ISC releases BIND 10 1.2, renames it, and turns it over to community

Posted Apr 18, 2014 8:18 UTC (Fri) by grantma (subscriber, #5225)
In reply to: ISC releases BIND 10 1.2, renames it, and turns it over to community by grantma
Parent article: ISC releases BIND 10 1.2, renames it, and turns it over to community

URL should be:

http://mattgrant.net.nz/software/dms

ISC releases BIND 10 1.2, renames it, and turns it over to community

Posted Apr 18, 2014 9:26 UTC (Fri) by bradh (guest, #2274) [Link] (1 responses)

You might like to state any personal interest in this project. Fair disclosure, informed readers and all that.

ISC releases Bind 10.2, DMS to manage Bind9.8+ DNS zones

Posted Apr 18, 2014 21:28 UTC (Fri) by grantma (subscriber, #5225) [Link]

Yes, I wrote it for a previous employer, and they have allowed me to open source it.

It is probably more relevant than Bind10, as it uses BIND9, one tick right from the start. It supports auto PTR creation - a great help with V6, running DNSSEC zones, zone versioning, and all the important cryptographic records.

Basically it allows you to leverage distributed power of your DNSSEC zone to augment SSL signed certs through TLSA, and oppurtunistic IPSEC.

In IPSEC all the key material is in a separate process from the data, and it is more effecient if the relationship is a lasting over a period of time.