Greetings DNS fans!
This is mostly a bugfix release. INWX adds AutoDNSSEC and ALIAS support, plus a bunch of other cleanups thanks to @eliheady!
NEWS: Github Discussions has been enabled. We hope it will become the best place for questions and discussions!
REMINDER: get-certs (SSL cert generation via ACMV/LetsEncrypt) and the MSDNS provider will be removed in a few months. Most likely late July.
Thanks to all contributors involved in this release! This is a community project and we couldn't do it without all our contributors!
Best,
Tom
Changelog
General changes:
- 7a4c16f: BUGFIX: REV fails in D_EXTEND for IPv6 addresses (#3552) (@tlimoncelli)
Provider-specific changes:
- cf971b8: AXFRDDNS: Ignore ZONEMD records (#3551) (@gucci-on-fleek)
- e2c4a4a: AZURE: populate zone cache after creating zone (#3329) (@das7pad)
- 6974335: AZURE_DNS: Dedupe nameserver (#3526) (@vatsalyagoel)
- 5715b84: BUNNY_DNS: Support DNSSEC and fix Null MX parsing (#3547) (@ppmathis)
- 25fa91c: DESEC: Properly support punycode domains (#3479) (@networkException)
- 1c04aff: INWX: Add AutoDNSSEC support (#3534) (@eliheady)
- cfaa82f: INWX: Fix Null MX handling (#3524) (@eliheady)
- 76e1d38: INWX: populate zone cache after creating zone (#3334) (@das7pad)
- c204cce: INWX: support ALIAS records (#3499) (@tennox)
- 07ffb3a: INWX: use domain ACE encoding as cache key (#3519) (@eliheady)
- 03932c9: NAMECHEAP: fix support for url etc records (#3538) (@willpower232)
- 605ec55: PORKBUN: Add support for SVCB and HTTPS record types. (#3527) (@jcjones)
- 6322a62: POWERDNS: Add support for DNAME, HTTPS, SVCB, and DNSKEY record types (#3525) (@vfreex)
Documentation:
- c4f5bda: DOCS: add for CONCURRENCY_VERIFIED (#3510) (@gotjoshua)
- 6a008a9: DOCS: Added requested providers Netim (#3517) (@cafferata)
- e41a6ba: DOCS: Fix link to contributor responsibilities (#3528) (@tlimoncelli)
- 9c7fafa: DOCS: Reclassify providers concurrency status (#3518) (@cafferata)
Other changes and improvements:
- bb7f881: BUG: Fixed concurrency verified matrix builder (#3537) (@cafferata)
- d0fffaf: BUGFIX: types fix: CAA_BUILDER accepts string[] or string for issue (#3546) (@eliheady)
- cf26268: CHORE: Update dependencies (#3560) (@tlimoncelli)
- ba67db2: CHORE: generate-all.sh (#3561) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrolUsing with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol previewAnywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@mainUpdate
Update to the latest version depends on how you choose to install dnscontrol on your machine.
Update with Homebrew
brew upgrade dnscontrolAlternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.