notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)Want a good monitor light? See my photosAll times are UTC		 Ukraine
Port details on branch 2025Q3
knot-resolver Caching full resolver implementation
5.7.6 dns on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 5.7.6Version of this port present on the latest quarterly branch.
Maintainer: freebsd@dns.company search for ports maintained by this maintainer
Port Added: 2025-08-04 13:03:04
Last Update: 2025-08-04 13:00:39
Commit Hash: 228899a
License: GPLv3+
WWW:
https://www.knot-resolver.cz/
Description:
Knot Resolver is a caching DNS resolver scalable from huge resolver farms down to home network routers. Knot Resolver is a modern resolver implementation designed for scalability, resiliency, and flexibility. Its design is different from other resolvers: The core architecture is tiny and efficient, and most of the rich features are implemented as optional modules, which limits attack surface and improves performance.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (106 items)
Collapse this list.
  1. /usr/local/etc/knot-resolver/root.keys
  2. /usr/local/share/licenses/knot-resolver-5.7.6/catalog.mk
  3. /usr/local/share/licenses/knot-resolver-5.7.6/LICENSE
  4. /usr/local/share/licenses/knot-resolver-5.7.6/GPLv3+
  5. @sample etc/knot-resolver/kresd.conf.sample
  6. etc/knot-resolver/icann-ca.pem
  7. etc/knot-resolver/root.hints
  8. include/libkres/api.h
  9. include/libkres/array.h
  10. include/libkres/cdb_api.h
  11. include/libkres/cdb_lmdb.h
  12. include/libkres/defines.h
  13. include/libkres/dnssec.h
  14. include/libkres/impl.h
  15. include/libkres/iterate.h
  16. include/libkres/layer.h
  17. include/libkres/log.h
  18. include/libkres/lru.h
  19. include/libkres/module.h
  20. include/libkres/nsec.h
  21. include/libkres/nsec3.h
  22. include/libkres/pack.h
  23. include/libkres/queue.h
  24. include/libkres/resolve.h
  25. include/libkres/rplan.h
  26. include/libkres/selection.h
  27. include/libkres/selection_forward.h
  28. include/libkres/selection_iter.h
  29. include/libkres/signature.h
  30. include/libkres/ta.h
  31. include/libkres/trie.h
  32. include/libkres/utils.h
  33. include/libkres/zonecut.h
  34. lib/knot-resolver/ahocorasick.so
  35. lib/knot-resolver/debug_opensslkeylog.so
  36. lib/knot-resolver/distro-preconfig.lua
  37. lib/knot-resolver/kluautil.lua
  38. lib/knot-resolver/kres-gen.lua
  39. lib/knot-resolver/kres.lua
  40. lib/knot-resolver/kres_modules/bogus_log.so
  41. lib/knot-resolver/kres_modules/daf.lua
  42. lib/knot-resolver/kres_modules/daf/daf.js
  43. lib/knot-resolver/kres_modules/detect_time_jump.lua
  44. lib/knot-resolver/kres_modules/detect_time_skew.lua
  45. lib/knot-resolver/kres_modules/dns64.lua
  46. lib/knot-resolver/kres_modules/edns_keepalive.so
  47. lib/knot-resolver/kres_modules/etcd.lua
  48. lib/knot-resolver/kres_modules/experimental_dot_auth.lua
  49. lib/knot-resolver/kres_modules/extended_error.so
  50. lib/knot-resolver/kres_modules/graphite.lua
  51. lib/knot-resolver/kres_modules/hints.so
  52. lib/knot-resolver/kres_modules/http.lua
  53. lib/knot-resolver/kres_modules/http/bootstrap-theme.min.css
  54. lib/knot-resolver/kres_modules/http/bootstrap.min.css
  55. lib/knot-resolver/kres_modules/http/bootstrap.min.js
  56. lib/knot-resolver/kres_modules/http/d3.js
  57. lib/knot-resolver/kres_modules/http/datamaps.world.min.js
  58. lib/knot-resolver/kres_modules/http/dygraph.min.js
  59. lib/knot-resolver/kres_modules/http/epoch.css
  60. lib/knot-resolver/kres_modules/http/epoch.js
  61. lib/knot-resolver/kres_modules/http/favicon.ico
  62. lib/knot-resolver/kres_modules/http/glyphicons-halflings-regular.woff2
  63. lib/knot-resolver/kres_modules/http/jquery.js
  64. lib/knot-resolver/kres_modules/http/kresd.css
  65. lib/knot-resolver/kres_modules/http/kresd.js
  66. lib/knot-resolver/kres_modules/http/main.tpl
  67. lib/knot-resolver/kres_modules/http/selectize.bootstrap3.css
  68. lib/knot-resolver/kres_modules/http/selectize.min.js
  69. lib/knot-resolver/kres_modules/http/topojson.js
  70. lib/knot-resolver/kres_modules/http_doh.lua
  71. lib/knot-resolver/kres_modules/http_tls_cert.lua
  72. lib/knot-resolver/kres_modules/http_trace.lua
  73. lib/knot-resolver/kres_modules/nsid.so
  74. lib/knot-resolver/kres_modules/policy.lua
