Releases: StackExchange/dnscontrol
v4.14.1
Greetings DNSControl Fans!
This is a bugfix release, though one new feature is included (GCORE gains support for GeoDNS/Failover thanks to @xddxdd).
- NS1 no longer fails if it sees a REDIRECT (#3167) (@kabenin)
- ORACLE no longer gives invalid warnings in one situation (#3178) (@fabienmazieres)
- ORACLE supports more than 50 zones (was only seeing the first 50) (#3179) (@fabienmazieres)
- ORACLE now properly handles the API's inconsistent handling of "trailing dot" on NS records (#3170) (@fabienmazieres)
- M365_BUILDER no longer fails on second level domains (#3165) (@CJFelto)
- Security fix: github.com/go-acme/lego to v4 to resolve security issue (#3169) (@jauderho)
- Integration test TestDualProviders cleans up after itself better (#3171) (@fabienmazieres)
Thanks to everyone for their contributions! This is a community-driven project and we couldn't do it without all your PRs, reviews, and other support!
Here's the details:
Changelog
Provider-specific changes:
- be25228: GCORE: Add support for GeoDNS/Failover (#3161) (@xddxdd)
- ee65e46: NS1: Ignore RRSets of type REDIRECT (#3167) (@kabenin)
- 5fbbad1: ORACLE: BUGFIX: Support accounts with > 50 zones (#3179) (@fabienmazieres)
- a6fe3fc: ORACLE: Do not warn about TTL for sub domain NS records (#3178) (@fabienmazieres)
- 4190659: ORACLE: Handle the API's inconsistent NS "trailing dot" issue (#3170) (@fabienmazieres)
CI/CD:
- 16fa123: Build(deps): Bump actions/cache from 4.1.1 to 4.1.2 (#3175) (@dependabot[bot])
- 635eb31: M365_BUILDER: Support second level domains, fix domainGUID Generation (#3165) (@CJFelto)
Dependencies:
- a0f7123: CHORE: Update deps and fmt (#3184) (@tlimoncelli)
Other changes and improvements:
- 1872b12: NEW FEATURE: IMPORT_TRANSFORM_STRIP (#3181) (@tlimoncelli)
- 2abbab0: CHORE: go generate (#3182) (@tlimoncelli)
- 1edde62: Clean-up records after TestDualProviders (#3171) (@fabienmazieres)
- e0ef3cb: GET-CERTS: Bump github.com/go-acme/lego to v4 to resolve security issues with go-jose (#3169) (@jauderho)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.14.0
Hello DNS Fans!
The big news is that the concurrent data gathering feature is stable and will become the default in the next release. Instead of new commands (ppreview
/ppush
) the functionality is enabled using the --cmode
flag.
- v4.14: --cmode defaults to
legacy
(old code, data gathering is done serially) - v4.15: --cmode defaults to
concurrent
(new code, data gathering is done concurrently) - v4.16: The
legacy
mode is removed
Any use of the old, legacy, code prints a warning:
WARN: In v4.15 --cmode will default to "concurrent". Please test and report any bugs ASAP.
In v4.16 or later, "legacy" will go away. See https://docs.dnscontrol.org/commands/preview-push
Any use of the ppreview
/ppush
commands prints a warning similar to:
WARN: ppreview is going away in v4.16 or later. Use "preview --cmode=concurrent" instead.
Other major changes/improvements:
--report
now works inpreview
, not justpush
.- CLOUDNS now supports LOC and AutoDNSSEC.
- The "# of corrections" count was wrong for some providers. It should now be accurate for all providers.
Thanks to everyone for their contributions! This is a community project and we couldn't do it without all your help!
