Date: Mon, 09 Jul 2012 21:00:30 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Mark Felder <feld@feld.me> Cc: freebsd-security@freebsd.org Subject: Re: Replacing BIND with unbound Message-ID: <86pq84n4j5.fsf@ds4.des.no> In-Reply-To: <op.wg6p18uh34t2sn@tech304> (Mark Felder's message of "Mon, 9 Jul 2012 10:16:46 -0500") References: <CA%2BQLa9B-Dm-=hQCrbEgyfO4sKZ5aG72_PEFF9nLhyoy4GRCGrA@mail.gmail.com> <4FF2E00E.2030502@FreeBSD.org> <86bojxow6x.fsf@ds4.des.no> <89AB703D-E075-4AAC-AC1B-B358CC4E4E7F@lists.zabbadoz.net> <4FF8C3A1.9080805@FreeBSD.org> <4FF9ECB5.5090507@FreeBSD.org> <863951nrpy.fsf@ds4.des.no> <op.wg6p18uh34t2sn@tech304>
next in thread | previous in thread | raw e-mail | index | archive | help
Mark Felder <feld@feld.me> writes: > Dag-Erling Sm=C3=B8rgrav <des@des.no> writes: > > What sort of benchmarks do you envision? Unlike named, unbound is > > intended to serve only one client (localhost) or a small number of > > clients (a SOHO). > Highly disagree; we use it (ISP) as our resolving nameserver for all > of our customers. Good for you. From what I've read, I should think it works just fine, but I have no personal experience running unbound on large networks. I'd love to try it out on the UiO network, but I doubt they'd let me... My basis for stating that it is intended primarily for localhost and SOHO is its feature set, which seems particularly well suited to that kind of use. Organizations with large networks generally need authoritative nameservers as well, but they can of course have both outward-facing BIND or NSD servers and inward-facing unbound servers, or have their registrar handle the authoritative side. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86pq84n4j5.fsf>