We are pleased to announce the release of version 1.16.1 of the Unbound recursive DNS resolver.
This release fixes a number of bugs. The number of nxdomains encountered when looking up a nameserver is not counted as such when the lookup was from cache. Also parent side queries are not created when the addresses are lame or already in cache. This solves lookup problems of domains with a lot of nxdomains, and that have parent-child differences.
Algorithms that are not supported are disabled when the system OpenSSL does not provide them, for FIPS OpenSSL installations.
Unbound sets IP_BIND_ADDRESS_NO_PORT socket option on outgoing tcp sockets to make the port space larger that can be used. The number of outgoing udp packets is collected in the num.query.udpout statistic.
For a full list of changes and binary and source packages, see the download page.