Tom
Changelog
Major features:
- bbc6892: FEATURE: enable --report for preview (not just push) (#3149) (@tlimoncelli)
- 16a99a1: CHORE: Add deprecation messages to preview/push/ppreview/ppush commands (#3155) (@tlimoncelli)
- 06ba3cc: Bugfix: Providers with batched updates might not report the correct number of changes (#3108) (@tlimoncelli)
Provider-specific changes:
- 040384f: BIND: DOCS: clarify meta config instructions (#3111) (@chicks-net)
- d7f4d0e: CLOUDNS: add support for LOC records (#3127) (@hmoffatt)
- c1abd5d: CLOUDNS: don't print full URL on error (#3124) (#3126) (@hmoffatt)
- dcba570: CLOUDNS: implement AutoDNSSEC (#747) (#3114) (@hmoffatt)
- 795dbea: ORACLE: fix nameserver trailing dot error (#3151) (@kallsyms)
- 864325e: PORKBUN: Update porkbun API endpoint per documentation / email (#3153) (@plttn)
- 57f15c1: PORKBUN: fix staticcheck warnings (#3159) (@imlonghao)
- 9178a83: POWERDNS: Improve preformance by using new batched add/remove functions in 0.6.6 API (#3105) (@Veratil)
Documentation:
- 12a72cb: DOCS: Minor clarifications on NAMESERVER() (#3113) (@tlimoncelli)
- 2a424f5: DOCS: Update Cloudflare permission to "Single Redirect" (#3122) (@kevinji)
CI/CD:
- bf2b6cb: Build(deps): Bump actions/cache from 4.0.1 to 4.1.0 (#3147) (@dependabot[bot])
- 967b37d: Build(deps): Bump actions/cache from 4.1.0 to 4.1.1 (#3157) (@dependabot[bot])
- 6e2cfb5: Build(deps): Bump actions/upload-artifact from 4.3.6 to 4.4.0 (#3104) (@dependabot[bot])
- 94e6b48: Build(deps): Bump actions/upload-artifact from 4.4.0 to 4.4.1 (#3146) (@dependabot[bot])
- db91c71: Build(deps): Bump actions/upload-artifact from 4.4.1 to 4.4.3 (#3156) (@dependabot[bot])
- 3553459: Build(deps): Bump alpine from 3.20.2 to 3.20.3 (#3116) (@dependabot[bot])
- ee610bf: Build(deps): Bump github.com/huaweicloud/huaweicloud-sdk-go-v3 from 0.1.115 to 0.1.116 (#3140) (@dependabot[bot])
- b29c65a: Build(deps): Bump github.com/oracle/oci-go-sdk/v65 from 65.75.1 to 65.75.2 (#3152) (@dependabot[bot])
- f18ef35: CICD: GoReleaser snapshot property deprecation (#3131) (@cafferata)
- b22078e: DEV: Update dependabot.yml (#3115) (@tlimoncelli)
Dependencies:
- 2bb0d87: CHORE: Update deps (#3160) (@tlimoncelli)
- 62da39c: CHORE: update deps (#3128) (@tlimoncelli)
- aca618a: CHORE: update deps (#3141) (@tlimoncelli)
Other changes and improvements:
- d6d50fc: LOC: fix float altitude value ingestion, gate size and precision values (#3130) (@systemcrash)
- 269542c: RELEASE: Move some BYOS steps to be standard (#3107) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.13.0
Hello DNS fans!
This release introduces one new provider and many small fixes and improvements.
- NEW PROVIDER: Sakura Cloud (SAKURACLOUD) (thanks to @ttkzw!)
- NEW FEATURE: The HASH() function can generate hash strings. (thanks to @fuero!)
- Improvements to providers: AUTODNS now supports PTR records, GANDI_V5 supports their new authentication system, HUAWEICLOUD has better DNSSEC support, NS1 documents that NS1_URLFWD is going away, ORACLE now abides by rate- limits automatically, PORKBUN now supports URL forwarding, and POWERDNS has added some reliability improvements.
Some big changes are coming:
- #3108 the "change count" is moving out of the individual provider code, into the main code. This will make the "# corrections" count more accurate.
- #3082 investigates making it easier to add new DNS types (A, MX, etc).
Learning Go? Interested in a starter project? Please email tlimoncelli at stackoverflow dot com.
- 23 providers still use
diff.NewCompat()
instead of the newdiff2.By*
functions. There's nothing wrong with that, but upgrade will make the code cleaner, more simple, and might make the "preview" output cleaner. - I have a few other refactoring ideas that will clean up the code. Interested? Let me know!
Thanks to everyone for their contributions! This is a community effort and it wouldn't be a success without all your help!
