Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
BIND
BIND
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 634
    • Issues 634
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 116
    • Merge Requests 116
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI/CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • ISC Open Source Projects
  • BINDBIND
  • Wiki
  • BIND 9.15 Plan

Last edited by Evan Hunt Mar 31, 2019
Page history

BIND 9.15 Plan

  1. Improve BIND performance
  • Refactoring / replacing the networking code (wpk)
    • First part done for BIND 9.13/9.14
    • Second part for BIND 9.15/9.16 - separate engine (libuv)
  1. Improve BIND management (each)
  • BIND statistics system overhaul (#38)

  • Clarify, improve operational utility of statistics and accuracy for (resource consumption, performance, exception alerting)

  • Catalog zones update per the Draft (Michal)

  1. Security & privacy initiatives
  • DNS over TLS (wpk, after network refactoring)

    • Server - named as resolver, but auth implicitly
    • Client(?) - dig, delv, named as forwarder
    • *XFR
  • DNS over HTTP(2) (ISC hackathon)

    • Client - dig, delv, named as forwarder
    • Server - named as resolver, but auth implicitly
  1. Operational enhancements
  • DNSSEC Made Easy (Matthijs)

    • finish/improve DNSSEC key manager, integrate with other DNSSEC tools
    • parent-child updating phase 2 (Tony Finch)
  • Solution for CNAME at the apex problem (Matthijs)

    • ANAME draft implemented in a BIND module
    • Tony Finch's thing
    • SRV-like for HTTP
  • RNDC support command (Joey)

  • EDNS Tag draft (draft-bellis-dnsop-edns-tags)

  • DNS extended errors draft (each)

Nice to have

  • Zone templates

  • EDNS chain

  • Faster, more efficient zone content propogation zone updates

  • Refactoring / replacing the task+taskmanager code+timers

    • libevent/libuv in BIND 9.15/9.16
  • Whole answer cache as module if it significantly improves performance (Witold's and Evan's pet project)

  • Zone file digest (integrity of updates)

  • GUI/API for managing configuration of multiple servers in one place.

    • Joint project with Kea
    • package RNDC python library
  • Provisioning of zones and configuration -- Catalog zones++ -- like PowerDNS master server, something that will master the views and acls as well as the zones

  • Lockless data structures (queues, lists)

  • NSEC5 - Experimental; Depends on crypto availability in OpenSSL

    • As a hobby project for Ondrej
  • Telemetry (Call Home)

    • Telemetry on options used
    • Version check
  • DNS Stateful Operations (Matthijs)

Clone repository
  • BIND 9 F2F Meeting in Warsaw, October 2019
  • BIND 9 PKCS11
  • BIND 9 Packaging
  • BIND 9.11 ESV Soft Code Freeze
  • BIND 9.15 Plan
  • BIND 9.17 Plan
  • BIND Development and Release Process 2019
  • BIND development workflow
  • Backporting a Merge Request
  • CVSS Scoring Guidelines
  • DNSSEC Key and Signing Policy (KASP)
  • Debian Packages
  • DoH
    • DOH and DoT Design
  • Formatting test scratchpad.
  • GSOC 2019
View All Pages