[AusNOG] EDNS compliance and BIND 9.11.0

[Mark Andrews]

BIND 9.11.0 was released this week.

BIND 9.11.0 and BIND 9.10.4 implement EDNS COOKIES.  They are on
by default in BIND 9.11.0 and BIND 9.10.4 Windows. For the non
Windows builds of BIND 9.10.4 they need to be enabled at configure
time.

If your nameservers are not EDNS compliant, especially for unknown
EDNS options, you could be seeing issues ranging from additional
traffic, slow DNS lookups to full blown lookup failures.  If you
having fixed your servers already you need to fix them now.

You can test your servers at https://ednscomp.isc.org/ednscomp/
to see if they are EDNS compliant.

You can see EDNS compliance trends and list of failing servers
at https://ednscomp.isc.org.

Mark

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE:	+61 2 9871 4742		         INTERNET: marka at isc.org