<para>
Beyond PowerDNS 2.9.20, the Authoritative Server and Recursor are released separately.
</para>
+ <sect2 id="changelog-recursor-3.5"><title>PowerDNS Recursor version 3.5</title>
+ <note>
+ <para>
+ 3.5-RC1 released on ...
+ </para>
+ </note>
+ <para>
+ This is a stability and bugfix update to 3.3/3.3.1.
+ </para>
+ <para>
+ Because a semi-sanctioned 3.4-pre was distributed for a long time, and people have come to call that
+ 3.4, we are skipping an actual 3.4 release to avoid confusion.
+ </para>
+ <para>
+ Changes since 3.3.1:
+ <itemizedlist>
+ <listitem>
+ <para>
+ We now throttle less agressively, code in c1766.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Various improvements in tolerance against broken auths, code in c1996, c2188,
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Some unaligned memory access was corrected, code in c2060, c2122, c2123.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The local zone server now understands wilcards, code in c2062.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The Lua postresolve and nodata hooks, that had been distributed as a '3.3-hooks' snapshot earlier,
+ have been merged. Code in c2309.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Garbage encountered during reload-acls could cause crashes. Fixed in c2323, closing t330.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The recursor would lose its root hints in a very rare situation. Corrected in c2380.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ We did not always drop supplemental groups while dropping privileges. Reported by David Black of
+ Atlassian, fixed in c2524.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Additional processing is now optional, and disabled by default. Presumably this yields a performance
+ improvement. Change in c2542.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ A new setting, export-etc-hosts-suffix, adds a configurable suffix to names imported from /etc/hosts.
+ Code in c2544, c2545.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ We would sometimes stick RRs in the wrong parts of response packets. Fixed in c2625.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ rec_control reload-lua-script now reports errors. Code in c2627, closing t278.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ rec_control help now lists commands. Code in c2628.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The ACL parser was too liberal, sometimes causing recursors to be very open. Fixed in c2629, closing t331.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ rec_control now honours config-dir from recursor.conf. Fixed in c2630.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ When traversing CNAME chains, sometimes we would end up with multiple SOAs in the result.
+ Fixed in c2633.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ We would sometimes refuse to resolve domains with just one nameserver living at the apex. Fixed in c2817.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ c2879 drops some spurious stderr logging from Lua scripts, and makes sure 'place' is always valid.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ rec_control wipe-cache now also wipes the recursor's packet cache. Code in c2880 from t333.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Morten Stevens contributed a systemd file. Import in c2966, now part of the recursor tarball.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ c2990 updates the address of D.root-servers.net.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Since we re-parse our commandline in rec_control we've been doubling the commands on the commandline, causing weird output. Reported by Winfried Angele. Fixed in c2992, closing t618.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Winfried Angele implemented and documented the ipv6-questions metric. Merge in c3034, closing t619.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ rec_control reload-acl no longer ignores arguments. Fix in c3037, closing t490.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ A new feature, rec_control trace-regex allows the tracing of lookups for specific names. Code in c3044.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ We no longer use ANY to get A+AAAA for nameservers, because some auth operators have decided to break
+ ANY lookups. As a bonus, we now track v4 and v6 latency separately. Change in c3064.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Cache aging would sometimes get confused when we had a mix of expired and non-expired records in cache.
+ Spotted and fixed by Winfried Angele in c3068, closing t438.
+ </para>
+ </listitem>
+ </itemizedlist>
+ </para>
+ </sect2>
<sect2 id="changelog-auth-3-2"><title>PowerDNS Authoritative Server 3.2</title>
<warning><para>Version 3.2 of the PowerDNS Authoritative Server is a major upgrade if you are coming from 2.9.x. There are also some important changes if you are coming from 3.0 or 3.1
Please refer to <xref linkend="from2.9to3.0"/>, <xref linkend="from3.0to3.1"/> and <xref linkend="from3.1to3.2"/> for important information on