Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 09 Jul 2012 21:00:30 +0200
From:      =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To:        Mark Felder <feld@feld.me>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Replacing BIND with unbound
Message-ID:  <86pq84n4j5.fsf@ds4.des.no>
In-Reply-To: <op.wg6p18uh34t2sn@tech304> (Mark Felder's message of "Mon, 9 Jul 2012 10:16:46 -0500")
References:  <CA%2BQLa9B-Dm-=hQCrbEgyfO4sKZ5aG72_PEFF9nLhyoy4GRCGrA@mail.gmail.com> <4FF2E00E.2030502@FreeBSD.org> <86bojxow6x.fsf@ds4.des.no> <89AB703D-E075-4AAC-AC1B-B358CC4E4E7F@lists.zabbadoz.net> <4FF8C3A1.9080805@FreeBSD.org> <4FF9ECB5.5090507@FreeBSD.org> <863951nrpy.fsf@ds4.des.no> <op.wg6p18uh34t2sn@tech304>

next in thread | previous in thread | raw e-mail | index | archive | help
Mark Felder <feld@feld.me> writes:
> Dag-Erling Sm=C3=B8rgrav <des@des.no> writes:
> > What sort of benchmarks do you envision?  Unlike named, unbound is
> > intended to serve only one client (localhost) or a small number of
> > clients (a SOHO).
> Highly disagree; we use it (ISP) as our resolving nameserver for all
> of our customers.

Good for you.  From what I've read, I should think it works just fine,
but I have no personal experience running unbound on large networks.
I'd love to try it out on the UiO network, but I doubt they'd let me...

My basis for stating that it is intended primarily for localhost and
SOHO is its feature set, which seems particularly well suited to that
kind of use.  Organizations with large networks generally need
authoritative nameservers as well, but they can of course have both
outward-facing BIND or NSD servers and inward-facing unbound servers, or
have their registrar handle the authoritative side.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86pq84n4j5.fsf>