Releases: ns1/ns1-privatedns
2.3.2
Enterprise DDI 2.3.2 continues to develop our 1st party DDNS by adding a reverse zone checkbox to the existing DHCP scope group workflow. When checked, this option ensures that added scopes are automatically set up for synthesis of reverse DNS records.
In addition, 2.3.2 contains several fixes and enhancements.
- New Features
- Portal: CSP headers can now be configured for the Portal
- Feature Enhancements
- System: Updated TLS default version to 1.2; added support TLSv1.3; updated allowed cipher list; set TLS to strict validation by default
DHCP: Improved workflow allowing forward (A/AAAA) and reverse (PTR) creation at time of DHCP reservation
- System: Updated TLS default version to 1.2; added support TLSv1.3; updated allowed cipher list; set TLS to strict validation by default
- What’s fixed?
- DDNS: Fixed an issue where the DHCP filter would fail if the host contained capital letters
- DDNS: Fixed an issue where the v1/filtertypes endpoint did not show the DHCP filter
- System: Fixed an issue that would cause system instability when performing Docker lifecycle events on the Core and Dist containers
- System: Fixed an issue where the database backup action was unable to complete
- Security: Fixed a potential XSS vulnerability in the zones API endpoint
- Known issues
- System: DHCP under load (>100 LPS) causes system-wide instability
- Portal: AD Login - Domain Controller Port field is highlighted as invalid by default when a user specifies Domain Controller Host Address and AD Domain Name
- DHCP: Provisioning new DHCP containers after scopes have been added to the system will not work.
- DNS: TLD zone validation currently does not allow wildcard records; this will be addressed in future versions
- DNS: API does not allow user to specify a pool for a zone
- DHCP: DHCPv6 lease renewals delete their leases rather than renew them
- DHCP: reverse zone created for DHCPv6 reservation is incorrect
- DDNS: DDNS does not respect zone and prefix set when host sends an FQDN (no hostname sent or hostname is valid)
2.3.1
Enterprise DDI 2.3.1 brings the ability to create single label zones as well as a handful of DHCP, DNS and general bugfixes.
- New Features
- DNS: Introduced the ability to create single label zones
- Feature Enhancements
- DDNS: Ability to configure NS1 DNS to synthesize dynamic records from active NS1 DHCP leases in the portal
- DNS: Support for TLD zones; TLDs allow for single-label name resolution
- What’s fixed?
- Portal: resolved regression where the network count would always return 0.
- IPAM: resolved an issue where the adjacent endpoint would return an incorrect next subnet
- DHCP: Resolved leases in pools not configured for NS1 DDNS are no longer being misrepresented in the database
- DHCP: replaced invalid option type “hex” with “binary”
- DHCP: Fixed an issue where adding scopes too quickly would prevent replication through the dist container
- System: Fixed a memory leak in the replication mechanism
- System: Fixed an issue where services would not bind to IPv6
- Security: Fixed a potential XSS vulnerability in the zones API endpoint
- Known issues
- DDNS: DHCP filter fails when client-provided hostname contains capital letters
- DHCP: Provisioning new DHCP containers after scopes have been added to the system will not work.
- DDNS: DHCP filter is not in the list of filtertypes in the api v1/filtertypes endpoint, even though it is a valid filter type
- DDNS: Selecting the DHCP filter to expand and read usage information results in a blank browser page; adding the DHCP filter to the list of filtertypes will resolve this behavior; workaround is to go back in the browser
- DNS: TLD zone validation currently does not allow wildcard records; this will be addressed in future versions
2.3.0
Enterprise DDI 2.3.0 introduces the NS1 DDNS implementation enabled using a new DHCP filter. In addition, it contains a handful of enhancements and fixes for DHCP and API performance improvements.
- New Features
- NS1 DDNS Implementation: a filter to on-demand synthesized dynamic records from DHCP leases
- Feature Enhancements
- DNS: limit record pagination parameter in the v1/zones api endpoint to system limit of 10,000
- DHCP: enabled API to set lease lifetime (valid-lifetime) at scope level, previously only available at scope group level
- DHCP: simplified DHCP HA configuration parameter dhcp_peers setting to an array of container hostnames, previously an array of paired container names and hostnames
- DHCP: changed default always-send to false, DHCP now returns only those options that are requested by a client
- DHCP: API support to prevent selecting Scope Groups which are already in use
- What’s fixed?
- DNS: API performance improvements to record creation, previously a large number of record creation caused the API response times to deteriorate
- DHCP: loss of DHCP4 configuration on service restart
- DHCP: resolved regression in the ability to specify a custom port for dhcp_peers
- System: ensure supd logs information to its log file
- Known issues
- DHCP: the interface parameter is not set on pools limiting IPv6 subnet selection to subnets bound to the interface only
- DHCP: Leases in pools not configured for NS1 DDNS are placed in the digest table
- Portal: Domain Controller Port field is highlighted as invalid by default when a user specifies Domain Controller Host Address and AD Domain Name
2.2.3
This release contains a handful of DHCP bugfixes
- What's fixed?
