Unbound 1.24.0 released

We are pleased to announce the release of version 1.24.0 of the Unbound recursive DNS resolver.

This release features increased defaults, num.valops statistic, unbound-control cache_lookup, and bug fixes.

The default value increase for num-queries-per-thread is to make saturation of the task queue more resource intensive and less practical. Thanks to Shiming Liu, Network and Information Security Lab, Tsinghua University for the report.

The default value increase for so-sndbuf is to mitigate a cross-layer issue where the UDP socket send buffers are exhausted waiting for ARP/NDP resolution. Thanks to Reflyable for the report.

To help the server start more easily, the setsockopt for sndbuf buffer size prints a warning instead of a failure to start the server if it can not set the buffer size.

Various cache -slabs options are auto-configured if not specified in the config file. It uses a power of two close to the number of threads. When the option is specified in the config file that value is used instead.

An extra statistic is added to track the number of signature validation operations by the validator, num.valops.

The unbound-control cache_lookup command prints cache information for names in the domain given. This prints similar to dump_cache, but only names under the zone(s) specified. Because of that it locks the caches for a much shorter time, and this is good for server responsiveness.

The sock-queue-timeout option is adapted to work on FreeBSD as well as Linux.

For a full list of changes, binary and source packages, see the download page.