Changelog
Major features:
- 864d452: NEW PROVIDER: Sakura Cloud (SAKURACLOUD) (#3086) (@ttkzw)
- 94a0cfc: New Feature: HASH() adds hashing functions to dnsconfig.js language (#3085) (@fuero)
Provider-specific changes:
- f2be1a6: AUTODNS: Enable CanUsePTR (#3098) (@christianbur)
- 8899f45: CLOUDFLAREAPI: Upgrade to cloudflare-go v0.102.0 (#3081) (@tlimoncelli)
- 663be6e: GANDI: Adopt new Gandi v5 auth changes (#2726) (@llange)
- e8eca6a: HUAWEICLOUD: Document DNSSEC capability and improve docs, reliability (#3084) (@huihuimoe)
- 1a3d6a3: NS1: add warning for deprecated record (#3078) (@costasd)
- 1738c6e: NS1: update ns1-go to 2.12.0 (#3074) (@costasd)
- 0de789f: ORACLE: Abide by 429-style rate limits, fix Nameserver update bug (#3090) (@fabienmazieres)
- a3b194f: Oracle: Use SDK v65 and default retry policy (#3094) (@fabienmazieres)
- e86c666: PORKBUN: Remove unused function (#3072) (@tlimoncelli)
- 04f34cf: PORKBUN: support URL Forward (#3064) (@imlonghao)
- 8bb5df9: POWERDNS: Use canonical domain in calls to PowerDNS (#3080) (@kytta)
- 3b904d2: SAKURACLOUD: Add SAKURACLOUD to automated tests (#3095) (@ttkzw)
Documentation:
CI/CD:
- 411a1ed: Build(deps): Bump actions/upload-artifact from 4.3.4 to 4.3.5 (#3067) (@dependabot[bot])
- 5a20c66: Build(deps): Bump actions/upload-artifact from 4.3.5 to 4.3.6 (#3077) (@dependabot[bot])
- dedf398: Build(deps): Bump alpine from 3.20.1 to 3.20.2 (#3063) (@dependabot[bot])
- 24b5c4b: CICD: Removed CodeQL workflow (#3073) (@cafferata)
Dependencies:
- dd2030e: CHORE: update deps (#3097) (@tlimoncelli)
- 62112d1: update deps (#3068) (@tlimoncelli)
- 74826d3: update deps; go generate (#3106) (@tlimoncelli)
Other changes and improvements:
- 69533fc: BUNNY_DNS: run goimports on convert.go (#3071) (@tlimoncelli)
- 3102ec4: CHORE: gitignore should include *.ACTUAL (#3069) (@tlimoncelli)
- fe7370b: CHORE: go generate (#3079) (@tlimoncelli)
- e03c5cb: Gitter - Drop communication channel (#3066) (@cafferata)
- 2944ede: TESTING: Fix reversed got/want output in compareconfig_test.go (#3070) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.12.5
Hello DNSControl fans!
This is another bugfix release. Only CLOUDFLAREAPI
is affected, and only the CF_REDIRECT
/CF_TEMP_REDIRECT
/CF_SINGLE_REDIRECT
commands are affected.
Some non-functional improvements are included in this release too. @cafferata contributed code that automatically generates the OWNERS
file, @nikolamilekic and @svenluijten fixed documentation bugs.
Cloudflare-related improvements:
- Bug fixed:
CF_SINGLE_REDIRECT
rule name was not propagating to Cloudflare correctly. #3049 - Bug fixed:
CF_REDIRECT
/CF_TEMP_REDIRECT
rule name generated in conversion mode was long and ugly; now they are short and easier to identify. They are in the (1,302,when,then) format seen inpreview
output. - New feature: Log the
CF_SINGLE_REDIRECT
statements generated whenCF_REDIRECT
/CF_TEMP_REDIRECT
is in conversion mode.
Explanation of the new feature:
Suppose dnsconfig.js
includes a statement like:
D("example.com", ...
CF_TEMP_REDIR("https://example.com/*", "https://replacement.example.com/$1),
In the old days, CF_TEMP_REDIR
would generate a Cloudflare "page rule". However page rules are going away. Therefore, these will now be silently translated into CF_SINGLE_REDIRECT
statements when the manage_single_redirects
meta feature is set to true. A log of these translations can be generated by setting the transcode_log
variable:
var DSP_CLOUDFLARE = NewDnsProvider("cloudflare", {
"manage_single_redirects": true,
"transcode_log": "transcode.log",
});
Once set, any such translations will be appended to the filename transcode.log.
In this example, the log will look like this:
D("example.com", ...
CF_SINGLE_REDIRECT("1,302,https://example.com/*,https://replacement.example.com/$1",
302,
'http.host eq "example.com"',
'concat("https://replacement.example.com", http.request.uri.path)'
),
Replacing the old CF_TEMP_REDIR
statement with the above CF_SINGLE_REDIRECT
statement requires manual cutting and pasting.
