BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND
architecture. Some of the important features of BIND 9 are:
DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
Experimental IPv6 Resolver Library
DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
Improved standards conformance
Views: One server process can provide multiple "views" of the DNS namespace,
e.g. an "inside" view to certain clients, and an "outside" view to others.
Multiprocessor Support
See the CHANGES file for more information on new features.
===> The following configuration options are available for bind920-9.20.30:
DNSTAP=on: Provides fast passive logging of DNS messages
DOCS=on: Build and/or install documentation
FIXED_RRSET=off: Enable fixed rrset ordering
GEOIP=off: GeoIP IP location support
IDN=on: International Domain Names support
LARGE_FILE=off: 64-bit file support
LMDB=on: Use LMDB for zone management
OVERRIDECACHE=off: Use the override-cache patch
QUERYTRACE=off: Enable the very verbose query tracelogging
START_LATE=off: Start BIND late in the boot process (see help)
TCP_FASTOPEN=on: RFC 7413 support
====> Statistics channels
STATS_JSON=on: Enable JSON statistics channel
STATS_XML=on: Enable XML statistics channel
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=on: Using MIT in base
GSSAPI_HEIMDAL=off: Using security/heimdal (nsupdate is broken)
GSSAPI_MIT=off: Using security/krb5
GSSAPI_NONE=off: Disable
===> Use 'make config' to modify these settings
databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.
Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc
A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.
Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.
Approved by: mat (portmgr)
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D60741
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
(Only the first 15 lines of the commit message are shown above )
dns/bind9*: enable base GSSAPI on 15+
FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
problems BIND9 was having with Heimdal.
PR: 291780
dns/bind9*: nsupdate works on 15+ with MIT kerberos from base
FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
problems BIND9 was having with Heimdal.
PR: 291776
*/*: Bump PORTREVISION for devel/protobuf-c update
libprotobuf-c.so once again has version info. Force a rebuild of
its consumers.
PR: 282060
MFH: 2025Q3
Sponsored by: <If the change was sponsored by an organization.>
dns/bind9*: fix WITH_DEBUG build
The READLINE_CFLAGS="-L${LOCALBASE}/lib" env came with bind 9.18 with no
explanation. With 9.20 it actually breaks the developer build:
cc: error: argument unused during compilation: '-L/usr/local/lib'
[-Werror,-Wunused-command-line-argument]
The --enable-symtable configure option is no longer supported by bind and
just produces a warning.
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D46540