Posted by
ryuzaki0
on from the looks-up-good dept.
Eric Sun writes "After numerous release candidates and betas, the final stable release version of Bind 9 has been released. Looks like the homepage hasn't updated yet, but you can get a list of download servers from its page at Freshmeat."
I'm hoping BIND9 is a complete, utter rewrite, with no code from BIND8 still remaining.
If it isn't, then it's way way too late - switch to Dan Bernstein's djbdns instead. Read the security guarantee and weep in relief. Notice the exceedingly small memory footprint. The lack of core dumps. That you can get rid of AXFR completely and just use rsync+ssh to transfer to your secondaries.
Check out tinydns.org which has migration tools from BIND which im playing with atm.
Good news for large domains.
by
alteridem
·
· Score: 5
This is good news for large domains as it adds some great features for servers servicing many requests. Bind 9 is now;
Thread safe so it can run on multi-processor machines
Plugs into several back end databases so it will be easier to support large domains
Support for IPv6. The future is nearly here!
Several protocol enhancements like IXFR, DDNS, Notify, EDNS(0,1) and improved standards conformance.
This is a major rewrite and may contain a host of new security problems, but it is a step in the right direction and I will definately be looking at it to manage my larger domains.
DNSSEC is a reality! (Well, it would be, if
anyone else used it...!)
No resolv.h file! (This means ALL network code
that's out there will need to be re-written to use
the new resolver, which is NOT backwards-compatiable.)
LOTS of libraries! No more simple -lresolv, or
-lbind. Instead, you're faced with -ldns, -lisc,
-llwres and -lowrapi. NONE of which are shared.
They're ALL static.
Headers are split up into 3 or 4 directories,
now. Time to get out the road map.
The Internet needs a powerful name server and name
resolver, but USEFUL tools don't use structure to
obscure the content.
-- It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
Bind 9.0 web page is posted, but not linked
by
ChuckRoast
·
· Score: 5
The official Bind 9 page is written, just not linked, yet.
Slashdot Mirror
I'm hoping BIND9 is a complete, utter rewrite, with no code from BIND8 still remaining.
If it isn't, then it's way way too late - switch to Dan Bernstein's djbdns instead. Read the security guarantee and weep in relief. Notice the exceedingly small memory footprint. The lack of core dumps. That you can get rid of AXFR completely and just use rsync+ssh to transfer to your secondaries.
Check out tinydns.org which has migration tools from BIND which im playing with atm.
- Thread safe so it can run on multi-processor machines
- Plugs into several back end databases so it will be easier to support large domains
- Support for IPv6. The future is nearly here!
- Several protocol enhancements like IXFR, DDNS, Notify, EDNS(0,1) and improved standards conformance.
- A host of other features, see this for more.
This is a major rewrite and may contain a host of new security problems, but it is a step in the right direction and I will definately be looking at it to manage my larger domains.The Internet needs a powerful name server and name resolver, but USEFUL tools don't use structure to obscure the content.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
The official Bind 9 page is written, just not linked, yet.