- Improve BIND performance
- Refactoring / replacing the networking code (wpk)
- First part done for BIND 9.13/9.14
- Second part for BIND 9.15/9.16 - separate engine (libuv)
- Improve BIND management (each)
-
BIND statistics system overhaul (#38)
-
Clarify, improve operational utility of statistics and accuracy for (resource consumption, performance, exception alerting)
-
Catalog zones update per the Draft (Michal)
- Security & privacy initiatives
-
DNS over TLS (wpk, after network refactoring)
- Server - named as resolver, but auth implicitly
- Client(?) - dig, delv, named as forwarder
- *XFR
-
DNS over HTTP(2) (ISC hackathon)
- Client - dig, delv, named as forwarder
- Server - named as resolver, but auth implicitly
- Operational enhancements
-
DNSSEC Made Easy (Matthijs)
- finish/improve DNSSEC key manager, integrate with other DNSSEC tools
- parent-child updating phase 2 (Tony Finch)
-
Solution for CNAME at the apex problem (Matthijs)
- ANAME draft implemented in a BIND module
- Tony Finch's thing
- SRV-like for HTTP
-
RNDC
supportcommand (Joey) -
EDNS Tag draft (draft-bellis-dnsop-edns-tags)
-
DNS extended errors draft (each)
Nice to have
-
Zone templates
-
EDNS chain
-
Faster, more efficient zone content propogation zone updates
-
Refactoring / replacing the task+taskmanager code+timers
- libevent/libuv in BIND 9.15/9.16
-
Whole answer cache as module if it significantly improves performance (Witold's and Evan's pet project)
-
Zone file digest (integrity of updates)
-
GUI/API for managing configuration of multiple servers in one place.
- Joint project with Kea
- package RNDC python library
-
Provisioning of zones and configuration -- Catalog zones++ -- like PowerDNS master server, something that will master the views and acls as well as the zones
-
Lockless data structures (queues, lists)
-
NSEC5 - Experimental; Depends on crypto availability in OpenSSL
- As a hobby project for Ondrej
-
Telemetry (Call Home)
- Telemetry on options used
- Version check
-
DNS Stateful Operations (Matthijs)