Re: Does BIND supports ANAME RR
Please, don’t reply to threads with unrelated subject matter. This is just good mailing list etiquette. Please create a new message, not a reply, and ask the question again. Mark > On 10 Aug 2021, at 13:48, Divya wrote: > > Dear Admin, > > Has anybody used advance features of bind DoT and DoH, Kindly help me to > configure DoT and DoH in DNS with bind BIND 9.17.16+CentOS 7.9. > > With Regards > Divya > > - Original Message - > From: "Ondřej Surý" > To: "klaus darilion" > Cc: bind-users@lists.isc.org > Sent: Monday, August 9, 2021 10:48:54 PM > Subject: Re: Does BIND supports ANAME RR > > No, and there’s no strong usercase for that. The ANAME was wrong on every > level from the protocol perspective and I am glad it is gone. > > Ondřej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users >> wrote: >> >> Does every application that uses gethostbyname have a benefit of >> HTTPS/SVCB? That is what I meant. >> regards >> Klaus >> >>> -Ursprüngliche Nachricht- >>> Von: Mark Andrews >>> Gesendet: Montag, 9. August 2021 15:55 >>> An: Klaus Darilion >>> Cc: Evan Hunt ; Gaurav Kansal ; bind- >>> us...@lists.isc.org >>> Betreff: Re: Does BIND supports ANAME RR >>> >>> Every resolver on the planet already supports HTTPS and SVCB. Every >>> authoritative server on the planet already supports HTTPS and SVCB via >>> unknown record format. iOS is already making HTTPS queries for every >>> webpage. I believe other browsers also make HTTPS queries today. Go look >>> at your DNS traffic. >>> >>> The MR mentioned earlier allows named and the other tools to load and >>> display the records in presentation format and to do the additional section >>> processing. None of that it required to be able to return these records. >>> It >>> just makes it easier. >>> >>> Just about all the other DNS vendors also have code that can read and >>> display presentation format. >>> >>> ANAME is dead. >>> -- >>> Mark Andrews >>> >>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users >> us...@lists.isc.org> wrote: >>>> >>>> >>>>> >>>>> -Ursprüngliche Nachricht- >>>>> Von: bind-users Im Auftrag von Evan >>>>> Hunt >>>>> Gesendet: Samstag, 7. August 2021 20:21 >>>>> An: Gaurav Kansal >>>>> Cc: bind-users@lists.isc.org >>>>> Betreff: Re: Does BIND supports ANAME RR >>>>> >>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: >>>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes, >>>>>>> then from which version on wards ? >>>>>> >>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt >>>>>> it'll be coming back. >>>>>> >>>>>> The new HTTPS and SVCB records look like a better approach anyway. >>>>>> BIND will have support for those pretty soon. >>>> >>>> But honestly SVCB will not solve the ANAME problem. I will take years until >>> all resolvers/client would support SVCB whereas ANAME would be >>> implemented in the authoritative name server and hence would work for >>> every client/resolver as client/resolver never sees the ANAME but only the >>> A/ record. >>>> >>>> regards >>>> Klaus >>>> ___ >>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >>>> unsubscribe >>> from this list >>>> >>>> ISC funds the development of this software with paid support >>> subscriptions. Contact us at https://www.isc.org/contact/ for more >>> information. >>>> >>>> >>>> bind-users mailing list >>>> bind-users@lists.isc.org >>>> https://lists.isc.org/mailman/listinfo/bind-users >> ___ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >> unsubscribe from this list >> >> ISC funds the development of this software with pa
Re: Does BIND supports ANAME RR
Dear Admin, Has anybody used advance features of bind DoT and DoH, Kindly help me to configure DoT and DoH in DNS with bind BIND 9.17.16+CentOS 7.9. With Regards Divya - Original Message - From: "Ondřej Surý" To: "klaus darilion" Cc: bind-users@lists.isc.org Sent: Monday, August 9, 2021 10:48:54 PM Subject: Re: Does BIND supports ANAME RR No, and there’s no strong usercase for that. The ANAME was wrong on every level from the protocol perspective and I am glad it is gone. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users > wrote: > > Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? > That is what I meant. > regards > Klaus > >> -Ursprüngliche Nachricht- >> Von: Mark Andrews >> Gesendet: Montag, 9. August 2021 15:55 >> An: Klaus Darilion >> Cc: Evan Hunt ; Gaurav Kansal ; bind- >> us...@lists.isc.org >> Betreff: Re: Does BIND supports ANAME RR >> >> Every resolver on the planet already supports HTTPS and SVCB. Every >> authoritative server on the planet already supports HTTPS and SVCB via >> unknown record format. iOS is already making HTTPS queries for every >> webpage. I believe other browsers also make HTTPS queries today. Go look >> at your DNS traffic. >> >> The MR mentioned earlier allows named and the other tools to load and >> display the records in presentation format and to do the additional section >> processing. None of that it required to be able to return these records. >> It >> just makes it easier. >> >> Just about all the other DNS vendors also have code that can read and >> display presentation format. >> >> ANAME is dead. >> -- >> Mark Andrews >> >>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users > us...