Date: Fri, 6 Jun 2003 10:26:30 -0700 (PDT) From: Matthew Dillon <dillon@apollo.backplane.com> To: Bill Moran <wmoran@potentialtech.com> Cc: freebsd-arch@freebsd.org Subject: Re: Way forward with BIND 8 Message-ID: <200306061726.h56HQUiw026473@apollo.backplane.com> References: <20030605235254.W5414@znfgre.qbhto.arg> <20030606024813.Y5414@znfgre.qbhto.arg> <3EE0A4F6.6020201@potentialtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Bind-9 should be the default in both -current and -stable. Bind-8 has
some serious, unfixable issues with it the biggest of which being that
NS glue and additional-record returns are not properly separated out from
official glue and official record data in internal structures and can
poison the DNS cache. The second biggest problem has to do with the way
Bind-8 forwards responses from servers to clients without regenerating
them, leaving a path potentially open for hacked DNS sites to directly
corrupt programs. Nobody with any serious DNS needs should be using
bind-8 any more.
There are two issues with a changeover to bind-9. First, the bind-9
port does not properly install the new encrypted command/management
system (the equivalent to ndc in bind-8), and, second, there are some
differences in named.conf and zone file operation. That said it only
took me an hour to convert my moderate DNS setup (serving four or five
domains) over to bind-9 a year or so ago.
But it is something I think needs to be done. Using the whole
-release/-stable mess as an excuse to not do it is a cop-out, especially
considering that there is still a huge amount of kernel work currently
being done that has nothing to do with the stabilization of critical
subsystems, and nobody is stopping that.
Another alternative is to make a clean break between 4.x and 5.x. The
point when the FreeBSD project goes to 6-current/5-stable is the point
when I have stated that I am going to make a decision whether to take
the 4.* branch series under my wing or not.
-Matt
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200306061726.h56HQUiw026473>