Knowledge Base ISC Main Website Ask a Question/Contact ISC
Quick Jump Menu
1 Recursive Client Rate limiting - FAQs Featured

Recursive Client Rate limiting provides new tuning controls intended to optimize recursive server behavior in favor of good client queries, whilst at the same time limiting the impact of bad client queries (e.g. queries which cannot be resolved, or which…

2 prefetch performance in BIND 9.10 Featured

Our new feature Early refresh of cache records (cache prefetch) in BIND 9.1 unfortunately came with a design defect that was not spotted until recently, and which can cause performance degradation in some situations. If you are experiencing surprising and…

3 --with-tuning=large - about using this build-time option Featured

In BIND 9.10 (and earlier in the stable preview edition) we added a built-time option --with-tuning=large. This option allows operators to tune BIND for better performance in high-memory machines, by setting various constants and defaults to values more appropriate…

4 DNS Cookies in BIND 9.10 and 9.11

DNS COOKIE is an Extended DNS (EDNS) option which, when both the client and server support it, allows the client to detect and ignore off-path spoofed responses, and the server to determine that a client's address is not spoofed. It is supported as an experimental…

5 Testing authoritative server support for EDNS and large UDP buffer sizes in BIND 9.10

The EDNS fallback code was re-worked in BIND 9.10 to make it more resilient and reliable when: Encountering new authoritative servers that have not been queried before and for whom the capabilities/support for EDNS and large buffer sizes by both the server…

6 IPv6 Changes in BIND 9.11.0, BIND 9.10.4 and BIND 9.9.9.

BIND 9.11.0, BIND 9.10.4 and BIND 9.9.9 introduces two IPv6 related changes. The first change is to the preferred-glue option. Preferred-glue now defaults to the transport that the query was received over. If named receives a query over IPv6 and there is…

7 Using DNSTAP with BIND 9.11

Introduction dnstap is a fast, flexible method for capturing and logging DNS traffic. Developed by Robert Edmonds at Farsight Security, Inc., it is supported by several DNS implementa tions, including BIND. Some information about it can be found on its website…

8 serial-query-rate, notify-rate and startup-notify-rate: how they impact zone transfers in different versions of BIND

serial-query-rate (default 20) is a rate-limiter, that has been used to for a long time to control both the rate of notifies and of zone refresh (SOA queries). Although the limit is expressed as a per-second rate, it is the actions that are being limited,…

9 BIND9 Significant Features Matrix

The "S" (stable preview) editions and the other release branches of BIND differ in a number of ways. This table lists the major feature differences for current main supported versions of BIND, (with some provisional but incomplete insight into our future…

10 Recursive Client Rate limiting in BIND 9.9.8 and 9.10.3

Several new tuning options for recursive server behavior had been undergoing testing in production environments by ISC customers who have been using special feature preview builds of BIND. These features are intended to optimize recursive server behavior…

1 2 Next