Date: Thu, 01 Feb 2007 23:29:52 -0800 From: Doug Barton <dougb@FreeBSD.org> To: Chuck Swiger <cswiger@mac.com> Cc: freebsd-security@freebsd.org Subject: Re: What about BIND 9.3.4 in FreeBSD in base system ? Message-ID: <45C2E870.5000000@FreeBSD.org> In-Reply-To: <45C26ACC.9020702@mac.com> References: <001601c74428$ff9d54b0$ab76ed54@odipw> <45BEE27D.1050804@FreeBSD.org> <45BFA1B3.9040000@rxsec.com> <45C23DAA.9040108@FreeBSD.org> <45C24D57.3000704@mac.com> <45C25696.10806@FreeBSD.org> <45C26ACC.9020702@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Chuck Swiger wrote:
> Doug Barton wrote:
>> Chuck Swiger wrote:
>>> Doug Barton wrote:
>>> I've got two nameservers tracking 5-STABLE
>>
>> I am not sure how to respond to that.
> [ ...comments about moving to 6 snipped for brevity... ]
>
> That's OK, I wasn't soliciting advice on which platform or OS version a
> given set of machines ought to run.
Right. As I understood it, you were arguing in favor of MFC'ing a fix
to RELENG_5 because you have machines from that branch in a production
setting. If I misunderstood your point, I apologize.
> When the number of machines one
> deals with in a given environment changes from single-digit, to dozens,
> to hundreds, to tens of thousands, keeping machines updated to a
> bug-free, stable environment is more important than chasing features off
> the latest branch.
Yes, I understand those issues quite well. I used to manage hundreds
of name servers for a company that had many 10s of thousands of
machines. And I think that you are basically making my point, which is
that users in a serious production environment are probably not using
the BIND that comes with FreeBSD in an off the shelf configuration.
>>> I'm starting to feel thankful that my important domains include
>>> off-site secondaries which are running djbdns.
>>
>> EGRATUITOUSBINDBASHING
>
> You seem to be disposed to believe it so, but regardless of opinions,
> I've had named crash under moderate loads ...
This thread isn't about what's the best brand of name server to use,
it's about whether to MFC an update.
Doug
--
This .signature sanitized for your protection
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45C2E870.5000000>