Skip to content

BIND
BIND

BIND 9.15 Plan

Last edited by Evan Hunt
Page history
  1. Improve BIND performance
  • Refactoring / replacing the networking code (wpk)
    • First part done for BIND 9.13/9.14
    • Second part for BIND 9.15/9.16 - separate engine (libuv)
  1. Improve BIND management (each)

  • BIND statistics system overhaul (#38)

  • Clarify, improve operational utility of statistics and accuracy for (resource consumption, performance, exception alerting)

  • Catalog zones update per the Draft (Michal)

  1. Security & privacy initiatives

  • DNS over TLS (wpk, after network refactoring)

    • Server - named as resolver, but auth implicitly
    • Client(?) - dig, delv, named as forwarder
    • *XFR

  • DNS over HTTP(2) (ISC hackathon)

    • Client - dig, delv, named as forwarder
    • Server - named as resolver, but auth implicitly
  1. Operational enhancements

  • DNSSEC Made Easy (Matthijs)

    • finish/improve DNSSEC key manager, integrate with other DNSSEC tools
    • parent-child updating phase 2 (Tony Finch)

  • Solution for CNAME at the apex problem (Matthijs)

    • ANAME draft implemented in a BIND module
    • Tony Finch's thing
    • SRV-like for HTTP

  • RNDC support command (Joey)

  • EDNS Tag draft (draft-bellis-dnsop-edns-tags)

  • DNS extended errors draft (each)

Nice to have

  • Zone templates

  • EDNS chain

  • Faster, more efficient zone content propogation zone updates

  • Refactoring / replacing the task+taskmanager code+timers

    • libevent/libuv in BIND 9.15/9.16

  • Whole answer cache as module if it significantly improves performance (Witold's and Evan's pet project)

  • Zone file digest (integrity of updates)

  • GUI/API for managing configuration of multiple servers in one place.

    • Joint project with Kea
    • package RNDC python library

  • Provisioning of zones and configuration -- Catalog zones++ -- like PowerDNS master server, something that will master the views and acls as well as the zones

  • Lockless data structures (queues, lists)

  • NSEC5 - Experimental; Depends on crypto availability in OpenSSL

    • As a hobby project for Ondrej

  • Telemetry (Call Home)

    • Telemetry on options used
    • Version check

  • DNS Stateful Operations (Matthijs)