Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support
Hi, in line with our deprecation policy, I am notifying the mailing list about our intent to deprecated the Differentiated Services Code Point (DSCP) support in BIND 9. The DSCP support in BIND 9 has been already non-operational since BIND 9.16 as the support for setting the DSCP socket option was not implemented in the new networking code for the listening sockets, and since BIND 9.18 when the outgoing DNS code started using the new networking code. So far, nobody has noticed. There's an alternative plan that would include re-implementing the functionality, but there would have to be strong user case behind the work. But again, judging from the fact that nobody has noticed, there doesn't seem to be strong user base behind DSCP. The deprecation will include: * specifying the **dscp** option in following statements: - `also-notify` - `catalog-zones` - `dual-stack-servers` - `forwarders` - `listen-on` - `listen-on-v6` - `notify-source` - `notify-source-v6` - `parental-source` - `parental-source-v6` - `query-source` - `query-source-v6` - `transfer-source` - `transfer-source-v6` - `parental-agents` - `primaries` - ` * following statements as whole: - `dscp` We plan to mark the options as deprecated in BIND 9.16 and 9.18 and remove it in BIND 9.20 because it's already non-operational. Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support
On Thu, 5 Jan 2023, [utf-8] OndÅej Surý wrote: > Date: Thu, 5 Jan 2023 09:02:30 +0100 > From: "[utf-8] OndÅej Surý" > To: BIND users > Subject: Deprecation notice for BIND 9.18: Differentiated Services Code > Point (DSCP) support > > Hi, > > in line with our deprecation policy, I am notifying the mailing list > about our intent to deprecated the Differentiated Services Code Point > (DSCP) support in BIND 9. > The DSCP support in BIND 9 has been already non-operational since > BIND 9.16 as the support for setting the DSCP socket option was not > implemented in the new networking code for the listening sockets, and > since BIND 9.18 when the outgoing DNS code started using the new > networking code. So far, nobody has noticed. > There's an alternative plan that would include re-implementing the > functionality, but there would have to be strong user case behind the > work. But again, judging from the fact that nobody has noticed, there > doesn't seem to be strong user base behind DSCP. > > The deprecation will include: > > * specifying the **dscp** option in following statements: > - `also-notify` > - `catalog-zones` > - `dual-stack-servers` > - `forwarders` > - `listen-on` > - `listen-on-v6` > - `notify-source` > - `notify-source-v6` > - `parental-source` > - `parental-source-v6` > - `query-source` > - `query-source-v6` > - `transfer-source` > - `transfer-source-v6` > - `parental-agents` > - `primaries` > - ` > * following statements as whole: > - `dscp` > > We plan to mark the options as deprecated in BIND 9.16 and 9.18 and remove it > in BIND 9.20 because it's already non-operational. > This is like Mercedes Benz announcing they will only sell the Baby Benz model, which is a Volkswagen EV barebonez with the VW logo replaced with a plastic Mercedes Benz star. -- Robert M. Stockmann - RHCE Network Engineer - UNIX/Linux Specialist crashrecovery.org st...@stokkie.net -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support
> On 5. 1. 2023, at 14:46, Robert M. Stockmann wrote: > > On Thu, 5 Jan 2023, [utf-8] Ondřej Surý wrote: > >> There's an alternative plan that would include re-implementing the >> functionality, but there would have to be strong user case behind the >> work. But again, judging from the fact that nobody has noticed, there >> doesn't seem to be strong user base behind DSCP. > > [...] > > This is like Mercedes Benz announcing they will only sell > the Baby Benz model, which is a Volkswagen EV barebonez with > the VW logo replaced with a plastic Mercedes Benz star I've asked for a strong use-case and all I've got was a snark. Do you actually have a real-world use for DSCP or are you just in bad mood? Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support
On Thu, 5 Jan 2023, [utf-8] OndÅej Surý wrote:
> Date: Thu, 5 Jan 2023 14:51:52 +0100
> From: "[utf-8] OndÅej Surý"
> To: Robert M. Stockmann
> Cc: BIND users
> Subject: Re: Deprecation notice for BIND 9.18: Differentiated Services
> Code Point (DSCP) support
>
> > On 5. 1. 2023, at 14:46, Robert M. Stockmann wrote:
> >
> > On Thu, 5 Jan 2023, [utf-8] OndÅej Surý wrote:
> >
> > This is like Mercedes Benz announcing they will only sell
> > the Baby Benz model, which is a Volkswagen EV barebonez with
> > the VW logo replaced with a plastic Mercedes Benz star
>
> I've asked for a strong use-case and all I've got was a snark.
