bind10-devel-20120301 and NSEC3

Spain, Dr. Jeffry A. spainj at countryday.net
Wed Feb 29 15:36:58 UTC 2012


>> Is my understanding correct that bind10-devel-20120301 b10-auth will be able to provide NSEC3 closest encloser proofs for nonexistent records?

> The short answer is yes, but if you are using a sqlite3 data source, not an in-memory data source, NSEC3 has been supported for quite some time (although that version has been less tested and has some known bugs).  What's new in 20120301 is the support for NSEC in the in-memory data source.

Thanks. That brings up the question: how do I configure bind10 to use an in-memory data source? In the bind10 guide, I see a couple of references to the in-memory data source, but no details about how to use it.

Also is it true that if I am using bind10 as a slave server, i.e. Xfrin module, the in-memory data source isn't supported at this point?

Thanks. Jeff.


More information about the bind10-users mailing list