Changes/BIND9.16

BIND 9.16

Summary

BIND 9 would be updated to upcoming stable version BIND 9.16.

Owner

• Name: Petr Menšík
• Email: pemensik@redhat.com

Current status

• Targeted release: Fedora 34
• Last updated: 2021-01-14
• FESCo issue: <will be assigned by the Wrangler>
• Tracker bug: <will be assigned by the Wrangler>
• Release notes tracker: <will be assigned by the Wrangler>

Detailed Description

ISC BIND 9 stayed longer time on 9.11 Extended Support Version, because dhcp and freeipa depended on it. DHCP package no longer requires bind-export-libs, which new BIND 9.16 does not support. FreeIPA part bind-dyndb-ldap were also modified to support new version.

BIND 9.16 includes more easy way to provide DNSSEC (KASP).

Benefit to Fedora

Stable version under most the active development is packaged again. Introduces DNSSEC Key and Signing Policy without external tools like opendnssec. Also client tools from bind-utils now support yaml export format (dig, mdig, delv).

Scope

• Proposal owners:

• Other developers: N/A (not a System Wide Change)

• Release engineering: #Releng issue number (a check of an impact with Release Engineering is needed)

• Policies and guidelines: N/A (not a System Wide Change)

• Trademark approval: N/A (not needed for this Change)

• Alignment with Objectives:

Upgrade/compatibility impact

N/A (not a System Wide Change)

lwresd server and lwres nss client plugin is no longer provided. bind-sdb is also no longer provided as separate package. Instead several bind-dlz-* plugins are offered as runtime loadable plugins.

How To Test

System administrators would receive the most recent stable version of BIND, with improved performance and features.

Dependencies

bind-dyndb-ldap -> freeipa

Contingency Plan

• Contingency mechanism: (What to do? Who will do it?) N/A (not a System Wide Change)
• Contingency deadline: N/A (not a System Wide Change)
• Blocks release? N/A (not a System Wide Change), Yes/No
• Blocks product? product

Documentation

N/A (not a System Wide Change)