From owner-freebsd-current@FreeBSD.ORG Mon Sep 30 14:14:28 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id DDDFB974 for ; Mon, 30 Sep 2013 14:14:28 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id B13312AB0 for ; Mon, 30 Sep 2013 14:14:28 +0000 (UTC) Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 0352620EFE for ; Mon, 30 Sep 2013 10:14:26 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute5.internal (MEProxy); Mon, 30 Sep 2013 10:14:25 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:subject:date:in-reply-to :references; s=smtpout; bh=Wz8qA9Ua1wsc8OaUM6e1tVHW4vE=; b=dLqVM uvXUpCTUULNULHOGHfa+SrDNJFdoqPJSImJSjAfO3SrqWQqXAi9+cpZ0jWuY9f0F tXSkfUSOUebuOvUzqKBzUbEmFuxIIrEJWAPVsuToU8hxFHhOlEW31StbPrEWRxrU u/Ccq+eHcSBtG+z+It4Bdi7sCyTNae8Leeaktk= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id D289CB01ECA; Mon, 30 Sep 2013 10:14:25 -0400 (EDT) Message-Id: <1380550465.17242.28169493.7A4EA8EE@webmail.messagingengine.com> X-Sasl-Enc: VR52dZnZvnS88+GPVsOYYlIV84VF9ztvAnod+VYGRKEI 1380550465 From: Mark Felder To: freebsd-current@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 Subject: Re: [CURRENT] unbound: zonefiles? Date: Mon, 30 Sep 2013 09:14:25 -0500 In-Reply-To: <34A20ABE-8490-44E4-9DC5-74B686B09AEC@FreeBSD.org> References: <20130926112648.00422d7a@thor.walstatt.dyndns.org> <1380544116.4383.28120017.649D5F99@webmail.messagingengine.com> <34A20ABE-8490-44E4-9DC5-74B686B09AEC@FreeBSD.org> X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 14:14:28 -0000 On Mon, Sep 30, 2013, at 8:53, Dimitry Andric wrote: > On Sep 30, 2013, at 14:28, Mark Felder wrote: > ... > > BIND functioned as both roles. The lack of separation is often why it is > > criticized. DJB made the separation of roles famous when he released > > DJBDNS which includes two daemons: dnscache and tinydns. > > > > The complementary daemon by the Unbound authors (NLNet Labs) is called > > nsd. This is probably what you're looking for. Please keep in mind you > > cannot run both nsd and unbound on the same IP as they both cannot > > listen on the same port (53). > > Yes, and there is the rub for most 'SOHO' users, who do not win anything > by separating these roles. In such cases, setting up a separate IP > and/or port just to split up authoritative and recursive DNS is rather > inconvenient... > We should update the handbook to point people to the version of BIND in ports. We can't keep BIND 9 in base forever, and BIND 10 would require we import Python... We don't have a lot of options at this point and DES pointed out in his blog that the future of DNS is in base is being reworked for FreeBSD 11. This is just a stopgap.