While the CF_REDIRECT
/CF_TEMP_REDIRECT
statements are not going away, it is recommended that you convert to CF_SINGLE_REDIRECT
since they are more flexible and officially supported by Cloudflare.
This feature is documented in https://docs.dnscontrol.org/provider/cloudflareapi#old-style-vs-new-style-redirects
Changelog
Provider-specific changes:
- 0869052: CLOUDFLAREAPI: CF_SINGLE_REDIRECT improvements: fix bugs, log translated redirects (#3051) (@tlimoncelli)
Documentation:
- 1d348de: DOCS: Fix M365_BUILDER examples (#3009) (@nikolamilekic)
- cf49ec8: DOCS: Fix markdown links in Cloudflare provider docs (#3046) (@svenluijten)
CI/CD:
- 8fa1a8d: BUILD: Generate OWNERS files (#2997) (@cafferata)
Other changes and improvements:
- 95c7a70: REFACTOR: Pave args (not validate) (#3045) (@tlimoncelli)
- d160b82: fmt helpers.js (#3048) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.12.4
Hello DNSControl fans!
This is another bugfix release. More fixes for the CF_SINGLE_REDIRECT() feature (now it actually works!), plus removed an debug statement that should have been removed before release, and some docs and dependency upgrades.
"This time for sure!" --Bullwinkle
Changelog
Provider-specific changes:
- 571eaf0: CLOUDFLAREAPI: Bugfix: Fix misaligned CF_SINGLE_REDIRECT validation (#3042) (@tlimoncelli)
- f2a709f: CLOUDFLAREAPI: Bugfix: Fix misaligned CF_SINGLE_REDIRECT validation (#3044) (@tlimoncelli)
Documentation:
- 7b28609: DOCS: CLOUDFLAREAPI - CF_SINGLE_REDIRECT (#3038) (@cafferata)
CI/CD:
- ebf32bf: Build(deps): Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#3037) (@dependabot[bot])
Other changes and improvements:
- cff63b5: BUGFIX: Remove debug statement left in by mistake (#3041) (@tlimoncelli)
- 0ed31ef: CHORE: go generate (#3043) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.12.3
Hi DNSControl fans!
This release makes exactly one change: Adds a CF_SINGLE_REDIRECT()
feature which controls Cloudflare "dynamic single redirects". If you don't use Cloudflare (or do use Cloudflare but don't use that feature) this revision is irrelevant to you. See https://docs.dnscontrol.org/language-reference/domain-modifiers/service-provider-specific/cloudflare-dns/cf_single_redirect and https://docs.dnscontrol.org/provider/cloudflareapi#old-style-vs-new-style-redirects for more info.
FYI: This change is a half-step towards the "make it easier to add new DNS record types" plan documented in #3036. Feedback appreciated!
Changelog
Provider-specific changes:
- 0883068: CLOUDFLAREAPI: Add CF_SINGLE_REDIRECT to manage "dynamic single" redirects (#3035) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.12.2
Hi DNSControl fans!
This point release fixes a minor bug with the CLOUDFLARE CF_REDIRECT conversion. No other changes.
Changelog
Provider-specific changes:
- a091da9: CLOUDFLARE: Bugfix for Redirect, correct typo in error message. (#3033) (@jzhang-sre)
- 937c0dc: CLOUDFLARE: Fix another redirect bug (#3034) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.12.1
Hello DNSControl fans!
Mostly a bug fix release:
- CLOUDFLARE improvements and fixes on the new "single redirect" feature (more to come!)
