|
|
1. Improve BIND performance
|
|
|
* Refactoring / replacing the networking code
|
|
|
* Refactoring / replacing the networking code (wpk)
|
|
|
* First part done for BIND 9.13/9.14
|
|
|
* Second part for BIND 9.15/9.16 - separate engine (libuv/libevent)
|
|
|
|
|
|
|
|
|
2. Improve BIND management
|
|
|
2. Improve BIND management (each)
|
|
|
* BIND statistics system overhaul (https://gitlab.isc.org/isc-projects/bind9/issues/38)
|
|
|
* Clarify, improve operational utility of statistics and accuracy for (resource consumption, performance, exception alerting)
|
|
|
|
|
|
* Faster, more efficient zone content propogation zone updates
|
|
|
|
|
|
nice to have
|
|
|
* Zone file digest (integrity of updates)
|
|
|
|
|
|
* GUI/API for managing configuration of multiple servers in one place.
|
|
|
* Joint project with Kea
|
|
|
* package RNDC python library
|
|
|
|
|
|
* Provisioning of zones and configuration -- Catalog zones++ -- like PowerDNS master server, something that will master the views and acls as well as the zones
|
|
|
|
|
|
3. Security & privacy initiatives
|
|
|
* DNS over TLS
|
|
|
* Server - named as resolver, but auth implicitly
|
... | ... | @@ -45,15 +36,19 @@ nice to have |
|
|
|
|
|
* EDNS Key Tag drat
|
|
|
|
|
|
nice to have
|
|
|
* Refactoring Linux capabilities
|
|
|
|
|
|
## Nice to have
|
|
|
|
|
|
* Refactoring / replacing the task+taskmanager code+timers
|
|
|
* libevent/libuv in BIND 9.15/9.16
|
|
|
* Whole answer cache as module if it significantly improves performance (Witold's and Evan's pet project)
|
|
|
|
|
|
* Zone file digest (integrity of updates)
|
|
|
|
|
|
* GUI/API for managing configuration of multiple servers in one place.
|
|
|
* Joint project with Kea
|
|
|
* package RNDC python library
|
|
|
|
|
|
* Provisioning of zones and configuration -- Catalog zones++ -- like PowerDNS master server, something that will master the views and acls as well as the zones
|
|
|
* Lockless data structures (queues, lists)
|
|
|
* NSEC5 - Experimental; Depends on crypto availability in OpenSSL
|
|
|
* As a hobby project for Ondrej
|
... | ... | |