@lists.isc.org> wrote: >>> >>> >>>> >>>> -Ursprüngliche Nachricht- >>>> Von: bind-users Im Auftrag von Evan >>>> Hunt >>>> Gesendet: Samstag, 7. August 2021 20:21 >>>> An: Gaurav Kansal >>>> Cc: bind-users@lists.isc.org >>>> Betreff: Re: Does BIND supports ANAME RR >>>> >>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: >>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes, >>>>>> then from which version on wards ? >>>>> >>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt >>>>> it'll be coming back. >>>>> >>>>> The new HTTPS and SVCB records look like a better approach anyway. >>>>> BIND will have support for those pretty soon. >>> >>> But honestly SVCB will not solve the ANAME problem. I will take years until >> all resolvers/client would support SVCB whereas ANAME would be >> implemented in the authoritative name server and hence would work for >> every client/resolver as client/resolver never sees the ANAME but only the >> A/ record. >>> >>> regards >>> Klaus >>> ___ >>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >>> unsubscribe >> from this list >>> >>> ISC funds the development of this software with paid support >> subscriptions. Contact us at https://www.isc.org/contact/ for more >> information. >>> >>> >>> bind-users mailing list >>> bind-users@lists.isc.org >>> https://lists.isc.org/mailman/listinfo/bind-users > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
If you mean stop publishing CNAME as meaning “the server for this service is …” then yes. HTTPS can be published along side MX, A, and . Just start doing it. Mark -- Mark Andrews > On 10 Aug 2021, at 07:13, Klaus Darilion wrote: > > Do you think that we can get rid of CNAME too? > > regards > Klaus > >> -Ursprüngliche Nachricht- >> Von: Ondřej Surý >> Gesendet: Montag, 9. August 2021 19:19 >> An: Klaus Darilion >> Cc: Mark Andrews ; bind-users@lists.isc.org >> Betreff: Re: Does BIND supports ANAME RR >> >> No, and there’s no strong usercase for that. The ANAME was wrong on every >> level from the protocol perspective and I am glad it is gone. >> >> Ondřej >> -- >> Ondřej Surý — ISC (He/Him) >> >> My working hours and your working hours may be different. Please do not >> feel obligated to reply outside your normal working hours. >> >>> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users > us...@lists.isc.org> wrote: >>> >>> Does every application that uses gethostbyname have a benefit of >> HTTPS/SVCB? That is what I meant. >>> regards >>> Klaus >>> >>>> -Ursprüngliche Nachricht- >>>> Von: Mark Andrews >>>> Gesendet: Montag, 9. August 2021 15:55 >>>> An: Klaus Darilion >>>> Cc: Evan Hunt ; Gaurav Kansal ; >> bind- >>>> us...@lists.isc.org >>>> Betreff: Re: Does BIND supports ANAME RR >>>> >>>> Every resolver on the planet already supports HTTPS and SVCB. Every >>>> authoritative server on the planet already supports HTTPS and SVCB via >>>> unknown record format. iOS is already making HTTPS queries for every >>>> webpage. I believe other browsers also make HTTPS queries today. Go >> look >>>> at your DNS traffic. >>>> >>>> The MR mentioned earlier allows named and the other tools to load and >>>> display the records in presentation format and to do the additional >> section >>>> processing. None of that it required to be able to return these records. >>>> It >>>> just makes it easier. >>>> >>>> Just about all the other DNS vendors also have code that can read and >>>> display presentation format. >>>> >>>> ANAME is dead. >>>> -- >>>> Mark Andrews >>>> >>>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users >>> us...@lists.isc.org> wrote: >>>>> >>>>> >>>>>> >>>>>> -Ursprüngliche Nachricht- >>>>>> Von: bind-users Im Auftrag von >> Evan >>>>>> Hunt >>>>>> Gesendet: Samstag, 7. August 2021 20:21 >>>>>> An: Gaurav Kansal >>>>>> Cc: bind-users@lists.isc.org >>>>>> Betreff: Re: Does BIND supports ANAME RR >>>>>> >>>>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: >>>>>>>>> I need the help in figuring out whether BIND supports ANAME ? If >>> yes, >>>>>>>>> then from which version on wards ? >>>>>>>> >>>>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt >>>>>>>> it'll be coming back. >>>>>>>> >>>>>>>> The new HTTPS and SVCB records look like a better approach anyway. >>>>>>>> BIND will have support for those pretty soon. >>>>>> >>>>>> But honestly SVCB will not solve the ANAME problem. I will take years >>> until >>>>> all resolvers/client would support SVCB whereas ANAME would be >>>>> implemented in the authoritative name server and hence would work for >>>>> every client/resolver as client/resolver never sees the ANAME but only the >>>>> A/ record. >>>>>> >>>>>> regards >>>>>> Klaus >>>>>> ___ >>>>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >>> unsubscribe >>>>> from this list >>>>>> >>>>>> ISC funds the development of this software with paid support >>>>> subscriptions. Contact us at https://www.isc.org/contact/ for more >>>>> information. >>>>>> >>>>>> >>>>>> bind-users mailing list >>>>>> bind-users@lists.isc.org >>>>>> https://lists.isc.org/mailman/listinfo/bind-users >>> ___ >>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >>> unsubscribe >> from this list >>> >>> ISC funds the development of this software with paid support >> subscriptions. Contact us at https://www.isc.org/contact/ for more >> information. >>> >>> >>> bind-users mailing list >>> bind-users@lists.isc.org >>> https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
AW: Does BIND supports ANAME RR
Do you think that we can get rid of CNAME too? regards Klaus > -Ursprüngliche Nachricht- > Von: Ondřej Surý > Gesendet: Montag, 9. August 2021 19:19 > An: Klaus Darilion > Cc: Mark Andrews ; bind-users@lists.isc.org > Betreff: Re: Does BIND supports ANAME RR > > No, and there’s no strong usercase for that. The ANAME was wrong on every > level from the protocol perspective and I am glad it is gone. > > Ondřej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not > feel obligated to reply outside your normal working hours. > > > On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users us...@lists.isc.org> wrote: > > > > Does every application that uses gethostbyname have a benefit of > HTTPS/SVCB? That is what I meant. > > regards > > Klaus > > > >> -Ursprüngliche Nachricht- > >> Von: Mark Andrews > >> Gesendet: Montag, 9. August 2021 15:55 > >> An: Klaus Darilion > >> Cc: Evan Hunt ; Gaurav Kansal ; > bind- > >> us...@lists.isc.org > >> Betreff: Re: Does BIND supports ANAME RR > >> > >> Every resolver on the planet already supports HTTPS and SVCB. Every > >> authoritative server on the planet already supports HTTPS and SVCB via > >> unknown record format. iOS is already making HTTPS queries for every > >> webpage. I believe other browsers also make HTTPS queries today. Go > look > >> at your DNS traffic. > >> > >> The MR mentioned earlier allows named and the other tools to load and > >> display the records in presentation format and to do the additional > section > >> processing. None of that it required to be able to return these records. > >> It > >> just makes it easier. > >> > >> Just about all the other DNS vendors also have code that can read and > >> display presentation format. > >> > >> ANAME is dead. > >> -- > >> Mark Andrews > >> > >>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users >> us...@lists.isc.org> wrote: > >>> > >>> > >>>> > >>>> -Ursprüngliche Nachricht- > >>>> Von: bind-users Im Auftrag von > Evan > >>>> Hunt > >>>> Gesendet: Samstag, 7. August 2021 20:21 > >>>> An: Gaurav Kansal > >>>> Cc: bind-users@lists.isc.org > >>>> Betreff: Re: Does BIND supports ANAME RR > >>>> > >>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: > >>>>>> I need the help in figuring out whether BIND supports ANAME ? If > yes, > >>>>>> then from which version on wards ? > >>>>> > >>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt > >>>>> it'll be coming back. > >>>>> > >>>>> The new HTTPS and SVCB records look like a better approach anyway. > >>>>> BIND will have support for those pretty soon. > >>> > >>> But honestly SVCB will not solve the ANAME problem. I will take years > until > >> all resolvers/client would support SVCB whereas ANAME would be > >> implemented in the authoritative name server and hence would work for > >> every client/resolver as client/resolver never sees the ANAME but only the > >> A/ record. > >>> > >>> regards > >>> Klaus > >>> ___ > >>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe > >> from this list > >>> > >>> ISC funds the development of this software with paid support > >> subscriptions. Contact us at https://www.isc.org/contact/ for more > >> information. > >>> > >>> > >>> bind-users mailing list > >>> bind-users@lists.isc.org > >>> https://lists.isc.org/mailman/listinfo/bind-users > > ___ > > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > > unsubscribe > from this list > > > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > > > > bind-users mailing list > > bind-users@lists.isc.org > > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
On Mon, Aug 09, 2021 at 01:55:50PM +0200, Klaus Darilion wrote: > But honestly SVCB will not solve the ANAME problem. I will take years > until all resolvers/client would support SVCB whereas ANAME would be > implemented in the authoritative name server and hence would work for > every client/resolver as client/resolver never sees the ANAME but only > the A/ record. Most browsers update themselves these days, so getting HTTPS/SVCB support rolled out in the client seems to be a lesser problem. Doing ANAME properly would require resolver upgrades. 99% of the reason for ANAME was that browser vendors were unwilling to use SRV. If they *are* willing to use HTTPS/SVCB - which looks promising at the moment - then the remaining use cases for ANAME aren't worth the complexity. -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
