BIND 9.10.0 includes a number of changes from BIND 9.9 and earlier
releases. New features include:
- - DNS Response-rate limiting (DNS RRL) blunts the impact of
- reflection and amplification attacks.
- - New zone file format "map" is an image of a zone database
- that can be loaded directly into memory, allowing much faster
- zone loading.
+ - DNS Response-rate limiting (DNS RRL), which blunts the
+ impact of reflection and amplification attacks, is
+ always compiled in and no longer requires a compile-time
+ option to enable it.
+ - A new zone file format, "map", allows zone data to be
+ stored in a format that can be mapped directly into memory,
+ allowing much faster zone loading.
- Improved EDNS(0) processing for better resolver performance
and reliability over slow or lossy connections.
- Substantial improvement in response-policy zone (RPZ)
automatically refreshed from the authoritative server
before they expire, reducing or eliminating the time
window in which no answer is available in the cache.
- - New RPZ client-IP triggers and drop policies.
+ - New "rpz-client-ip" triggers and drop policies allowing
+ response policies based on the IP address of the client.
- ACLs can now be specified based on geographic location
using the MaxMind GeoIP databases.
- Zone data can now be shared between views, allowing