>
> Do you actually have a real-world use for DSCP or are you just in bad mood?
>
>From /usr/share/doc/bind-9.9.9P6/FAQ :
Q: How can I make a server a slave for both an internal and an external
view at the same time? When I tried, both views on the slave were
transferred from the same view on the master.
A: You will need to give the master and slave multiple IP addresses and
use those to make sure you reach the correct view on the other machine.
Master: 10.0.1.1 (internal), 10.0.1.2 (external, IP alias)
internal:
match-clients { !10.0.1.2; !10.0.1.4; 10.0.1/24; };
notify-source 10.0.1.1;
transfer-source 10.0.1.1;
query-source address 10.0.1.1;
external:
match-clients { any; };
recursion no; // don't offer recursion to the world
notify-source 10.0.1.2;
transfer-source 10.0.1.2;
query-source address 10.0.1.2;
Slave: 10.0.1.3 (internal), 10.0.1.4 (external, IP alias)
internal:
match-clients { !10.0.1.2; !10.0.1.4; 10.0.1/24; };
notify-source 10.0.1.3;
transfer-source 10.0.1.3;
query-source address 10.0.1.3;
external:
match-clients { any; };
recursion no; // don't offer recursion to the world
notify-source 10.0.1.4;
transfer-source 10.0.1.4;
query-source address 10.0.1.4;
You put the external address on the alias so that all the other dns
clients on these boxes see the internal view by default.
-//-
Q: I want to forward all DNS queries from my caching nameserver to another
server. But there are some domains which have to be served locally, via
rbldnsd.
How do I achieve this ?
A: options {
forward only;
forwarders { ; };
};
zone "sbl-xbl.spamhaus.org" {
type forward; forward only;
forwarders { port 530; };
};
zone "list.dsbl.org" {
type forward; forward only;
forwarders { port 530; };
};
--
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org st...@stokkie.net
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support
> On 5. 1. 2023, at 14:46, Robert M. Stockmann wrote: > This is like Mercedes Benz announcing they will only sell > the Baby Benz model, which is a Volkswagen EV barebonez with > the VW logo replaced with a plastic Mercedes Benz star On Thu, 5 Jan 2023, [utf-8] OndÅej Surý wrote: I've asked for a strong use-case and all I've got was a snark. Do you actually have a real-world use for DSCP or are you just in bad mood? On 05.01.23 15:21, Robert M. Stockmann via bind-users wrote: From /usr/share/doc/bind-9.9.9P6/FAQ : there's no DSCP mentioned here. Are you aware that only the DSCP flags are deprecated, not all *source and *forwardes etc options themselves? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Christian Science Programming: "Let God Debug It!". -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support
Just for 100% clarity, DSCP is setting bits in the IP header for IP packet forwarding QOS purposes.. My personal feelings, coming from a networking standpoint, is that if you want DSCP, for example on Linux you can mangle the packets with iptables on their way in/out of a server possibly easier than getting any random service to do it for you. Mike On Thu, Jan 5, 2023 at 7:45 AM Matus UHLAR - fantomas wrote: > >> > On 5. 1. 2023, at 14:46, Robert M. Stockmann > wrote: > >> > This is like Mercedes Benz announcing they will only sell > >> > the Baby Benz model, which is a Volkswagen EV barebonez with > >> > the VW logo replaced with a plastic Mercedes Benz star > > >On Thu, 5 Jan 2023, [utf-8] Ondřej Surý wrote: > >> I've asked for a strong use-case and all I've got was a snark. > >> > >> Do you actually have a real-world use for DSCP or are you just in bad > mood? > > > On 05.01.23 15:21, Robert M. Stockmann via bind-users wrote: > >From /usr/share/doc/bind-9.9.9P6/FAQ : > > there's no DSCP mentioned here. > > Are you aware that only the DSCP flags are deprecated, not all *source and > *forwardes etc options themselves? > > > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > Christian Science Programming: "Let God Debug It!". > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