No, and there’s no strong usercase for that. The ANAME was wrong on every level from the protocol perspective and I am glad it is gone. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users > wrote: > > Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? > That is what I meant. > regards > Klaus > >> -Ursprüngliche Nachricht- >> Von: Mark Andrews >> Gesendet: Montag, 9. August 2021 15:55 >> An: Klaus Darilion >> Cc: Evan Hunt ; Gaurav Kansal ; bind- >> us...@lists.isc.org >> Betreff: Re: Does BIND supports ANAME RR >> >> Every resolver on the planet already supports HTTPS and SVCB. Every >> authoritative server on the planet already supports HTTPS and SVCB via >> unknown record format. iOS is already making HTTPS queries for every >> webpage. I believe other browsers also make HTTPS queries today. Go look >> at your DNS traffic. >> >> The MR mentioned earlier allows named and the other tools to load and >> display the records in presentation format and to do the additional section >> processing. None of that it required to be able to return these records. >> It >> just makes it easier. >> >> Just about all the other DNS vendors also have code that can read and >> display presentation format. >> >> ANAME is dead. >> -- >> Mark Andrews >> >>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users > us...@lists.isc.org> wrote: >>> >>> >>>> >>>> -Ursprüngliche Nachricht- >>>> Von: bind-users Im Auftrag von Evan >>>> Hunt >>>> Gesendet: Samstag, 7. August 2021 20:21 >>>> An: Gaurav Kansal >>>> Cc: bind-users@lists.isc.org >>>> Betreff: Re: Does BIND supports ANAME RR >>>> >>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: >>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes, >>>>>> then from which version on wards ? >>>>> >>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt >>>>> it'll be coming back. >>>>> >>>>> The new HTTPS and SVCB records look like a better approach anyway. >>>>> BIND will have support for those pretty soon. >>> >>> But honestly SVCB will not solve the ANAME problem. I will take years until >> all resolvers/client would support SVCB whereas ANAME would be >> implemented in the authoritative name server and hence would work for >> every client/resolver as client/resolver never sees the ANAME but only the >> A/ record. >>> >>> regards >>> Klaus >>> ___ >>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >>> unsubscribe >> from this list >>> >>> ISC funds the development of this software with paid support >> subscriptions. Contact us at https://www.isc.org/contact/ for more >> information. >>> >>> >>> bind-users mailing list >>> bind-users@lists.isc.org >>> https://lists.isc.org/mailman/listinfo/bind-users > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
AW: Does BIND supports ANAME RR
Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? That is what I meant. regards Klaus > -Ursprüngliche Nachricht- > Von: Mark Andrews > Gesendet: Montag, 9. August 2021 15:55 > An: Klaus Darilion > Cc: Evan Hunt ; Gaurav Kansal ; bind- > us...@lists.isc.org > Betreff: Re: Does BIND supports ANAME RR > > Every resolver on the planet already supports HTTPS and SVCB. Every > authoritative server on the planet already supports HTTPS and SVCB via > unknown record format. iOS is already making HTTPS queries for every > webpage. I believe other browsers also make HTTPS queries today. Go look > at your DNS traffic. > > The MR mentioned earlier allows named and the other tools to load and > display the records in presentation format and to do the additional section > processing. None of that it required to be able to return these records. It > just makes it easier. > > Just about all the other DNS vendors also have code that can read and > display presentation format. > > ANAME is dead. > -- > Mark Andrews > > > On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users us...@lists.isc.org> wrote: > > > > > >> > >> -Ursprüngliche Nachricht- > >> Von: bind-users Im Auftrag von Evan > >> Hunt > >> Gesendet: Samstag, 7. August 2021 20:21 > >> An: Gaurav Kansal > >> Cc: bind-users@lists.isc.org > >> Betreff: Re: Does BIND supports ANAME RR > >> > >>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: > >>> I need the help in figuring out whether BIND supports ANAME ? If yes, > >>> then from which version on wards ? > >> > >> No, it doesn't. The effort to standardize ANAME stalled, and I doubt > >> it'll be coming back. > >> > >> The new HTTPS and SVCB records look like a better approach anyway. > >> BIND will have support for those pretty soon. > > > > But honestly SVCB will not solve the ANAME problem. I will take years until > all resolvers/client would support SVCB whereas ANAME would be > implemented in the authoritative name server and hence would work for > every client/resolver as client/resolver never sees the ANAME but only the > A/ record. > > > > regards > > Klaus > > ___ > > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > > unsubscribe > from this list > > > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > > > > bind-users mailing list > > bind-users@lists.isc.org > > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
