Valeriansaliou Constellation Versions Save

🌌 Pluggable authoritative DNS server. Entries can be added & removed from an HTTP REST API.

v1.14.3

8 months ago
  • Fixed packaging for Debian 10, Debian 11 and Debian 12 on x86_64 architecture.

v1.14.2

8 months ago
  • Publish .deb packages for Debian 10, Debian 11 and Debian 12 on x86_64 architecture.

v1.14.1

1 year ago
  • Moved the release pipeline to GitHub Actions.

v1.14.0

2 years ago
  • Moved HTTP server from rocket to actix, meaning Constellation now builds on Rust stable.
  • Patched dependency rusqlite depended upon by trust-dns-server, so that Constellation builds on latest Rust compilers (note that this is a temporary fix, until substantial work is done to update trust-dns-server et al to latest).

v1.13.0

2 years ago
  • Bumped trust-dns-server to v0.14.0, from v0.13.0. This addresses an issue where a remote attacker could put down a target UDP or TCP listener by sending an invalid DNS packet, which would require a full process restart.
  • Adjusted the guard against DNS server main thread DOS attacks, by lowering to 1/3 of 3s the time chunk allowance.

v1.12.6

2 years ago
  • Fixed an invalid behavior of the store system, where local cache was not fully leveraged for non-existing records for a given query type, resulting in Redis EXISTS being sent to the remote store for every such DNS query.

v1.12.5

2 years ago
  • Implemented a guard against DNS server main thread DOS attacks, due to sending floods of random DNS queries that would poll the Redis store. Constellation now only allows spending 2/3 of 3s time chunks waiting for Redis, otherwise it would SERVFAIL, effectively defeating those kind of DOS attacks.

v1.12.4

3 years ago
  • Multiple CNAME values can now be flattened at once for the same record, and merged together. This feature was omitted in the first CNAME flattener implementation, though it may prove useful in certain use cases.

v1.12.3

3 years ago
  • Bumped trust-dns-resolver to v0.9.1, which implements a more efficient way to share tokio reactor cores across resolve calls (less leaky, which helps avoid further file descriptor leaks caused by the trust-dns-resolver library).

v1.12.2

3 years ago
  • Bumped trust-dns-resolver to v0.8.2, as an attempt to fix file descriptor leaks seen when using Constellation on large-scale deployments.