Re: Does BIND supports ANAME RR

2021-08-09 Thread Mark Andrews
Please, don’t reply to threads with unrelated subject matter.  This is
just good mailing list etiquette.

Please create a new message, not a reply, and ask the question again.

Mark

> On 10 Aug 2021, at 13:48, Divya  wrote:
> 
> Dear Admin,
> 
> Has anybody used advance features of bind DoT and DoH, Kindly help me to 
> configure DoT and DoH in DNS with bind BIND 9.17.16+CentOS  7.9.
> 
> With Regards 
> Divya 
> 
> - Original Message -
> From: "Ondřej Surý" 
> To: "klaus darilion" 
> Cc: bind-users@lists.isc.org
> Sent: Monday, August 9, 2021 10:48:54 PM
> Subject: Re: Does BIND supports ANAME RR
> 
> No, and there’s no strong usercase for that. The ANAME was wrong on every 
> level from the protocol perspective and I am glad it is gone.
> 
> Ondřej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users 
>>  wrote:
>> 
>> Does every application that uses gethostbyname have a benefit of 
>> HTTPS/SVCB? That is what I meant.
>> regards
>> Klaus
>> 
>>> -Ursprüngliche Nachricht-
>>> Von: Mark Andrews 
>>> Gesendet: Montag, 9. August 2021 15:55
>>> An: Klaus Darilion 
>>> Cc: Evan Hunt ; Gaurav Kansal ; bind-
>>> us...@lists.isc.org
>>> Betreff: Re: Does BIND supports ANAME RR
>>> 
>>> Every resolver on the planet already supports HTTPS and SVCB.  Every
>>> authoritative server on the planet already supports HTTPS and SVCB via
>>> unknown record format. iOS is already making HTTPS queries for every
>>> webpage. I believe other browsers also make HTTPS queries today. Go look
>>> at your DNS traffic.
>>> 
>>> The MR mentioned earlier allows named and the other tools to load and
>>> display the records in presentation format and to do the additional section
>>> processing.  None of that it required to be able to return these records.   
>>> It
>>> just makes it easier.
>>> 
>>> Just about all the other DNS vendors also have code that can read and
>>> display presentation format.
>>> 
>>> ANAME is dead.
>>> --
>>> Mark Andrews
>>> 
>>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users >> us...@lists.isc.org> wrote:
>>>> 
>>>> 
>>>>> 
>>>>> -Ursprüngliche Nachricht-
>>>>> Von: bind-users  Im Auftrag von Evan
>>>>> Hunt
>>>>> Gesendet: Samstag, 7. August 2021 20:21
>>>>> An: Gaurav Kansal 
>>>>> Cc: bind-users@lists.isc.org
>>>>> Betreff: Re: Does BIND supports ANAME RR
>>>>> 
>>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes,
>>>>>>> then from which version on wards ?
>>>>>> 
>>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>>>>>> it'll be coming back.
>>>>>> 
>>>>>> The new HTTPS and SVCB records look like a better approach anyway.
>>>>>> BIND will have support for those pretty soon.
>>>> 
>>>> But honestly SVCB will not solve the ANAME problem. I will take years until
>>> all resolvers/client would support SVCB whereas ANAME would be
>>> implemented in the authoritative name server and hence would work for
>>> every client/resolver as client/resolver never sees the ANAME but only the
>>> A/ record.
>>>> 
>>>> regards
>>>> Klaus
>>>> ___
>>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>>>> unsubscribe
>>> from this list
>>>> 
>>>> ISC funds the development of this software with paid support
>>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>>> information.
>>>> 
>>>> 
>>>> bind-users mailing list
>>>> bind-users@lists.isc.org
>>>> https://lists.isc.org/mailman/listinfo/bind-users
>> ___
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>> unsubscribe from this list
>> 
>> ISC funds the development of this software with paid support

Re: Does BIND supports ANAME RR

2021-08-09 Thread Divya
Dear Admin,

Has anybody used advance features of bind DoT and DoH, Kindly help me to 
configure DoT and DoH in DNS with bind BIND 9.17.16+CentOS  7.9.

