There will be a notification about this for existing users, at which point they...
View ArticleDoH: (Anti-)Competitive and Network Neutrality aspects
Much has already been written on how moving to centralised DNS is bad for our privacy in 2019, and on that basis alone centralizing our DNS on a few large cloud providers seems like a bad idea. In...
View ArticleGoodbye DNS, Goodbye PowerDNS!
After over 20 years of DNS and PowerDNS, I am moving on. Separate from this page, I am releasing a series of three huge posts on the history of PowerDNS, so I won’t dwell too much on that here. This...
View Article