[bind10-dev] Evaluation of BIND 10 1.0.0

[Yoshitaka Aharen]

Hello,

Thank you for your attention.

On Wed, 10 Apr 2013 15:03:03 -0700
JINMEI Tatuya / 神明達哉 <jinmei at isc.org> wrote:
> > * Functional requirements
> > We have compared the response with BIND 9 (BIND 9.9.2-P1).
> > BIND 10 1.0.0 satisfies functional requirements as JP DNS server. It can
> > receive jp zone with AXFR/IXFR and respond to DNS requests as an
> > authoritative server with DNSSEC (NSEC3 opt-out) supported. We found
> > that BIND 10 includes NS and their glue records in response for DNSKEY
> > query, while BIND 9 doesn't since BIND 9.6 (CHANGES 2427).
> 
> BIND 10 (currently) doesn't support any form of minimal-responses in
> the first place.  Implementing it shouldn't be difficult.  It's just a
> matter of the need and priority.  Out of curiosity, do you find that
> feature of BIND 9 useful or important, or is this just a difference
> you happen to notice?
We consider the feature is useful for DNSKEY. We've been reducing the
response to DNSKEY query not to excess 1,500 octets. Current response is
efficiently small even if in KSK rollover period, thanks to
minimal-responses for DNSKEY.
I think minimal-responses for the other RRtypes is matters of BIND 9
compatibility and preference.

We appreciate your support on resolving the issues found in the
evaluation.

Thanks,

-- 
Yoshitaka Aharen <aharen at jprs.co.jp>
Japan Registry Services Co., Ltd.