DNSControl Files

Greetings, DNS fans!

This is a BIG release! You should do extra testing before you put this into production. MSDNS and get-certs are removed. 2 new providers added. Many, many, other improvements!

Breaking changes:

• get-certs subcommand is removed. It has been unsupported since December 2022 and warnings that it would be removed in July 2025 started about a year ago.
• MSDNS (ActiveDirectory DNS) provider has been removed, as it can no longer be supported.

Other exciting news:

• New providers: ADGUARDHOME, FORTIGATE
• These providers now support concurency: LUADNS, MYTHICBEASTS, PORKBUN
• The --notify flag now makes errors visible to ease debugging
• The documentation list of providers is reorganized into smaller charts
• Many documentation fixes including many broken links now work
• The User-Agent now properly includes a version number
• Many, many, dependencies have been upgraded, including the newest PowerDNS and LUADNS SDKs.

Thanks to all contributors involved in this release! This is a community project and we couldn't do it without all our contributors!

Sincerely, Tom

Changelog

Major features:

• d042b3edf73c08793d78763446f0ef79711587e8: FEATURE: --notify now makes errors visible to make debugging easier (#3614) (@hmoffatt)
• 3ea7ea84c975bff31fd9415de379a1255cb18c91: FEATURE: Support ignoring the ech= parameter in HTTPS/SVCB RR types (#3485) (@gucci-on-fleek)
• e1830abb582e6f1cf067230b4ba1a0a6fb0ec7cb: NEW PROVIDER: ADGUARDHOME (#3638) (@ishanjain28)

Provider-specific changes:

• 855624aac0d57d8cfe6d28f5526cab5ecd7f8889: DIGITALOCEAN: DOCS: update instructions for creating API token (#3617) (@hmoffatt)
• 5a2a53c150efb2fbcb769257161bb72ca5796612: FORTIGATE: Fix init provider (#3654) (@KlettIT)
• e9b49e23aa75b88cc370063c3c9bf42050dccf71: LUADNS: Support HTTPS record type, enable concurrency, adopt newest SDK (#3640) (@riku22)
• 4efa09bde6ca1dfea65ec7a02e515ae69680300f: MYTHICBEASTS: Mark as concurrent verified. (#3631) (@tomfitzhenry)
• e5eab4f828ab0312b1d159608e85c4ce64e039bf: MYTHICBEASTS: Performance improvement: Use the OAuth2 client credentials protocol (#3629) (@tomfitzhenry)
• 75821a8219aa3865f104f654c8e3ff9c300c8924: NS1: code reorganization (#3622) (@costasd)
• 4ce19352e9ec09dc9387cc279daafd3da8d6b99f: PORKBUN: Improve retry handling, mark as concurrent (#3652) (@jamesog)
• 4672409f0b08837858c72d4e812f4130b8c5a15d: PORKBUN: fix SVCB params (#3650) (@imlonghao)

Documentation:

• 0d081ba10c2776c48f04208c99b0100a84593594: DOCS: RWTH provider is only available via the intranet (#3497) (#3623) (@MisterErwin)
• a8c41d931fb9e2afad947bacc33ea226def8aba2: DOCS: Added requested provider Sav.com (#3635) (@cafferata)
• 1a7cb205999b130f025e5e4c25752182d34dc43a: DOCS: Added requested providers Scaleway (#3609) (@cafferata)
• 0a4162f14a322ffb36c4b1793314900e06089584: DOCS: How to add a requested provider (#3636) (@cafferata)
• 1f8b7d01b6f0f184bd86cefe7d30ccc7ca6ac105: DOCS: Linkspector URI fixes (#3625) (@cafferata)
• e5f4d97950322b74d111c69b2d1280fcf34e790c: DOCS: [GitBook] Refactor structure to match URL paths and fix missing page links (#3613) (@cafferata)
• b2e3775c2ed07140036538875902f84dcfe632bd: DOCS: add links to help jump to provider table anchors (#3619) (@chicks-net)

CI/CD:

• adfe033ef031cd315dae92131561aeee59328757: Build(deps): Bump brace-expansion from 2.0.1 to 2.0.2 (#3632) (@dependabot[bot])
• 9fc981471df62eec0308d2add701cd6f6859dd5b: Build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#3644) (@dependabot[bot])

Dependencies:

• 0d60e0c1661deffa74f52a1ca9567ff387e8c4f4: CHORE: Update dependencies (#3643) (@tlimoncelli)
• 6fdbac726b265c820e2f3d4ee492db2101a5bd3a: CHORE: Update dependencies (#3659) (@tlimoncelli)
• f8252436c58a3ab0cdbb623860e932c069b1e48c: CHORE: Update dependencies (#3666) (@tlimoncelli)
• b66251bfda9457ef0ef67eee4ac2093fbea5ed5f: CHORE: update dependencies and fmt (#3655) (@tlimoncelli)

Other changes and improvements:

• 919ce2476911a12d22be60e7aecfbfcafb8c195d: BUG: Fix --notify on preview and on error (#3616) (@hmoffatt)
• 74e1bb50dab2eb20edde9bdb3d437583838f2708: BUG: Output better "version" string when running main.go directly (#3658) (@jamesog)
• cd8892f9bbb515b3025c9d105cba710f49d6d540: BUG: User-Agent should include DNSControl version (#3653) (@jamesog)
• d37736e1f0631213d7f39ef453dcbafa3117437a: CHORE: Linting (#3645) (@tlimoncelli)
• a0d04a181afd13d8ecc67c83138f01b0496b653e: CHORE: Remove "get-certs" command (#3657) (@tlimoncelli)
• 1ccd5eb532437a0ff3223ef60cd38c2cd230230b: CHORE: Remove the MSDNS provider (#3656) (@tlimoncelli)
• a8a3ea73bae3f59cfce7fb8159c51f6772c0f42e: CHORE: remove unused module pkg/acme (get-certs) (#3667) (@tlimoncelli)
• 3bdbb481647d0436493715a883a034baa8b350be: NEW PROVIDE: FORTIGATE (#3642) (@KlettIT)
• 874ba798d44fce0c1d1363cacfcd3ce3d3447e16: REFACTOR: Rename commands/zonecache.go (#3646) (@tlimoncelli)
• 8a6baa7c243224b25987d90040081b33748c4805: Reapply "CHORE: Remove the MSDNS provider (#3656)" (@tlimoncelli)
• 81a916cd5cfbf24e927ae462ec0722ca05b935ed: Remove docs (@tlimoncelli)
• e0e610c6ca2d5dda839a455c591a117bd79ccf75: Remove docs (@tlimoncelli)
• e9f136036f89f31de4659dd87c73662660f8d72a: Revert "CHORE: Remove the MSDNS provider (#3656)" (@tlimoncelli)
• 50e4bfb4e01a071778591b8a6f5cccce2787e525: Revert "Remove docs" (@tlimoncelli)
• c5e9cd1cb45ccec34480b0520d1ffedc5b438e34: Revert "Remove docs" (@tlimoncelli)
• 188343d822b5632a12b6e4e79dcffad4831dec38: Revert "remove commands/getCerts.go" (@tlimoncelli)
• e3b6141715770447e10793df1dcc0c84f8d5ec4c: chore: update go-powerdns to v0.6.7 and adjust SOAEditAPI type (#3664) (@jpbede)
• 1fa31c71b1791b8a6b30b38b9cac348991a70865: remove commands/getCerts.go (@tlimoncelli)

Deprecation warnings

[!WARNING] - REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat - MSDNS maintainer needed! Without a new volunteer, this DNS provider will lose support after April 2025. See https://github.com/StackExchange/dnscontrol/issues/2878 - NAMEDOTCOM and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes. - get-certs/ACME support is frozen and will be removed without notice between now and July 2025. It has been unsupported since December 2022. If you don't use this feature, do not start. If you do use this feature, migrate ASAP. See discussion in issues/1400

Install

macOS and Linux

Install with Homebrew (recommended)

:::shell
brew install dnscontrol

Using with Docker

You can use the Docker image from Docker hub or GitHub Container Registry.

:::shell
docker run --rm -it -v "$(pwd):/dns" ghcr.io/stackexchange/dnscontrol preview

Anywhere else

Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.

Or, if you have Go installed, you can install the latest version of DNSControl with the following command:

:::shell
go install github.com/StackExchange/dnscontrol/v4@main

Update

Update to the latest version depends on how you choose to install dnscontrol on your machine.

Update with Homebrew

:::shell
brew upgrade dnscontrol

Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.