Every resolver on the planet already supports HTTPS and SVCB. Every authoritative server on the planet already supports HTTPS and SVCB via unknown record format. iOS is already making HTTPS queries for every webpage. I believe other browsers also make HTTPS queries today. Go look at your DNS traffic. The MR mentioned earlier allows named and the other tools to load and display the records in presentation format and to do the additional section processing. None of that it required to be able to return these records. It just makes it easier. Just about all the other DNS vendors also have code that can read and display presentation format. ANAME is dead. -- Mark Andrews > On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users > wrote: > > >> >> -Ursprüngliche Nachricht- >> Von: bind-users Im Auftrag von Evan >> Hunt >> Gesendet: Samstag, 7. August 2021 20:21 >> An: Gaurav Kansal >> Cc: bind-users@lists.isc.org >> Betreff: Re: Does BIND supports ANAME RR >> >>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: >>> I need the help in figuring out whether BIND supports ANAME ? If yes, >>> then from which version on wards ? >> >> No, it doesn't. The effort to standardize ANAME stalled, and I doubt >> it'll be coming back. >> >> The new HTTPS and SVCB records look like a better approach anyway. >> BIND will have support for those pretty soon. > > But honestly SVCB will not solve the ANAME problem. I will take years until > all resolvers/client would support SVCB whereas ANAME would be implemented in > the authoritative name server and hence would work for every client/resolver > as client/resolver never sees the ANAME but only the A/ record. > > regards > Klaus > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
On 09.08.21 13:55, Klaus Darilion via bind-users wrote: >But honestly SVCB will not solve the ANAME problem. I will take years > until all resolvers/client would support SVCB whereas ANAME would be > implemented in the authoritative name server resolving on authoritative server could in fact help, and wouldn't need protocol change at all, but the problem above is crucial (what would you do in case of failure? refuse whole zone?) On 09.08.21 14:37, Klaus Darilion via bind-users wrote: Resolving is done when there is an incoming query, not on zone loading. So if the auth's resolver (either a full blown resolver or a stub resolver which forwards to another resolver) fails to resolve I would just forward this error to the client's resolver. This would not change the fact that you are asking authoritative server to resolve record which is by definition not the job of authoritative server. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I intend to live forever - so far so good. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
AW: Does BIND supports ANAME RR
> On 09.08.21 13:55, Klaus Darilion via bind-users wrote: > >But honestly SVCB will not solve the ANAME problem. I will take years > > until all resolvers/client would support SVCB whereas ANAME would be > > implemented in the authoritative name server > > resolving on authoritative server could in fact help, and wouldn't need > protocol > change at all, but the problem above is crucial (what would you do in case > of failure? refuse whole zone?) Resolving is done when there is an incoming query, not on zone loading. So if the auth's resolver (either a full blown resolver or a stub resolver which forwards to another resolver) fails to resolve I would just forward this error to the client's resolver. regards Klaus ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: > I need the help in figuring out whether BIND supports ANAME ? If yes, > then from which version on wards ? No, it doesn't. The effort to standardize ANAME stalled, and I doubt it'll be coming back. The new HTTPS and SVCB records look like a better approach anyway. BIND will have support for those pretty soon. On 09.08.21 13:55, Klaus Darilion via bind-users wrote: But honestly SVCB will not solve the ANAME problem. I will take years until all resolvers/client would support SVCB whereas ANAME would be implemented in the authoritative name server recursive - authoritative server is not there to resolve remote hostnames, if it doesn't provide recursion. (well, it COULD try to resolve just as it resolves NS IPS for sending notifies, but that's different). resolving on authoritative server could in fact help, and wouldn't need protocol change at all, but the problem above is crucial (what would you do in case of failure? refuse whole zone?) and hence would work for every client/resolver as client/resolver never sees the ANAME but only the A/ record. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I drive way too fast to worry about cholesterol. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
