Urgent request for Peplink to update the code for their DNS to support EDNS and DNSSEC. Major DNS services on the internet will implement new policies soon. " Starting February 1st, 2019 there will be no attempt to disable EDNS as reaction to a DNS query timeout. This effectivelly means that all DNS servers which do not respond at all to EDNS queries are going to be treated as dead . It is important to note that EDNS is still not mandatory. If you decide not to support EDNS it is “okay” as long as your software replies according to EDNS standard section 7. ."https://dnsflagday.net/
Is there any additional information available on a firmware update/release regarding DNS by the first week of January 2019? If our pair of peplink balance 2500’s will not comply with DNSSEC and EDNS policies, we will be forced to abandon them completely and install and test another solution prior to Feb 1st. I don’t want to wait until Jan 31st to begin a new rollout for our external DNS solution. Thank You
Since there is no ETA for EDNS, DNSSEC, or even an indication of compliance in DNS response,etc…come Jan 11th I will have 2 each Balance 2500’s for sale - they were installed in 2017 and have about 1.5 years of full warranty left. I can’t continue to use them as our auth DNS which was their only remaining function since BGP compatibility wasn’t available at the time we were forced to move to BGP. They’ve been a terrific product for certain applications, but they are getting further and further behind in their compatibility with today’s networking standards and security. Contact me if you are interested in purchasing.
We are actually working on the DNS flag day compliance support.
7.1.2 special firmware will be ready to release on the coming week and the support will also be included in 8.0.0 GA firmware.
We will keep you posted here when the special build is ready.
The latest version 8.0 beta 2 is not included the enhancement yet. Confirmed with Engineering team version 8.0 GA will included the feature.
We will have the special firmware for 7.1.2 that compliance with EDNS, DNSSEC this week. We will post the download link here when the firmware is ready.
It’s now absolutely required to get the exact date of the release !
We receive a lot of complains from our customers about the lack of information from Peplink support about this issue
EDNS flag is well known since a while and seems to be ignored by Peplink…
We are ten days before the deadline…
