BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND
architecture. Some of the important features of BIND 9 are:
DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
Experimental IPv6 Resolver Library
DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
Improved standards conformance
Views: One server process can provide multiple "views" of the DNS namespace,
e.g. an "inside" view to certain clients, and an "outside" view to others.
Multiprocessor Support
See the CHANGES file for more information on new features.
WWW: https://www.isc.org/downloads/bind/
===> The following configuration options are available for bind914-9.14.11:
DNSTAP=off: Provides fast passive logging of DNS messages
DOCS=on: Build and/or install documentation
FIXED_RRSET=off: Enable fixed rrset ordering
GEOIP=off: GeoIP IP location support
IDN=on: International Domain Names support
JSON=on: JSON file/format/parser support
LARGE_FILE=off: 64-bit file support
LMDB=on: Use LMDB for zone management
MINCACHE=off: Use the mincachettl patch
PORTREVISION=off: Show PORTREVISION in the version string
QUERYTRACE=off: Enable the very verbose query tracelogging
SIGCHASE=on: dig/host/nslookup will do DNSSEC validation
START_LATE=off: Start BIND late in the boot process (see help)
TCP_FASTOPEN=on: RFC 7413 support
TUNING_LARGE=off: Tune named for large systems (**READ HELP**)
====> Dynamically Loadable Zones
DLZ_POSTGRESQL=off: DLZ Postgres driver
DLZ_MYSQL=off: DLZ MySQL driver (no threading)
DLZ_BDB=off: DLZ BDB driver
DLZ_LDAP=off: DLZ LDAP driver
DLZ_FILESYSTEM=on: DLZ filesystem driver
DLZ_STUB=off: DLZ stub driver
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=off: Using Heimdal in base
GSSAPI_HEIMDAL=off: Using security/heimdal
GSSAPI_MIT=off: Using security/krb5
GSSAPI_NONE=on: Disable
====> Choose which crypto engine to use: you can only select none or one of them
NATIVE_PKCS11=off: Use PKCS#11 native API (**READ HELP**)
===> Use 'make config' to modify these settings
Remove expired ports:
dns/dnsperf: depends on expired dns/bind914, not compatible with dns/bind916
2020-04-30 dns/bind914: End of life, please migrate to a newer version of BIND9
Fix named when using plugins and chroot.
BIND9 introduced plugins and migrated the filter-aaaa feature to a
plugin.
As it loads its plugins late in the startup process (read after chroot),
the plugins need to be available in the chroot.
Also, refactor the code now that a second directory need to be handled.
PR: 238011
Reported by: ryan@timewasted.me
MFH: 2019Q2
Prevent bind-tools from inheriting CONFLICTS.
I don't see how this can be a problem as bind-tools is never built after
bind9*.
Reported by: Matthew D. Fuller
Switch to using OPTIONS_EXCLUDE to avoid picking up strays.
If you had things installed, say, lmdb, it would be picked up and linked
with.
Reported by: sunpoet
Remove conflicts from bind-tools and the server ports.
All servers now depend on the same bind-tools, from the latest BIND9
release.
Chase dependencies to make sure they now depend on the correct port.
Differential Revision: https://reviews.freebsd.org/D19922