With Regards 
Divya 

- Original Message -
From: "Ondřej Surý" 
To: "klaus darilion" 
Cc: bind-users@lists.isc.org
Sent: Monday, August 9, 2021 10:48:54 PM
Subject: Re: Does BIND supports ANAME RR

No, and there’s no strong usercase for that. The ANAME was wrong on every level 
from the protocol perspective and I am glad it is gone.

Ondřej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users 
>  wrote:
> 
> Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? 
> That is what I meant.
> regards
> Klaus
> 
>> -Ursprüngliche Nachricht-
>> Von: Mark Andrews 
>> Gesendet: Montag, 9. August 2021 15:55
>> An: Klaus Darilion 
>> Cc: Evan Hunt ; Gaurav Kansal ; bind-
>> us...@lists.isc.org
>> Betreff: Re: Does BIND supports ANAME RR
>> 
>> Every resolver on the planet already supports HTTPS and SVCB.  Every
>> authoritative server on the planet already supports HTTPS and SVCB via
>> unknown record format. iOS is already making HTTPS queries for every
>> webpage. I believe other browsers also make HTTPS queries today. Go look
>> at your DNS traffic.
>> 
>> The MR mentioned earlier allows named and the other tools to load and
>> display the records in presentation format and to do the additional section
>> processing.  None of that it required to be able to return these records.   
>> It
>> just makes it easier.
>> 
>> Just about all the other DNS vendors also have code that can read and
>> display presentation format.
>> 
>> ANAME is dead.
>> --
>> Mark Andrews
>> 
>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users > us...@lists.isc.org> wrote:
>>> 
>>> 
>>>> 
>>>> -Ursprüngliche Nachricht-
>>>> Von: bind-users  Im Auftrag von Evan
>>>> Hunt
>>>> Gesendet: Samstag, 7. August 2021 20:21
>>>> An: Gaurav Kansal 
>>>> Cc: bind-users@lists.isc.org
>>>> Betreff: Re: Does BIND supports ANAME RR
>>>> 
>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes,
>>>>>> then from which version on wards ?
>>>>> 
>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>>>>> it'll be coming back.
>>>>> 
>>>>> The new HTTPS and SVCB records look like a better approach anyway.
>>>>> BIND will have support for those pretty soon.
>>> 
>>> But honestly SVCB will not solve the ANAME problem. I will take years until
>> all resolvers/client would support SVCB whereas ANAME would be
>> implemented in the authoritative name server and hence would work for
>> every client/resolver as client/resolver never sees the ANAME but only the
>> A/ record.
>>> 
>>> regards
>>> Klaus
>>> ___
>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>>> unsubscribe
>> from this list
>>> 
>>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>> 
>>> 
>>> bind-users mailing list
>>> bind-users@lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-09 Thread Mark Andrews
If you mean stop publishing CNAME as meaning “the server for this service is …” 
then yes. HTTPS can be published along side MX, A, and .  Just start doing 
it. 

