Home page logo
/

nanog logo nanog mailing list archives

Re: DNS contamination
From: Paul A Vixie <paul () vix com>
Date: Fri, 24 Jan 1997 11:08:12 -0800

As of the financing the bind project - if asked, I wouldn't recommend to
participate in it, as it's one mess of a project and the amount of time and
money necessary to produce a robust operational product is comparable with
the amount of time and money necessary to create a new product from
scratch, addressing the operational issues in its very design. Too bad the
major OS vendors don't usually have a clue and stick to the freely
available product of an experimental, demonstration-of-concept project.

There are several commercial alternatives to BIND, two of which are written
from the ground up.  However, neither one has the benefit of years of tuning
and tweaking, and as yet the "DNS Clarifications" draft isn't part of the
standard and I'm not sure yet that it's exhaustive in any case.  So, for the
time being anyway, BIND is what I recommend that any major name server run.
BIND-8 is quite a bit more robust, and it _is_ being funded by some vendors,
just not enough vendors.  That's why I'm poking at ISP's like yourselves.
- - - - - - - - - - - - - - - - -


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]