- DHCP: Custom DHCP options can now be removed from a scope
- DHCP: Fixed several issues around updating reservations
- DHCP: Fixed an issue where updating a scope would stop it from propagating via the Dist container
- Known Issues
- DHCP: HA settings ignore custom port for the dhcp_peers option
- DHCP: Lease renewals do not show up in the portal
- DHCP: Setting a new dhcp_service_def_id in a dhcp container will not update the DHCP service. Workaround: Restart the DHCP container
2.2.2
This Release contains numerous bug fixes for DHCP and HA Data
- What's fixed?
- DHCP: Fixed issue where portal would not let you use a custom option type with an IP address field
- DHCP: Fix DHCP high availability (HA) so that it properly load balances and fails over as expected
- DHCP: Fix DHCP propagation via distribution (Dist) containers when custom options are in use
- DHCP: Validation now prevents deleting a custom option if it’s applied to a scope group, scope or reservation; to remove a custom option, the objects using it must be modified first
- DCHP: Fixed an issue where scopes were being removed when updated. To explicitly remove a scope from a scope group, set its scope_group_id to 0
- DHCP: Fixed an issue where the portal would fail validating correct custom options
- HA-Data: Running system in HA mode should no longer fill up disk
- HA-Data: Resolved an issue where database migrations were not applied on first run and Primary flag was lost
- System: Fixed an issue where services attempted to listen on IPv4 and IPv6 when IPv6 was manually disabled
- Containers: core and dist containers will now shutdown and restart cleanly
- Known issues
- DHCP: Custom complex options must follow specific rules for record types, added to article "Managing custom DHCP Options" (https://help.ns1.com/hc/en-us/articles/360040708334-Managing-custom-DHCP-options)
- DHCP: Option schemas are not displayed in scope’s metadata side pane of the portal
- HA-Data: Data container Web UI is not displaying correctly in clustered mode
- DHCP: Reservations cannot be updated after creation; the workaround is to create the reservation with all options and settings desired via the API
- DHCP: Reservations created in the portal do not display DHCP options and other settings; workaround is to add options and other settings when creating the reservation via API call
- DHCP: Custom options with an array of integers cannot currently be applied in the portal; a workaround is to apply an array of integers to a scope group, scope or reservation by the API
- DHCP: Custom options with a hex data type is currently not supported; this data type will be replaced with binary data type in a future patch version and hex data types will be effectively deprecated
2.1.1
2.1.1 is the first patch version of Enterprise DDI.
- What's fixed?
- (NS1 portal) View lease information via the portal (previously viewable via API only).
- (Configuration) Automatic bootstrapping form validation.
- (Configuration) Ability to update container configuration settings via CLI or API, even if it was initially configured via the web interface.
- (Configuration) Ability to specify a port for core_host (DNS and DHCP containers), data_host (CORE container), data_peers (DATA container) and dhcp_peers (DHCP container) in the form of hostname:port. Note: If no port is supplied, it will default to 5353.
- Ability to add host reservations without specifying a specific IP address.
- Added missing replication metrics for DIST and CORE containers.
- Fixed “Generate Runtime Report” action for DHCP containers. (DDI only)
- DHCP option data types. (DDI only)
- Miscellaneous bugs fixes and UI/UX enhancements.
- Known issues
- (NS1 portal) In the Zones page, aggregate record counts indicate only one record, even when more than one record is present.
- (NS1 portal) Operator users signed into the portal are unable to access IPAM and DHCP page and functionality. Current workaround: Sign in as an application user of the organization, or perform actions via API.
- API calls for uploading zone files with the async option enabled (i.e. ?async=true) return an internal server error.
2.1.0
Version 2.1 includes the first release supporting DNS, DHCP, and IP Address Management features.
What's New?
- For the latest Installation & Setup Guide, visit: https://help.ns1.com/hc/en-us/articles/360034124053
- Renamed web to core container
- Renamed cache to dist (distribution) container to disambiguate its function
- Increased password complexity requirements
- Enhanced security for API key secrets
- Added new database layer for increased capacity and protections for referential integrity
- Extended portal navigation to include IPAM and DHCP pages
- Added ability to create and manage IP address objects including split, merge, bulk delete
- Added ability to search and filter subnets
- Added IPAM user-defined metadata in the form of tags and custom attributes
- Added ability to create and modify DHCP server and scope settings and options
- Added view and manage permissions for IPAM and DHCP
- Improved performance of container configuration daemon to reconfigure in seconds
- Added support for customized data replication across networks
1.1.1
What's New?
- Added ability to configure zone and record pagination limits (i.e. beyond 2500) of web containers
- Miscellaneous UI and UX improvements to configuration pages
What's Fixed?
- Fixed issue with web container health checks resulting in false positives
- Fixed issue where operator users logged into the portal could not create users, apikeys, or teams on behalf of an organization
- API and In-Memory database no longer need to be restarted after a data container failover event
- Miscellaneous UI bugs in the NS1 portal