Mark
-- 
Mark Andrews

> On 10 Aug 2021, at 07:13, Klaus Darilion  wrote:
> 
> Do you think that we can get rid of CNAME too? 
> 
> regards
> Klaus
> 
>> -Ursprüngliche Nachricht-
>> Von: Ondřej Surý 
>> Gesendet: Montag, 9. August 2021 19:19
>> An: Klaus Darilion 
>> Cc: Mark Andrews ; bind-users@lists.isc.org
>> Betreff: Re: Does BIND supports ANAME RR
>> 
>> No, and there’s no strong usercase for that. The ANAME was wrong on every
>> level from the protocol perspective and I am glad it is gone.
>> 
>> Ondřej
>> --
>> Ondřej Surý — ISC (He/Him)
>> 
>> My working hours and your working hours may be different. Please do not
>> feel obligated to reply outside your normal working hours.
>> 
>>> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users > us...@lists.isc.org> wrote:
>>> 
>>> Does every application that uses gethostbyname have a benefit of
>> HTTPS/SVCB? That is what I meant.
>>> regards
>>> Klaus
>>> 
>>>> -Ursprüngliche Nachricht-
>>>> Von: Mark Andrews 
>>>> Gesendet: Montag, 9. August 2021 15:55
>>>> An: Klaus Darilion 
>>>> Cc: Evan Hunt ; Gaurav Kansal ;
>> bind-
>>>> us...@lists.isc.org
>>>> Betreff: Re: Does BIND supports ANAME RR
>>>> 
>>>> Every resolver on the planet already supports HTTPS and SVCB.  Every
>>>> authoritative server on the planet already supports HTTPS and SVCB via
>>>> unknown record format. iOS is already making HTTPS queries for every
>>>> webpage. I believe other browsers also make HTTPS queries today. Go
>> look
>>>> at your DNS traffic.
>>>> 
>>>> The MR mentioned earlier allows named and the other tools to load and
>>>> display the records in presentation format and to do the additional
>> section
>>>> processing.  None of that it required to be able to return these records.  
>>>>  It
>>>> just makes it easier.
>>>> 
>>>> Just about all the other DNS vendors also have code that can read and
>>>> display presentation format.
>>>> 
>>>> ANAME is dead.
>>>> --
>>>> Mark Andrews
>>>> 
>>>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users >>> us...@lists.isc.org> wrote:
>>>>> 
>>>>> 
>>>>>> 
>>>>>> -Ursprüngliche Nachricht-
>>>>>> Von: bind-users  Im Auftrag von
>> Evan
>>>>>> Hunt
>>>>>> Gesendet: Samstag, 7. August 2021 20:21
>>>>>> An: Gaurav Kansal 
>>>>>> Cc: bind-users@lists.isc.org
>>>>>> Betreff: Re: Does BIND supports ANAME RR
>>>>>> 
>>>>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>>>>>>>> I need the help in figuring out whether BIND supports ANAME ? If
>>> yes,
>>>>>>>>> then from which version on wards ?
>>>>>>>> 
>>>>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>>>>>>>> it'll be coming back.
>>>>>>>> 
>>>>>>>> The new HTTPS and SVCB records look like a better approach anyway.
>>>>>>>> BIND will have support for those pretty soon.
>>>>>> 
>>>>>> But honestly SVCB will not solve the ANAME problem. I will take years
>>> until
>>>>> all resolvers/client would support SVCB whereas ANAME would be
>>>>> implemented in the authoritative name server and hence would work for
>>>>> every client/resolver as client/resolver never sees the ANAME but only the
>>>>> A/ record.
>>>>>> 
>>>>>> regards
>>>>>> Klaus
>>>>>> ___
>>>>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
>>> unsubscribe
>>>>> from this list
>>>>>> 
>>>>>> ISC funds the development of this software with paid support
>>>>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>>>>> information.
>>>>>> 
>>>>>> 
>>>>>> bind-users mailing list
>>>>>> bind-users@lists.isc.org
>>>>>> https://lists.isc.org/mailman/listinfo/bind-users
>>> ___
>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>>> unsubscribe
>> from this list
>>> 
>>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>> 
>>> 
>>> bind-users mailing list
>>> bind-users@lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-09 Thread Evan Hunt
On Mon, Aug 09, 2021 at 01:55:50PM +0200, Klaus Darilion wrote:
> But honestly SVCB will not solve the ANAME problem. I will take years
> until all resolvers/client would support SVCB whereas ANAME would be
> implemented in the authoritative name server and hence would work for
> every client/resolver as client/resolver never sees the ANAME but only
> the A/ record.

Most browsers update themselves these days, so getting HTTPS/SVCB support
rolled out in the client seems to be a lesser problem. Doing ANAME properly
would require resolver upgrades.

99% of the reason for ANAME was that browser vendors were unwilling to use
SRV.  If they *are* willing to use HTTPS/SVCB - which looks promising at
the moment - then the remaining use cases for ANAME aren't worth the
complexity.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-09 Thread Ondřej Surý
No, and there’s no strong usercase for that. The ANAME was wrong on every level 
from the protocol perspective and I am glad it is gone.