  75. lib/knot-resolver/kres_modules/predict.lua
  76. lib/knot-resolver/kres_modules/prefill.lua
  77. lib/knot-resolver/kres_modules/priming.lua
  78. lib/knot-resolver/kres_modules/prometheus.lua
  79. lib/knot-resolver/kres_modules/rebinding.lua
  80. lib/knot-resolver/kres_modules/refuse_nord.so
  81. lib/knot-resolver/kres_modules/renumber.lua
  82. lib/knot-resolver/kres_modules/serve_stale.lua
  83. lib/knot-resolver/kres_modules/stats.so
  84. lib/knot-resolver/kres_modules/ta_sentinel.lua
  85. lib/knot-resolver/kres_modules/ta_signal_query.lua
  86. lib/knot-resolver/kres_modules/ta_update.lua
  87. lib/knot-resolver/kres_modules/view.lua
  88. lib/knot-resolver/kres_modules/watchdog.lua
  89. lib/knot-resolver/kres_modules/workarounds.lua
  90. lib/knot-resolver/krprint.lua
  91. lib/knot-resolver/postconfig.lua
  92. lib/knot-resolver/sandbox.lua
  93. lib/knot-resolver/trust_anchors.lua
  94. lib/knot-resolver/upgrade-4-to-5.lua
  95. lib/knot-resolver/zonefile.lua
  96. lib/libkres.a
  97. libdata/pkgconfig/libkres.pc
  98. share/man/man8/kresd.8.gz
  99. sbin/kres-cache-gc
  100. sbin/kresc
  101. sbin/kresd
  102. @dir(kresd,kresd,0755) etc/knot-resolver
  103. @dir(kresd,kresd,0700) /var/run/kresd
  104. @owner
  105. @group
  106. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • knot-resolver>0:dns/knot-resolver
Conflicts:
CONFLICTS:
  • knot-1.*
  • knot1-[0-6].*
To install the port:
cd /usr/ports/dns/knot-resolver/ && make install clean
To add the package, run one of these commands:
  • pkg install dns/knot-resolver
  • pkg install knot-resolver
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: knot-resolver
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1754049379 SHA256 (knot-resolver-5.7.6.tar.xz) = 500ccd3a560300e547b8dc5aaff322f7c8e2e7d6f0d7ef5f36e59cb60504d674 SIZE (knot-resolver-5.7.6.tar.xz) = 1924840
Packages (timestamps in pop-ups are UTC):
knot-resolver
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest5.7.6_25.7.6_2-5.7.65.7.6_2n/an/an/a
FreeBSD:13:quarterly5.7.6_25.7.6_2-5.7.65.7.6_2n/an/an/a
FreeBSD:14:latest5.7.6_25.7.6_2-5.7.65.7.6_2---
FreeBSD:14:quarterly5.7.6_25.7.6_2-5.7.65.7.6_2---
FreeBSD:15:latest5.7.6_25.7.6_2n/a5.7.6n/an/a5.7.0_25.7.0_2
FreeBSD:15:quarterly5.7.6_25.7.6_2n/a-n/an/a--
FreeBSD:16:latest5.7.6_25.7.6_2n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. bash : shells/bash
  2. flake8 : devel/py-flake8@py311
  3. lua51-cqueues>=20200726_1 : devel/lua-cqueues@lua51
  4. luacheck : devel/lua-luacheck
  5. cmake : devel/cmake-core
  6. meson : devel/meson
  7. ninja : devel/ninja
  8. pkgconf>=1.3.0_1 : devel/pkgconf
  9. python3.11 : lang/python311
Runtime dependencies:
  1. lua51-cqueues>=20200726_1 : devel/lua-cqueues@lua51
Library dependencies:
  1. libdnssec.so : dns/knot3
  2. libgnutls.so : security/gnutls
  3. libknot.so : dns/knot3
  4. liblmdb.so : databases/lmdb
  5. libnghttp2.so : www/libnghttp2
  6. libuv.so : devel/libuv
  7. libzscanner.so : dns/knot3
  8. libedit.so.0 : devel/libedit
  9. libluajit-5.1.so : lang/luajit-devel
There are no ports dependent upon this port
Configuration Options:
===> The following configuration options are available for knot-resolver-5.7.6: DNSTAP=off: dnstap support DOCS=on: Build and/or install documentation EXAMPLES=on: Build and/or install examples ROOTKEYS=on: Install root.keys TESTUNIT=off: Build unit tests TRUSTANCHOR=on: Trust anchor bootstrapping, management and stats ===> Use 'make config' to modify these settings
Options name:
dns_knot-resolver
USES:
cmake:indirect compiler:c11 libedit luajit meson ncurses ninja pkgconfig python:build shebangfix tar:xz
pkg-message:
For install:
Please consult the documentation: - man kresd - https://knot-resolver.readthedocs.io/ If upgrading: - https://knot-resolver.readthedocs.io/en/latest/upgrading.html
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://dns.company/downloads/knot-resolver/
  2. https://knot-resolver.nic.cz/release/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
5.7.6
04 Aug 2025 13:00:39
commit hash: 228899ac1d56812e750231c8a342eb825bd83623commit hash: 228899ac1d56812e750231c8a342eb825bd83623commit hash: 228899ac1d56812e750231c8a342eb825bd83623commit hash: 228899ac1d56812e750231c8a342eb825bd83623 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Michael Grimm		 
dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)

