Re: Snapshot versions of BIND 9.18 and 9.20 for testing

2025-01-30 Thread Carsten Strotmann via bind-users
Hi Ondřej, On 31 Jan 2025, at 8:16, Ondřej Surý wrote: > We would appreciate if you can give the following git snapshots a test run > if you have a capacity to do so. I can report that 9.18.34-dev compiles and works fine on OpenBSD 7.6, and 9.20.6-dev compiles and works on NetBSD 10.1. My syst

BIND 9.21+ build system change

2025-01-30 Thread Ondřej Surý
Hey all, this is pre-announcement that the BIND 9.21 build system will be drop the autoconf/automake build system. We consider the Python to be ubiquitous nowadays and therefore the Meson build system was picked for its maintainability, speed and ease of use. Additionally, Meson is available i

Snapshot versions of BIND 9.18 and 9.20 for testing

2025-01-30 Thread Ondřej Surý
Hi, the BIND 9 team merged an improvement to BIND 9.18.34-dev and 9.20.6-dev releases that should help with the memory usage in the resolver scenarios and in the case of BIND 9.18.34-dev there's even improved performance for the cold cache. The improvements for 9.18.34-dev is significant, for 9.20

Snapshot versions of BIND 9.18 and 9.20 for testing

2025-01-30 Thread Ondřej Surý
Hi, the BIND 9 team merged an improvement to BIND 9.18.34-dev and 9.20.6-dev releases that should help with the memory usage in the resolver scenarios and in the case of BIND 9.18.34-dev there's even improved performance for the cold cache. The improvements for 9.18.34-dev is significant, for 9.20

Re: Executive Order 14144 - encrypted DNS

2025-01-30 Thread Grant Taylor via bind-users
On 1/30/25 3:25 PM, Fred Morris wrote: I don't think everything on the planet needs to support encryption out of the box if composable components are available. I'm inclined to agree with you. However, the only rebuttal that I've heard which I give any serious credence to is the ability for t

Re: Executive Order 14144 - encrypted DNS

2025-01-30 Thread Fred Morris
As a belated note, the BIND distribution used to include instructions (in /dnspriv) for putting nginx in front of the nameserver to implement DoT. Anecdotally, many people I talked to seemed to have no understanding or awareness just how simple this implementation is / was.[0] We need better implem