7/23 What's involved in upgrading from Bind 8.x to Bind 9.x? If I have
a relatively simple subdomain setup, can I just drop in the config
files that used to work with Bind 8.x into Bind 9.x /etc directory
and expect it to work? Also is it worth upgrading to 9.x or should
I just stay with 8.x (presumambly for safety since it has been around
for such a long time..)
\_ use djbdns. yes i am an ass but that is my honest suggestion.
\_ I thought djbdns does not support some parts of DNS spec
that have to do with zone transfers and I need to do transfers
both ways from and to the servers that run bind and which are
out of my control.
\_ Do not encourage djb by giving him any more downloads.
\_ I would recommend upgrading to 9. Both security and reliability
are greatly enhanced in BIND9. I think that you may have to make
minor changes to your config files, but all in all the upgrade
wasn't that bad.
I disagree with the above poster about moving to djbdns. While
it may be very secure, it is was a pita to deploy and maintain.
It also had problems with certain types of client queries that
it felt were "improper". Just stick with BIND9. It works as is
pretty secure.
\_ I did the 8->9 upgrade many months ago. I expected a nightmare,
but the config file differences were so minor I can't honestly
recall what they are. If you're capable of setting up subbing
and the rest in the first place you'll find the upgrade very
easy. Sendmail, openssh, postfix, and many other typical
server apps are much more annoying to install and upgrade than
going from bind 8 to 9.
\_ how complex is your dns? if you are worried, set up 9 somewhere
and do the upgrade. use tools like dnswalk to check your work.
when you upgrade the production servers, you'll have the config
files at the ready. as for djbdns, last i checked it doesn't do
delegation-only which if your running a caching namesever is less
then ideal. |
http://csua.com/feed/