Changes¶

Release Date: Mar 2nd, 2026

eventforwarder and report-api: Enable multiple addresses to be specified for open/elasticsearch
topn: Add support for multiple addresses to be specified for open/elasticsearch and http
dstore-dist: Enable support for parquet encoding for storage destinations
eventforwarder: New option to use the bulk create action in addition to existing index action to support Elasticsearch Data Streams
alertmanager: Improve alert rules and labels to be more consistent
dstore-dist: Add OpenTelemetry destination type to support sending events to OpenTelemetry tracing backends
dstore-dist: Refactor and simplify protobuf handling to use lazy decoding and achieve better performance
eventforwarder and report-api: Refactor to use the Opensearch go client, to achieve better compatibility with both Opensearch and Elasticsearch
docs: Add OpenAPI documentation for report-api to the docs
metrics: Improve and simplify various metrics to be more consistent
topn: Use protobuf meta fields to populate JSON if available
topn: Add new security fields to the topn reporter JSON output
dstore-dist: Support filtering based on outboundQueries field in protobuf

dstore-dist: Always escape protobuf tags when writing them to JSON to avoid encoding issues with binary data
docs: Add missing documentation for S3 storage destination

Release Date: Mar 2nd, 2026

report-api: Add a delete subscriber endpoint to delete all reports for a given subscriber

Release Date: Nov 13th, 2025

dstore-dist: Consider all 2xx HTTP status codes as successful for websub destinations

Release Date: Nov 6th, 2025

Release Date: Aug 8th, 2025

Add readyz and livez endpoints for better health checking
report-api: support Oauth2 Bearer Tokens for authorization (including optional token caching)
dstore-dist: exit with an error if no destinations or routes are configured
eventforwarder: use protobuf meta fields to populate JSON if available
eventforwarder: add support for query counts (per subscriber and global)
report-api: Add query count information to REST API, and fulfil queries more efficiently by using the new fields
dstore-dist: header flags and edns version will be added to bind-format logs if available
dstore-dist: use a faster gzip compression module for logs sent to S3
dstore-dist: configurable timeout for storage destination requests
dstore-dist: new destination type 'websub', including support for Oauth2 authorization
documentation: Fix various missing/incorrect config parameters
dstore-dist: add new filters for src and destination port, plus requestorID

Bug Fixes¶

Fix an issue where report-api was not using TLS for the REST API when configured to do so

Release Date: Feb 25th, 2025

Fix an issue with sending messages to S3 storage where dstore-dist could get stuck in an infinite loop

Release Date: Jan 17th, 2025

report-api: New Reporting REST API to retrieve global and per-subscriber data from Elasticsearch
docs: New HTML Documentation using mkdocs
eventforwarder: Improve forwarder configuration and run-time stability
alerts: Prometheus alert rules for all components
dstore-dist: Support new filters based on DNS header flags, EDNS version/flags and udr
topn: Wrapper template for HTTP events to support Splunk HEC and other custom HTTP backends

Release Date: Aug 13th, 2024

dstore-dist: Fix issue with storage destination when no batch_buffer_size is configured
images: Add supervisord to dstore images for control by Cloud Control agent
topn-reporter: Fix logging issues in topn reporter
eventforwarder: Fix elastic wait loop issue and add option to append date to elastic index name
dstore-dist: Detect half-closed connections immediately for pdns destinations

Release Date: Jul 8th, 2024

dstore-dist: configurable instance name for kafka destinations to allow source dstore-dist instance to be identified
eventforwarder: new daemon to send filtered events to Elasticsearch for reporting purposes
dstore-dist: sasl auth support for kafka destinations (plain, scram-256, scram-512)
dstore-dist: add new prometheus metrics to count filter hits and accepted/rejected/received rates/sec
dstore-dist: new IPset filter to filter based on source IP/prefix
dstore-dist: new storage destination supporting local files or S3, and a variety of encodings including JSON, protobuf or Bind query logging
security: SLSA Level 3 for images (provenance, SBOM) and image signing
dstore-dist: support different framing options for outbound messages (pdns destinations only)

Release Date: Dec 5th, 2023

packaging: Enterprise Linux 9 Support and many python fixes
packaging: Production image for dstore-dist and top-n-reporter uploaded to OX registry in CI
tests: Add and update dstore-dist tests in CI
cleanup: Remove legacy dstore code leaving only dstore-dist and related tools
security: Add features outstanding from Nixu code-audit
logging: Add structured logging to dstore-dist
api: Add history API to dstore-dist for debugging

Release Date: May 3rd, 2023