<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>
<style>
</style></p>
<p class="p1">I’m not sure if a container will pass through the CPU
instruction set required to leverage hardware acceleration on
newer (or even not-so-new) Intel processors. In KVM, for example,
you have to enable it explicitly.</p>
<p class="p1">One way to check for supported instructions is:</p>
<p>grep -o -w
'aes\|sha_ni\|pclmulqdq\|rdseed\|rdrand\|avx\|avx2\|avx512'
/proc/cpuinfo | sort | uniq</p>
<p>
</p>
<p class="p1">Hardware acceleration can be beneficial if you’re
running a resolver that performs a lot of DNSSEC validation—<span
class="s1">SHA_NI</span> in particular can speed up operations
involving DS/NSEC/NSEC3 records. That said, if you’re only running
an authoritative server or a small-scale resolver, crypto
acceleration may not be critical.</p>
<p class="p1">Fwiw, my preferred distro for running BIND9 is Debian
12—it includes <span class="s1">dnstap</span> support out of the
box.</p>
<p>
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:0;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:-536870145 1107305727 0 0 415 0;}@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:536871559 3 0 0 415 0;}@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-469750017 -1073683329 9 0 511 0;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin-top:0cm;
margin-right:0cm;
margin-bottom:8.0pt;
margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-font-kerning:1.0pt;
mso-ligatures:standardcontextual;
mso-ansi-language:EN-US;
mso-fareast-language:EN-US;}.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:"Aptos",sans-serif;
mso-ascii-font-family:Aptos;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Aptos;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Aptos;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}.MsoPapDefault
{mso-style-type:export-only;
margin-bottom:8.0pt;
line-height:115%;}div.WordSection1
{page:WordSection1;}</style></p>
<div class="moz-cite-prefix">On 23/07/2025 14:57, Marc wrote:<br>
</div>
<blockquote type="cite"
cite="mid:92f82a6c9fbb4f9c96a6b96f3c7f5251@f1-outsourcing.eu">
<pre wrap="" class="moz-quote-pre">Maybe consider running it in a container and keeping nice and small with alpine linux
</pre>
<blockquote type="cite">
<pre wrap="" class="moz-quote-pre">
I'd like to migrate from bind 9.11 lo last version.
This service is acting as cache dns server and It' running on Centos 7
server, what Linux distro do you suggest me for new Bind?
</pre>
</blockquote>
</blockquote>
</body>
</html>