BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND
architecture. Some of the important features of BIND 9 are:
DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
Experimental IPv6 Resolver Library
DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
Improved standards conformance
Views: One server process can provide multiple "views" of the DNS namespace,
e.g. an "inside" view to certain clients, and an "outside" view to others.
Multiprocessor Support
See the CHANGES file for more information on new features.
===> The following configuration options are available for bind916-9.16.50_1:
DNSTAP=on: Provides fast passive logging of DNS messages
DOCS=on: Build and/or install documentation
FIXED_RRSET=off: Enable fixed rrset ordering
GEOIP=off: GeoIP IP location support
IDN=on: International Domain Names support
JSON=on: JSON file/format/parser support
LARGE_FILE=off: 64-bit file support
LMDB=on: Use LMDB for zone management
OVERRIDECACHE=off: Use the override-cache patch
PORTREVISION=off: Show PORTREVISION in the version string
QUERYTRACE=off: Enable the very verbose query tracelogging
START_LATE=off: Start BIND late in the boot process (see help)
TCP_FASTOPEN=on: RFC 7413 support
====> Dynamically Loadable Zones
DLZ_BDB=off: DLZ BDB driver
DLZ_FILESYSTEM=on: DLZ filesystem driver
DLZ_LDAP=off: DLZ LDAP driver
DLZ_MYSQL=off: DLZ MySQL driver (no threading)
DLZ_POSTGRESQL=off: DLZ Postgres driver
DLZ_STUB=off: DLZ stub driver
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=off: Using Heimdal in base (nsupdate is broken)
GSSAPI_HEIMDAL=off: Using security/heimdal (nsupdate is broken)
GSSAPI_MIT=off: Using security/krb5
GSSAPI_NONE=on: Disable
====> Choose which crypto engine to use: you can only select none or one of them
NATIVE_PKCS11=off: Use PKCS#11 native API (**READ HELP**)
===> Use 'make config' to modify these settings
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
dns/bind916: update FILES in named.conf(5)
Since the move from base to ports of BIND9 the manpage isn't updated
when the port is build. When you run "man named.conf" the FILES section
says:
| FILES
| /etc/named.conf
but this file does not exist. It should point to /usr/local/etc/named.conf.
PR: 257703
Approved by: mat@ (maintainer timeout, 46 d)
MFH: 2022Q4
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
textproc/libxml2: bump all LIB_DEPENDS consumers
This is a separate commit to facilitate easier cherry-picking for
quarterly.
PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
Fix CONFLICTS entries of multiple ports
There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.
This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.
Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
(Only the first 15 lines of the commit message are shown above )
devel/protobuf-c: Bump PORTREVISION of dependent ports
Bump the PORTREVISION of ports that use protobuf-c and bake in the value
of PROTOBUF_C_VERSION*.
Sponsored by: Farsight Security, Inc.
Enabled DNSTAP by default.
The ISC recommends having it by default (it is in the packages they
distribute) and the footprint of the dependecies is very small.
While there, cleanup plists.
PR: 237861
Reported by: Greg Rivers
Remvoe the scary pkg-message from BIND9 9.16.
And make a note that it needs to be removed when a new release comes
along, so that I don't forget next year.
Reported by: Matthias Fechner
