-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
For those searching bind 9.9.0 for CentOS, here it is.
At the start of this week, the ISC team released , with some interesting new features (taken from the release notes):
The new “inline-signing” option, in combination with the “auto-dnssec” option that was introduced in BIND 9.7, allows named to sign zones completely transparently. Previously automatic zone signing only worked on master zones that were configured to be dynamic; now, it works on any master or slave zone. In a master zone with inline signing, the zone is loaded from disk as usual, and a second copy of the zone is created to hold the signed version. The original zone file is not touched; all comments remain intact. When you edit the zone file and reload, named detects the incremental changes that have been made to the raw version of the zone, and applies those changes to the signed version, adding signatures as needed. A slave zone with inline signing works similarly, except that instead of loading the zone from disk and then signing it, the slave transfers the zone from a master server and then signs it. This enables “bump in the wire” signing: a dedicated signing server acting as an intermediary between a hidden master server (which provides the raw zone data) and a set of publicly accessible slave servers (which only serve the signed data). [RT #26224/23657]
NXDOMAIN redirection is now possible. This enables a resolver to respond to a client with locally-configured information when a query would otherwise have gotten an answer of “no such domain”. This allows a recursive nameserver to provide alternate suggestions for misspelled domain names. Note that names that are in DNSSEC-signed domains are exempted from this when validation is in use. [RT #23146]
Improves the startup time for an authoritative server with a large number of zones by making the zone task table of variable size rather than fixed size. This means that authoritative servers with many zones will be serving that zone data much sooner. [RT #24406]
Improves initial start-up and server reload time by increasing the default size of the hash table the configuration parser uses to keep track of loaded zones and allowing it to grow dynamically to better handle systems with large numbers of zones. [RT #26523]
Improves scalability by using multiple threads to listen for and process queries. Previously named only listened for queries on one thread regardless of the number of overall threads used. [RT #22992]
Improves startup and reconfiguration time by allowing zones to load in multiple threads. [RT #25333]
The files are available in the file repository.
Import GPG Key
rpm --import http://bkraft.fr/files/RPM%20stuff/RPM-GPG-KEY-benjaminkraft
http://bkraft.fr/files/RPM%20stuff/bind-9.9.0-0.el6.x86_64/ |-- [ 512] noarch | |-- [6.9M] bind-9.9.0-0.el6.src.rpm | `-- [ 70K] bind-license-9.9.0-0.el6.noarch.rpm `-- [ 512] x86_64 |-- [3.9M] bind-9.9.0-0.el6.x86_64.rpm |-- [ 69K] bind-chroot-9.9.0-0.el6.x86_64.rpm |-- [5.0M] bind-debuginfo-9.9.0-0.el6.x86_64.rpm |-- [368K] bind-devel-9.9.0-0.el6.x86_64.rpm |-- [864K] bind-libs-9.9.0-0.el6.x86_64.rpm |-- [622K] bind-libs-lite-9.9.0-0.el6.x86_64.rpm |-- [287K] bind-lite-devel-9.9.0-0.el6.x86_64.rpm |-- [ 82K] bind-pkcs11-9.9.0-0.el6.x86_64.rpm |-- [303K] bind-sdb-9.9.0-0.el6.x86_64.rpm `-- [180K] bind-utils-9.9.0-0.el6.x86_64.rpm
for i in noarch/bind-license-9.9.0-0.el6.noarch.rpm x86_64/bind-9.9.0-0.el6.x86_64.rpm x86_64/bind-chroot-9.9.0-0.el6.x86_64.rpm x86_64/bind-debuginfo-9.9.0-0.el6.x86_64.rpm x86_64/bind-devel-9.9.0-0.el6.x86_64.rpm x86_64/bind-libs-9.9.0-0.el6.x86_64.rpm x86_64/bind-libs-lite-9.9.0-0.el6.x86_64.rpm x86_64/bind-lite-devel-9.9.0-0.el6.x86_64.rpm x86_64/bind-pkcs11-9.9.0-0.el6.x86_64.rpm x86_64/bind-sdb-9.9.0-0.el6.x86_64.rpm x86_64/bind-utils-9.9.0-0.el6.x86_64.rpm; do wget http://bkraft.fr/files/RPM%20stuff/bind-9.9.0-0.el6.x86_64/$i done
-----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJW5eRMAAoJEBeKS2x6xuR7gcIQAIpXICC5hSAnwZd09bi0UvqU WHU06kFhiLDKEqk/iJBu35h4BjImD/yucM8n3nijwY+vK9r35p1zwNciu1bvZVGD n/91IQSR3Bp71ypU1L8YKJ9Ujz4mLHVGEt90AWwiXgyRhfRLd5qgLjWVZk/Fp6Gd dx6amH5o8IcVr7kYs2mAQEBhuHeAMoPVqAmb+2yqIbfzNmvKzR7XWMC5AMUwc050 vEfxKHkJ4QgLhxUV/QqwdwOEVuPJ3pIpx3OCrTcF5921xPXSEY7Byr271bip/Hjj CbrvdSIrzGnekfK1OE1yWzyBAecl0keqo6OKuUpakYma8WbnQzBOHwKnmdUmtJox BxtltS1lANMDIHD8fw3wq44nKKAuElfTfKrolPFKjmrNdeMnHZzKwyt0gKfCVSzP P1ZkoESO5or1z9bi9FxU1o5An1mxaZBY6cFBFnwqk1063d/vkhiR2HysYl6po0hQ q7xAA+MeEN8N5N+ejyk08jRFVesL6N/5UDdLxTyA40zYBXlJ2zoCmlQX9RHL6vce Kj9l5EU6uZfI7+F+JGqIqL4r/4mrzAtGNDYCh5I31QVsEJD9yARsSQzesUV7kZUO 16BdxGH9YvmJi6RE+psl6qZ4xxbfHx1Y3yVEEAGypxPzotQnE6zxwBV97akacd1I rL4MUJ3nJtruYyDM6OTB =T4AI -----END PGP SIGNATURE-----