[191991] in North American Network Operators' Group
EDNS compliance and BIND 9.11.0
daemon@ATHENA.MIT.EDU (Mark Andrews)
Thu Oct 6 22:02:51 2016
X-Original-To: nanog@nanog.org
To: nanog@nanog.org
From: Mark Andrews <marka@isc.org>
Date: Fri, 07 Oct 2016 13:02:42 +1100
Errors-To: nanog-bounces@nanog.org
BIND 9.11.0 was released this week.
BIND 9.11.0 and BIND 9.10.4 implement EDNS COOKIES. They are on
by default in BIND 9.11.0 and BIND 9.10.4 Windows. For the non
Windows builds of BIND 9.10.4 they need to be enabled at configure
time.
If your nameservers are not EDNS compliant, especially for unknown
EDNS options, you could be seeing issues ranging from additional
traffic, slow DNS lookups to full blown lookup failures. If you
having fixed your servers already you need to fix them now.
You can test your servers at https://ednscomp.isc.org/ednscomp/
to see if they are EDNS compliant.
You can see EDNS compliance trends and list of failing servers
at https://ednscomp.isc.org.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
