BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND
architecture. Some of the important features of BIND 9 are:
DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
Experimental IPv6 Resolver Library
DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
Improved standards conformance
Views: One server process can provide multiple "views" of the DNS namespace,
e.g. an "inside" view to certain clients, and an "outside" view to others.
Multiprocessor Support
See the CHANGES file for more information on new features.
===> The following configuration options are available for bind918-9.18.50:
DNSTAP=on: Provides fast passive logging of DNS messages
DOCS=on: Build and/or install documentation
FIXED_RRSET=off: Enable fixed rrset ordering
GEOIP=off: GeoIP IP location support
IDN=on: International Domain Names support
LARGE_FILE=off: 64-bit file support
LMDB=on: Use LMDB for zone management
OVERRIDECACHE=off: Use the override-cache patch
QUERYTRACE=off: Enable the very verbose query tracelogging
START_LATE=off: Start BIND late in the boot process (see help)
TCP_FASTOPEN=on: RFC 7413 support
====> Statistics channels
STATS_JSON=on: Enable JSON statistics channel
STATS_XML=on: Enable XML statistics channel
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=on: Using MIT in base
GSSAPI_HEIMDAL=off: Using security/heimdal (nsupdate is broken)
GSSAPI_MIT=off: Using security/krb5
GSSAPI_NONE=off: Disable
===> Use 'make config' to modify these settings
dns/bind9*: enable base GSSAPI on 15+
FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
problems BIND9 was having with Heimdal.
PR: 291780
dns/bind9*: nsupdate works on 15+ with MIT kerberos from base
FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
problems BIND9 was having with Heimdal.
PR: 291776
*/*: Bump PORTREVISION for devel/protobuf-c update
libprotobuf-c.so once again has version info. Force a rebuild of
its consumers.
PR: 282060
MFH: 2025Q3
Sponsored by: <If the change was sponsored by an organization.>
dns/bind918: unbreak build with docs excluded
This is correction after latest mat's change to make it really work.
Default build unaffected, so PORTREVISON not bumped.
PR: 262773
Approved by: mat (maintainer timeout, 2 weeks)
Submitted by: Michael Osipov
Requested by: many
dns/bind918: fix build in some obscure cases
If sphinx is installed while not requested, it gets picked up, tell
configure that it really is not here, and things blow up.
PR: 262773
MFH: yes
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
textproc/libxml2: bump all LIB_DEPENDS consumers
This is a separate commit to facilitate easier cherry-picking for
quarterly.
PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
dns/bind918: fix build
The ISC is doing new strange things in their Makefiles, so add back
gmake to the dependency chain when building DOCS or MANPAGES.
dns/bind918: add newest version of BIND9
Amongts many new features are the two methods of securing DNS trafic
over Transport Layer Security (TLS). TLS is used by both DNS over TLS
(DoT) and DNS over HTTPS (DoH).
Changes: https://downloads.isc.org/isc/bind9/9.18.0/doc/arm/html/notes.html