- PORKBUN handles errors better
- DESEC improved error handling and now runs concurrently
- DOCS improved the getting started summary
What's Changed
- PORKBUN: fix JSON unmarshal and add retry on rate limit by @imlonghao in #3019
- DESEC: Fix init by @JenswBE in #3017
- CLOUDFLARE: Fix bugs with the new "single redirect" feature by @tlimoncelli in #3031
- DOCS: Getting started installation options summary by @cafferata in #3023
- DOCS: MacPorts removed by @cafferata in #3022
- CHORE: Update deps by @tlimoncelli in #3026
- Build(deps): Bump github.com/softlayer/softlayer-go from 1.1.3 to 1.1.5 by @dependabot in #3029
- Build(deps): Bump alpine from 3.20.0 to 3.20.1 by @dependabot in #3028
- Build(deps): Bump github.com/huaweicloud/huaweicloud-sdk-go-v3 from 0.1.100 to 0.1.103 by @dependabot in #3030
New Contributors
Full Changelog: v4.12.0...v4.12.1
Changelog
Provider-specific changes:
- 5ef1e99: CLOUDFLARE: Fix bugs with the new "single redirect" feature (#3031) (@tlimoncelli)
- c22f20d: DESEC: Fix init (#3017) (@JenswBE)
- 2f155ce: PORKBUN: fix JSON unmarshal and add retry on rate limit (#3019) (@imlonghao)
Documentation:
- 01e0fbb: DOCS: Getting started installation options summary (#3023) (@cafferata)
- f83c816: DOCS: MacPorts removed (#3022) (@cafferata)
CI/CD:
- 277b0a0: Build(deps): Bump alpine from 3.20.0 to 3.20.1 (#3028) (@dependabot[bot])
- f3acdc4: Build(deps): Bump github.com/huaweicloud/huaweicloud-sdk-go-v3 from 0.1.100 to 0.1.103 (#3030) (@dependabot[bot])
- 53efc51: Build(deps): Bump github.com/softlayer/softlayer-go from 1.1.3 to 1.1.5 (#3029) (@dependabot[bot])
Dependencies:
- d1a8420: CHORE: Update deps (#3026) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.12.0
Hello DNSControl fans!
This release includes one new provider (HUAWEICLOUD
), HTTPS
/SVCB
records are now supported on CLOUDFLAREAPI
and GCORE
, and require()
now supports JSON5 files. There are also many bugfixes and documentation improvements.
Thanks to @huihuimoe for contributing the HUAWEICLOUD
provider!
The big news of this release is that CLOUDFLAREAPI
's CF_REDIRECT
/CF_TEMP_REDIRECT
commands can now generate redirects using "rules" instead of "page rules". Page rules are going away soon. See https://docs.dnscontrol.org/provider/cloudflareapi for more info. This feature is very new and needs more testing. Please test it carefully before putting it into production, and test the changes in production right away. We're releasing this early to get it out there for early testing before Page Rules go away. (On a personal note, I haven't tested it on all my domains so I can't even promise it works in all the intended cases.) Bug reports greatfully accepted.
Thanks to everyone for their contributions! This is a community effort and it wouldn't be a success without all your help!
Changelog
Major features:
- 1f4c4c6: FEATURE: Add TTL() support to CAA_BUILDER() (#2978) (@cafferata)
- 8eb3c65: FEATURE: Enable "require()" function to accept json5 files (#3003) (@tlimoncelli)
Provider-specific changes:
- ce07c76: HUAWEICLOUD: Add support for huaweicloud dns (#3010) (@huihuimoe)
- b3787ab: AXFRDDNS: Canonicalize key name as per RFC 2845 3.4.2 (#2966) (@nemunaire)
- 7fd6a74: CLOUDFLAREAPI: CF_REDIRECT/CF_TEMP_REDIRECT should dtrt using Single Redirects (#3002) (@tlimoncelli)
- 68b0b30: CLOUDFLAREAPI: Enable DNSKEY, HTTPS, SVCB record types (#3000) (@charliez0)
- 2ccef49: CLOUDFLAREAPI: disable DNSKEY until it is fixed (#3004) (@tlimoncelli)
- df1354b: DNSIMPLE: enable Null MX records (#2960) (@philpennock)
- d55474c: GCLOUD: Fix issue on creating/deleting/updating TXT records (#3011) (@ingwarsw)
- b786b0e: GCLOUD: Fix missing length in make() (#2982) (@tlimoncelli)
- b47ac0d: GCORE: add SVCB and HTTPS support (#2983) (@xddxdd)
- 107b585: HEXONET: Adopt version 4.0.0 of the rtldev-middleware-go-sdk (#2974) (@AsifNawaz-cnic)
- 2d15884: HUAWEICLOUD: add metadata to control Intelligent Resolution (#3013) (@huihuimoe)
- 174fd7b: PORKBUN: catch error on parsing api (#3012) (@imlonghao)
Documentation:
- 9dcd8c7: DOCS: AUTODNSSEC_* improvements (#2984) (@cafferata)
- 4083641: DOCS: Fixed 404 URL's on GitHub page (#2969) (@cafferata)
- 39c08bd: DOCS: Provide domain modifiers code examples with a Top Level Function D() (#2993) (@cafferata)
- 5e68998: DOCS: Removed the double Markdown header syntax. (#2968) (@cafferata)
- f0d1319: DOCS: Several improvements and cleanups (#2972) (@cafferata)
- 2b70f24: DOCS: [REVCOMPAT] Fixed broken URL's (#2970) (@cafferata)
- 91bf56c: DOCS: [get-zones] Removed old reference to
convertzone
(#2971) (@cafferata)
CI/CD:
- 94ce7e2: BUILD: GoReleaser v2.0.0 (#2996) (@cafferata)
- cffd0bb: Build(deps): Bump alpine from 3.19.1 to 3.20.0 (#2990) (@dependabot[bot])
- 2344257: Build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 (#3006) (@dependabot[bot])
Dependencies:
- f029c9b: CHORE: update deps (#2991) (@tlimoncelli)
- 3b0e124: CHORE: update deps (#3015) (@tlimoncelli)
Other changes and improvements:
- 0a784a3: CHORE: Clean up comments in models/domain.go (#2975) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Install with MacPorts
sudo port install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Install with MacPorts
sudo port upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.