Security
--------
- DoS: fix a rare segfault in `resolve` function (!1720)
  Someone controlling the DNS traffic might be able
  to trigger this crash intentionally and too often.
- DoS: drop a wrong assertion/crash (!1721)
  Someone controlling the DNS traffic will most likely be able
  to trigger this crash intentionally and too often.

Changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.6/NEWS

- Modify MASTER_SITES in Makefile, see:
https://lists.nic.cz/hyperkitty/list/knot-resolver-users@lists.nic.cz/thread/H3M2A7NJR6MHRU53MW7P4SW2IWY4QX74/
- Move cmake from BUILD_DEPENDS to USES.

PR:		288586
Approved by:	Leo Vandewoestijne <freebsd@dns.company> (maintainer)
MFH:		2025Q3

(cherry picked from commit 101d78aa16063a5fae120e901383e064e5f54f91)

Number of commits found: 1
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
python310*Mar 03
python311*Mar 03
python312*Mar 03
python313*Mar 03
python313t*Mar 03
python314*Mar 03
oauth2-proxyFeb 27
firefoxFeb 26
firefoxFeb 26
firefox-esrFeb 26
gitlabFeb 26
thunderbirdFeb 26
thunderbirdFeb 26
mailpitFeb 25
vaultwardenFeb 24

11 vulnerabilities affecting 335 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-03-03 16:31:49 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34128
Broken 109
Deprecated 176
Ignore 225
Forbidden 0
Restricted 2
No CDROM 1
Vulnerable 34
Expired 9
Set to expire 111
Interactive 0
new 24 hours 0
new 48 hours1
new 7 days17
new fortnight33
new month163
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.