Ondřej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 9. 8. 2021, at 17:23, Klaus Darilion via bind-users 
>  wrote:
> 
> Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? 
> That is what I meant.
> regards
> Klaus
> 
>> -Ursprüngliche Nachricht-
>> Von: Mark Andrews 
>> Gesendet: Montag, 9. August 2021 15:55
>> An: Klaus Darilion 
>> Cc: Evan Hunt ; Gaurav Kansal ; bind-
>> us...@lists.isc.org
>> Betreff: Re: Does BIND supports ANAME RR
>> 
>> Every resolver on the planet already supports HTTPS and SVCB.  Every
>> authoritative server on the planet already supports HTTPS and SVCB via
>> unknown record format. iOS is already making HTTPS queries for every
>> webpage. I believe other browsers also make HTTPS queries today. Go look
>> at your DNS traffic.
>> 
>> The MR mentioned earlier allows named and the other tools to load and
>> display the records in presentation format and to do the additional section
>> processing.  None of that it required to be able to return these records.   
>> It
>> just makes it easier.
>> 
>> Just about all the other DNS vendors also have code that can read and
>> display presentation format.
>> 
>> ANAME is dead.
>> --
>> Mark Andrews
>> 
>>> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users > us...@lists.isc.org> wrote:
>>> 
>>> 
>>>> 
>>>> -Ursprüngliche Nachricht-
>>>> Von: bind-users  Im Auftrag von Evan
>>>> Hunt
>>>> Gesendet: Samstag, 7. August 2021 20:21
>>>> An: Gaurav Kansal 
>>>> Cc: bind-users@lists.isc.org
>>>> Betreff: Re: Does BIND supports ANAME RR
>>>> 
>>>>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>>>>> I need the help in figuring out whether BIND supports ANAME ? If yes,
>>>>>> then from which version on wards ?
>>>>> 
>>>>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>>>>> it'll be coming back.
>>>>> 
>>>>> The new HTTPS and SVCB records look like a better approach anyway.
>>>>> BIND will have support for those pretty soon.
>>> 
>>> But honestly SVCB will not solve the ANAME problem. I will take years until
>> all resolvers/client would support SVCB whereas ANAME would be
>> implemented in the authoritative name server and hence would work for
>> every client/resolver as client/resolver never sees the ANAME but only the
>> A/ record.
>>> 
>>> regards
>>> Klaus
>>> ___
>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>>> unsubscribe
>> from this list
>>> 
>>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>> 
>>> 
>>> bind-users mailing list
>>> bind-users@lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-09 Thread Mark Andrews
Every resolver on the planet already supports HTTPS and SVCB.  Every 
authoritative server on the planet already supports HTTPS and SVCB via unknown 
record format. iOS is already making HTTPS queries for every webpage. I believe 
other browsers also make HTTPS queries today. Go look at your DNS traffic. 

The MR mentioned earlier allows named and the other tools to load and display 
the records in presentation format and to do the additional section processing. 
 None of that it required to be able to return these records.   It just makes 
it easier.

Just about all the other DNS vendors also have code that can read and display 
presentation format.

ANAME is dead. 
-- 
Mark Andrews

> On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users 
>  wrote:
> 
> 
>> 
>> -Ursprüngliche Nachricht-
>> Von: bind-users  Im Auftrag von Evan
>> Hunt
>> Gesendet: Samstag, 7. August 2021 20:21
>> An: Gaurav Kansal 
>> Cc: bind-users@lists.isc.org
>> Betreff: Re: Does BIND supports ANAME RR
>> 
>>> On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
>>> I need the help in figuring out whether BIND supports ANAME ? If yes,
>>> then from which version on wards ?
>> 
>> No, it doesn't. The effort to standardize ANAME stalled, and I doubt
>> it'll be coming back.
>> 
>> The new HTTPS and SVCB records look like a better approach anyway.
>> BIND will have support for those pretty soon.
> 
> But honestly SVCB will not solve the ANAME problem. I will take years until 
> all resolvers/client would support SVCB whereas ANAME would be implemented in 
> the authoritative name server and hence would work for every client/resolver 
> as client/resolver never sees the ANAME but only the A/ record.
> 
> regards
> Klaus
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-09 Thread Matus UHLAR - fantomas

On 09.08.21 13:55, Klaus Darilion via bind-users wrote:
>But honestly SVCB will not solve the ANAME problem.  I will take years
> until all resolvers/client would support SVCB whereas ANAME would be
> implemented in the authoritative name server

resolving on authoritative server could in fact help, and wouldn't need
protocol
change at all, but the problem above is crucial (what would you do in case
of failure? refuse whole zone?)


