amal/ungleich-staticcms
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

++fixes for isc love letter

Browse source
This commit is contained in:
Nico Schottelius 2021-02-22 13:24:27 +01:00
parent cb8e720931
commit 1f0457749a
1 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
content/u/blog/love-letter-to-isc-bind/contents.lr
View file

@ -19,10 +19,9 @@ body:
Dear ISC bind, Dear ISC bind,
this is a love letter to you. You probably don't know me, but I have this is a love letter to you. You probably don't know me, but I have
been a long term user of yours. I started using you - oh, that sounds been a long term user of yours.
so wrong for a love letter, doesn't it?
I started my time with you in the late 90's, it was when you were I started my time with you in the late 90's. It was when you were
called "bind 4". I was very happy with our relationship. You'd not called "bind 4". I was very happy with our relationship. You'd not
only take care of all authoritative requests, but also take care of only take care of all authoritative requests, but also take care of
caching client requests. Me, still being young at the time, I did not caching client requests. Me, still being young at the time, I did not
@ -32,7 +31,7 @@ But then over time I got more experienced and I read and tried DNS
cache poisoning and I was shocked. How could you? How could you accept cache poisoning and I was shocked. How could you? How could you accept
incorrect entries? I had so much trust in you and then that! incorrect entries? I had so much trust in you and then that!
So many years passed and after my shock, I had a fling with Years passed and after my shock, I had a fling with
[djbdns](https://cr.yp.to/djbdns.html) (together with qmail and [djbdns](https://cr.yp.to/djbdns.html) (together with qmail and
daemontools). Which right away took security more serious. So daemontools). Which right away took security more serious. So
serious that even managing djbdns with its own suite was almost like a serious that even managing djbdns with its own suite was almost like a
@ -60,7 +59,7 @@ hosting. And there you were, dear bind. Looking at me from the side of
the software projects, saying "I think it's time we have a talk.". the software projects, saying "I think it's time we have a talk.".
And indeed, we did have a talk. A talk about implementing DNS64. About And indeed, we did have a talk. A talk about implementing DNS64. About
different nat64 prefixes in one configuration. About being different DNS64 prefixes in one configuration. About being
an authoritative name server that functions even if all upstreams are an authoritative name server that functions even if all upstreams are
down. A name server that even allows the most funky configuration of down. A name server that even allows the most funky configuration of
*removing native AAAA entries* for DNS64 networks that should only *removing native AAAA entries* for DNS64 networks that should only
@ -79,7 +78,7 @@ being flexible, thanks for improving over time and thanks to still
adhearing to the same configuration file format that I used in the adhearing to the same configuration file format that I used in the
late 90's. late 90's.
Dear BIND, you are by far not perfect, but then again neither is Dear BIND, you are by far not perfect, but then neither is
reality. And this is your strength, solving real world problems. reality. And this is your strength, solving real world problems.
Thank you for doing so and thanks to all the involved developers! Thank you for doing so and thanks to all the involved developers!