27

BIND 9.15 Plan

Evan Hunt edited this page 2019-03-31 05:48:42 -04:00

Table of Contents

• Nice to have

1. Improve BIND performance

• Refactoring / replacing the networking code (wpk)
  • First part done for BIND 9.13/9.14
  • Second part for BIND 9.15/9.16 - separate engine (libuv)

2. Improve BIND management (each)

• BIND statistics system overhaul (https://gitlab.isc.org/isc-projects/bind9/issues/38)

• Clarify, improve operational utility of statistics and accuracy for (resource consumption, performance, exception alerting)

• Catalog zones update per the Draft (Michal)

3. Security & privacy initiatives

• DNS over TLS (wpk, after network refactoring)

  • Server - named as resolver, but auth implicitly
  • Client(?) - dig, delv, named as forwarder
  • *XFR

• DNS over HTTP(2) (ISC hackathon)

  • Client - dig, delv, named as forwarder
  • Server - named as resolver, but auth implicitly

4. Operational enhancements

• DNSSEC Made Easy (Matthijs)

  • finish/improve DNSSEC key manager, integrate with other DNSSEC tools
  • parent-child updating phase 2 (Tony Finch)

• Solution for CNAME at the apex problem (Matthijs)

  • ANAME draft implemented in a BIND module
  • Tony Finch's thing
  • SRV-like for HTTP

• RNDC support command (Joey)

• EDNS Tag draft (draft-bellis-dnsop-edns-tags)

• DNS extended errors draft (each)

Nice to have

• Zone templates

• EDNS chain

• Faster, more efficient zone content propogation zone updates

• Refactoring / replacing the task+taskmanager code+timers

  • libevent/libuv in BIND 9.15/9.16

• Whole answer cache as module if it significantly improves performance (Witold's and Evan's pet project)

• Zone file digest (integrity of updates)

• GUI/API for managing configuration of multiple servers in one place.

  • Joint project with Kea
  • package RNDC python library

• Provisioning of zones and configuration -- Catalog zones++ -- like PowerDNS master server, something that will master the views and acls as well as the zones

• Lockless data structures (queues, lists)

• NSEC5 - Experimental; Depends on crypto availability in OpenSSL

  • As a hobby project for Ondrej

• Telemetry (Call Home)

  • Telemetry on options used
  • Version check

• DNS Stateful Operations (Matthijs)