From owner-freebsd-stable@FreeBSD.ORG Wed Dec 4 09:47:33 2013 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9E6AAB6E; Wed, 4 Dec 2013 09:47:33 +0000 (UTC) Received: from mail.droso.net (koala.droso.dk [IPv6:2a01:4f8:a0:7163::2]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6263C1208; Wed, 4 Dec 2013 09:47:33 +0000 (UTC) Received: by mail.droso.net (Postfix, from userid 1001) id 481296840; Wed, 4 Dec 2013 10:47:31 +0100 (CET) Date: Wed, 4 Dec 2013 10:47:31 +0100 From: Erwin Lansing To: freebsd-stable@freebsd.org, stable@freebsd.org Subject: Re: BIND chroot environment in 10-RELEASE...gone? Message-ID: <20131204094730.GX29825@droso.dk> References: <529D9CC5.8060709@rancid.berkeley.edu> <529DF7FA.7050207@passap.ru> <529E179D.7030701@rancid.berkeley.edu> <20131203211606.F2E17B100EB@rock.dv.isc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline In-Reply-To: <20131203211606.F2E17B100EB@rock.dv.isc.org> X-Operating-System: FreeBSD/amd64 9.1-RELEASE User-Agent: Mutt/1.5.21 (2010-09-15) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Dec 2013 09:47:33 -0000 On Wed, Dec 04, 2013 at 08:16:06AM +1100, Mark Andrews wrote: > > As for 9.9.x ESV it will be support for to at least June 2017, which > is 5+ years from BIND 9.9.0, and 4 years after 9.9.x was announced > as the ESV series with BIND 9.9.3. > > BIND 9.6 went ESV in Mar 2010 and will be EoL in Jan 2014. > > BIND 9.10 in is alpha at the moment. > > BIND 10 is still in development. > Thanks for chiming in Mark. As you can see, there's some confusion about BIND9's lifetime, so getting this straight from the horse's mouth is good. I did a presentation at the recent ICANN meeting about why BIND was removed from base, slides are at http://people.freebsd.org/~erwin/presentations/20131118-ICANN-FreeBSD-DNS.pdf Note that most of the reasons all fall back to reducing code base and complexity, and some of the other bullets all follow from that. It has more to do with how BIND was integrated into FreeBSD than BIND itself and unbound just has the advantage that it does not have an authoritatve part (and key management etc), with associated options and potential security vulnerabilities, and thus hopefully will be easier to maintain in the base system. Erwin