On 09.08.21 14:37, Klaus Darilion via bind-users wrote:

Resolving is done when there is an incoming query, not on zone loading.  So
if the auth's resolver (either a full blown resolver or a stub resolver
which forwards to another resolver) fails to resolve I would just forward
this error to the client's resolver.


This would not change the fact that you are asking authoritative server to
resolve record which is by definition not the job of authoritative server.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I intend to live forever - so far so good.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-09 Thread Matus UHLAR - fantomas

On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
> I need the help in figuring out whether BIND supports ANAME ? If yes,
> then from which version on wards ?



No, it doesn't. The effort to standardize ANAME stalled, and I doubt
it'll be coming back.

The new HTTPS and SVCB records look like a better approach anyway.
BIND will have support for those pretty soon.


On 09.08.21 13:55, Klaus Darilion via bind-users wrote:

But honestly SVCB will not solve the ANAME problem.  I will take years
until all resolvers/client would support SVCB whereas ANAME would be
implemented in the authoritative name server


recursive - authoritative server is not there to resolve remote hostnames, if
it doesn't provide recursion.
(well, it COULD try to resolve just as it resolves NS IPS for sending
notifies, but that's different). 


resolving on authoritative server could in fact help, and wouldn't need protocol
change at all, but the problem above is crucial (what would you do in case
of failure? refuse whole zone?)


and hence would work for
every client/resolver as client/resolver never sees the ANAME but only the
A/ record.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-08 Thread Gaurav Kansal
Ok. Thanks a lot. 

Sent from my iPhone

> On 07-Aug-2021, at 11:51 PM, Ondřej Surý  wrote:
> 
> Hi,
> 
> no, ANAME is dead standard and it has been replaced by HTTPS SVCB: 
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-svcb-https/
> 
> The support for the draft is in review and it will be merged some time this 
> year.
> 
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>>> On 7. 8. 2021, at 19:33, Gaurav Kansal  wrote:
>>> 
>> 
>> Hi guys,
>> 
>> I need the help in figuring out whether BIND supports ANAME ? If yes, then 
>> from which version on wards ?
>> 
>> Use case of ANAME RR is explained here - 
>> https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/
>> 
>> Thanks.
>> Gaurav Kansal
>> 
>> 
>> 
>> Disclaimer:
>> 
>> This e-mail and its attachments may contain official Indian Government 
>> information. If you are not the intended recipient, please notify the sender 
>> immediately and delete this e-mail. Any dissemination or use of this 
>> information by a person other than the intended recipient is unauthorized. 
>> The responsibility lies with the recipient to check this email and any 
>> attachment for the presence of viruses.   
>> 
>> ___
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>> unsubscribe from this list
>> 
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-07 Thread Ondřej Surý
Hi,

no, ANAME is dead standard and it has been replaced by HTTPS SVCB: 
https://datatracker.ietf.org/doc/draft-ietf-dnsop-svcb-https/

The support for the draft is in review and it will be merged some time this 
year.

--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 7. 8. 2021, at 19:33, Gaurav Kansal  wrote:
> 
> 
> Hi guys,
> 
> I need the help in figuring out whether BIND supports ANAME ? If yes, then 
> from which version on wards ?
> 
> Use case of ANAME RR is explained here - 
> https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/
> 
> Thanks.
> Gaurav Kansal
> 
> 
> 
> Disclaimer:
> 
> This e-mail and its attachments may contain official Indian Government 
> information. If you are not the intended recipient, please notify the sender 
> immediately and delete this e-mail. Any dissemination or use of this 
> information by a person other than the intended recipient is unauthorized. 
> The responsibility lies with the recipient to check this email and any 
> attachment for the presence of viruses.   
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Does BIND supports ANAME RR

2021-08-07 Thread Evan Hunt
On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaurav Kansal wrote:
> I need the help in figuring out whether BIND supports ANAME ? If yes,
> then from which version on wards ? 

No, it doesn't. The effort to standardize ANAME stalled, and I doubt
it'll be coming back.

The new HTTPS and SVCB records look like a better approach anyway.
BIND will have support for those pretty soon.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users