Skip to content

Release Notes

Release 3.1.1

Improvements

  • Lightning Stream Enterprise 1.0.2 is included, which allows for increased control over S3 client settings. See Lightning Stream S3 Client configuration for more details
  • Dynamic Filtering API tokens can now also be provisioned based on pre-existing Secrets. See Admin API Tokens for more details

Bug Fixes

  • Additional services configured for a Grafana deployment now correctly select Grafana Pods using the new -v2 naming suffix
  • Resolved a Helm templating issue causing several containers to be missing their default security context
  • Helm template for Redis & Postgres Stateful Sets will no longer attempt to update the Persistent Volume template after initial deployment (see notes in respective configuration references under "Persistent Volume")
  • Moving metrics from the aggregator container to the agent container unintentionally moved the metrics listener to port 9180, putting them out of sync with the prometheus.io/port annotations on Pods. This port has been modified on the agent containers to match the default Prometheus port of 8082.

Compatibility

PowerDNS components have been upgraded to the following versions:

Component Version
Filtering components 2.10.2
Lightning Stream Enterprise 1.0.2

Release 3.1.0

Upgrade Notes

Please make sure to read the Upgrade Notes to see if upgrading from any previous release requires attention prior to upgrading.

Major New Features

Cloud Control 3.1.0 introduces several major new features:

  • Dynamic Filtering: Filtering which can be defined to act on the source of DNS traffic, typically by identifying a subscriber/device and applying subscriber/device specific policies. Dynamic filtering also provides an administrative GUI & API through which policies and much more can be managed at runtime.
  • Reporting now includes the full dstore stack through the introduction of Event Forwarder and Report API
  • dnsdist now has Defender included to bring its security capabilities to an even higher level.
  • Lightning Stream Enterprise has replaced Lightning Stream to offer increased performance and scalability by introducing incremental deltas.
  • New feed sources for filtering:
    • HTTP API Downloader: Feeds based on content exposed by an HTTP API endpoint
    • OX Feed Mirror: Allows you to mirror feeds provided by PowerDNS or feeds managed by other feed generators
  • Cloud Control API can now also be deployed in a Controlplane and has additional features to manage the new Cloud Control Postgres clusters and Redis deployments.

Additions & Improvements

Cloud Control also includes many new smaller additions and improvements:

  • Newly introduced features now use fully managed Postgres clusters and Redis deployments part of Cloud Control. Future releases may see support added to use these for the features existing prior to 3.1.0.
  • Grafana & Grafana Operator have been upgraded to the current releases, offering many visual improvements to the dashboards.
  • Authoritative Server backends using GeoIP databases use a new mechanism to constantly monitor & fetch externally hosted GeoIP databases to ensure changes made to the source database are automatically reflected in the backend's answers to DNS queries.
  • OAuth 2 has been added as a reusable user backend.
  • CertManager support has been added to most components as an easy way to enable TLS on inbound traffic with certificates managed by CertManager.

Compatibility

PowerDNS components have been upgraded to the following versions:

Component Version
Authoritative Server 4.9.8
dnsdist 2.0.0
dnsdist defender 1.0.1
Dstore components 2.3.0
Filtering components 2.10.0
Lightning Stream Enterprise 1.0.1
Recursor 5.2.4
ZoneControl 1.7.2

Utility components have been upgraded to the following versions:

Component Version
Nats 2.11.3
Postgres 17.5
Redis 7.4.1

Monitoring components have been upgraded to the following versions:

Component Version
Grafana 12.0.2
Grafana Operator 5.18.0