AW: Does BIND supports ANAME RR
> -Ursprüngliche Nachricht- > Von: bind-users Im Auftrag von Evan > Hunt > Gesendet: Samstag, 7. August 2021 20:21 > An: Gaurav Kansal > Cc: bind-users@lists.isc.org > Betreff: Re: Does BIND supports ANAME RR > > On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: > > I need the help in figuring out whether BIND supports ANAME ? If yes, > > then from which version on wards ? > > No, it doesn't. The effort to standardize ANAME stalled, and I doubt > it'll be coming back. > > The new HTTPS and SVCB records look like a better approach anyway. > BIND will have support for those pretty soon. But honestly SVCB will not solve the ANAME problem. I will take years until all resolvers/client would support SVCB whereas ANAME would be implemented in the authoritative name server and hence would work for every client/resolver as client/resolver never sees the ANAME but only the A/ record. regards Klaus ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
Ok. Thanks a lot. Sent from my iPhone > On 07-Aug-2021, at 11:51 PM, Ondřej Surý wrote: > > Hi, > > no, ANAME is dead standard and it has been replaced by HTTPS SVCB: > https://datatracker.ietf.org/doc/draft-ietf-dnsop-svcb-https/ > > The support for the draft is in review and it will be merged some time this > year. > > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >>> On 7. 8. 2021, at 19:33, Gaurav Kansal wrote: >>> >> >> Hi guys, >> >> I need the help in figuring out whether BIND supports ANAME ? If yes, then >> from which version on wards ? >> >> Use case of ANAME RR is explained here - >> https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ >> >> Thanks. >> Gaurav Kansal >> >> >> >> Disclaimer: >> >> This e-mail and its attachments may contain official Indian Government >> information. If you are not the intended recipient, please notify the sender >> immediately and delete this e-mail. Any dissemination or use of this >> information by a person other than the intended recipient is unauthorized. >> The responsibility lies with the recipient to check this email and any >> attachment for the presence of viruses. >> >> ___ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >> unsubscribe from this list >> >> ISC funds the development of this software with paid support subscriptions. >> Contact us at https://www.isc.org/contact/ for more information. >> >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
Hi, no, ANAME is dead standard and it has been replaced by HTTPS SVCB: https://datatracker.ietf.org/doc/draft-ietf-dnsop-svcb-https/ The support for the draft is in review and it will be merged some time this year. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 7. 8. 2021, at 19:33, Gaurav Kansal wrote: > > > Hi guys, > > I need the help in figuring out whether BIND supports ANAME ? If yes, then > from which version on wards ? > > Use case of ANAME RR is explained here - > https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ > > Thanks. > Gaurav Kansal > > > > Disclaimer: > > This e-mail and its attachments may contain official Indian Government > information. If you are not the intended recipient, please notify the sender > immediately and delete this e-mail. Any dissemination or use of this > information by a person other than the intended recipient is unauthorized. > The responsibility lies with the recipient to check this email and any > attachment for the presence of viruses. > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Does BIND supports ANAME RR
On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote: > I need the help in figuring out whether BIND supports ANAME ? If yes, > then from which version on wards ? No, it doesn't. The effort to standardize ANAME stalled, and I doubt it'll be coming back. The new HTTPS and SVCB records look like a better approach anyway. BIND will have support for those pretty soon. -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Does BIND supports ANAME RR
Hi guys, I need the help in figuring out whether BIND supports ANAME ? If yes, then from which version on wards ? Use case of ANAME RR is explained here - [ https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ | https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ ] Thanks. Gaurav Kansal Disclaimer: This e-mail and its attachments may contain official Indian Government information. If you are not the intended recipient, please notify the sender immediately and delete this e-mail. Any dissemination or use of this information by a person other than the intended recipient is unauthorized. The responsibility lies with the recipient to check this email and any attachment for the presence of viruses. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users