v4.11.0
Hello DNSControl fans!
This is mostly a bug-fix and catch-up release. The most significant fix is that ppreview --expect-no-changes
now works, thus making ppreview/ppush
feature complete. Those commands will replace preview/push
in 1-2 releases, so please test them and give your feedback as soon as possible. For my configuration ppreview
reduces run-time from 4-5 minutes to 30 seconds.
- New record support: DESEC added SVCB/HTTPS; NS1 added SVCB, HTTPS, TLSA, DNAME, DHCID; BUNNY_DNS added ALIAS.
- Added support for concurrent operation (ppreview/ppush): NS1, TRANSIP
- "ppreview --expect-no-changes" now works!
- ZSH Autocomplete improved
- Welcome new maintainer for AKAMAIEDGEDNS, Ed Lynes!
Thanks to everyone for their contributions! This is a community effort and it wouldn't be a success without all your help!
Changelog
Provider-specific changes:
- 494a3f7: AKAMAIEDGEDNS: new maintainer: Ed Lynes (#2954) (@svernick)
- c679623: DESEC: Enable support for SVCB/HTTPS (#2942) (@Meroje)
- 7bd9316: NS1: Add SVCB, HTTPS, TLSA support (#2945) (@costasd)
- 4a36396: NS1: add support for DNAME and DHCID record types (#2951) (@costasd)
- 734a55c: NS1: enable concurrency (#2952) (@costasd)
- 612f16b: NS1: update ns1-go to 2.10.0 (#2941) (@costasd)
- c3152b4: TRANSIP: Completed/checked the missing capabilities (#2957) (@cafferata)
- 9815cbb: TRANSIP: Concurrency documented (#2948) (@cafferata)
Documentation:
- a679095: DOCS: Clarify RE doc (#2934) (@tlimoncelli)
- 1205ef6: DOCS: Code examples with
END
constant (#2950) (@cafferata) - e3e91cc: DOCS: [OVH] Several improvements (#2949) (@cafferata)
CI/CD:
- 39eb45b: CICD: De-conflate integration test for SVCB and HTTPS (#2938) (@tlimoncelli)
Dependencies:
- 6e4689d: CHORE: Update deps (#2953) (@tlimoncelli)
- e6885cf: CHORE: update deps (#2944) (@tlimoncelli)
Other changes and improvements:
- 6817e08: BUG: "ppreview --expect-no-changes" returns error for "informational" messages (#2936) (@tlimoncelli)
- ec241ee: BUG: ZSH Autocomplete does not work if installed as a file #2955 (#2956) (@Maetveis)
- a1fc1b1: BUNNY_DNS: Add support for
ALIAS
(#2946) (@DamianZaremba) - 1fa92de: CHORE: Linting and comment-fixing (#2937) (@tlimoncelli)
- c7975f9: CHORE: Upgrade AWS module (#2958) (@tlimoncelli)
Deprecation warnings
Warning
- REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
- MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See #2878
- NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.
- get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400
Install
macOS and Linux
Install with Homebrew (recommended)
brew install dnscontrol
Install with MacPorts
sudo port install dnscontrol
Using with Docker
You can use the Docker image from Docker hub or GitHub Container Registry.
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview
Anywhere else
Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.
Or, if you have Go installed, you can install the latest version of DNSControl with the following command:
go install github.com/StackExchange/dnscontrol/v4@main
Update
Update to the latest version depends on how you choose to install dnscontrol
on your machine.
Update with Homebrew
brew upgrade dnscontrol
Install with MacPorts
sudo port upgrade dnscontrol
Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.