PowerDNS
 | |
| Original author(s) | PowerDNS.COM BV |
|---|---|
| Developer(s) | PowerDNS Community, Bert Hubert |
| Stable release | |
| Repository |
github |
| Written in | C++ |
| Operating system | Unix-like |
| Type | DNS server |
| License | GNU General Public License v2 |
| Website |
www |
| Original author(s) | PowerDNS.COM BV |
|---|---|
| Developer(s) | PowerDNS Community, Bert Hubert |
| Stable release | |
| Repository |
github |
| Written in | C++ |
| Operating system | Unix-like |
| Type | DNS server |
| License | GNU General Public License v2 |
| Website |
www |
PowerDNS is a DNS server, written in C++ and licensed under the GPL. It runs on most Unix derivatives. PowerDNS features a large number of different backends ranging from simple BIND style zonefiles to relational databases and load balancing/failover algorithms. A DNS recursor is provided as a separate program.
Features
PowerDNS Authoritative Server (pdns_server) consists of a single core, and multiple dynamically loadable backends that run multi-threaded. The core handles all packet processing and DNS intelligence, while one or more backends deliver DNS records using arbitrary storage methods.
Zone transfers and update notifications are supported, and the processes can run unprivileged and chrooted. Various caches are maintained to speed up query processing. Run-time control is available through the pdns_control command, which allows reloading of separate zones, cache purges, zone notifications and dumps statistics in Multi Router Traffic Grapher / rrdtool format. Realtime information can also be obtained through the optional built-in web server.
There are many independent projects to create management interfaces for PowerDNS, including PowerAdmin, PDNSOps, PowerDNS on rails and JPower Admin and even a drupal module called PowerAdmin.
DNSSEC
The PowerDNS Authoritative Server supports DNSSEC as of version 3.0. While pre-signed zones can be served, it is also possible to perform online signing & key management. This has the upside of being relatively easy, but the downside that the cryptographic keying material is present on the servers itself (which is also true of any HTTPS server).
Recursor
PowerDNS Recursor (pdns_recursor[3]) is a resolving DNS server, that runs as a separate process. The authoritative pdns_server can be configured to proxy recursive queries to the recursor, and optionally overlay authoritative zone data.
This part of PowerDNS is single threaded, but is written as if it were multi-threaded, by the use of Boost and the MTasker library,[4] which is a simple cooperative multitasking library. It is also available as a standalone package.
It does not have to run a pdns_server process as a gatekeeper for pdns_recursor, if the goal is simply to provide caching/recursing/resolving nameservice as running pdns_recursor on its own is even more efficient than behind the authoritative component.
As of 2007, the Recursor is used by several of the largest Internet providers of the world, including AOL, Shaw Cable and Neuf Cegetel.
Support for DNSSEC validation was added to the recursor in version 4.0.
See also
References
- ↑ "3. Release notes". doc.powerdns.com. 2016-07-29. Retrieved 2016-07-29.
- ↑ "3. Release notes". doc.powerdns.com. 2016-09-06. Retrieved 2016-09-06.
- ↑ "Chapter 18. PowerDNS Recursor: a high performance resolving nameserver". Doc.powerdns.com. Retrieved 2014-05-11.
- ↑ MTasker