Re: What about BIND 9.3.4 in FreeBSD in base system ?

Chuck Swiger wrote:
> Doug Barton wrote:
>> Chuck Swiger wrote:
>>> Doug Barton wrote:

>>> I've got two nameservers tracking 5-STABLE
>>
>> I am not sure how to respond to that.
> [ ...comments about moving to 6 snipped for brevity... ]
> 
> That's OK, I wasn't soliciting advice on which platform or OS version a 
> given set of machines ought to run. 

Right. As I understood it, you were arguing in favor of MFC'ing a fix 
to RELENG_5 because you have machines from that branch in a production 
setting. If I misunderstood your point, I apologize.

> When the number of machines one 
> deals with in a given environment changes from single-digit, to dozens, 
> to hundreds, to tens of thousands, keeping machines updated to a 
> bug-free, stable environment is more important than chasing features off 
> the latest branch.

Yes, I understand those issues quite well. I used to manage hundreds 
of name servers for a company that had many 10s of thousands of 
machines. And I think that you are basically making my point, which is 
that users in a serious production environment are probably not using 
the BIND that comes with FreeBSD in an off the shelf configuration.

>>> I'm starting to feel thankful that my important domains include 
>>> off-site secondaries which are running djbdns.
>>
>> EGRATUITOUSBINDBASHING
> 
> You seem to be disposed to believe it so, but regardless of opinions, 
> I've had named crash under moderate loads ...

This thread isn't about what's the best brand of name server to use, 
it's about whether to MFC an update.

Doug

-- 

     This .signature sanitized for your protection

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"