Re: [MaraDNS list] How to get MaraDNS and Deadwood to talk to each other?
Sam Trenholme <[email protected]> Mon, 5 Mar 2012 03:46:13 -0500
| Newsgroups | gmane.network.dns.maradns.general |
|---|---|
| Message-ID | <CAJxgfkTXoB3_LnPv_GsjzgpUxvs6HXsVe5N2d0MRu8DeqJomZg@mail.gmail.com> |
> Just so I understand, you're saying that Deadwood should bind to a ULA > address, but just the SQA regression is broken? The only compile-time flags > that I can observe being passed for IPv6 is -DIPV6. That is correct. Deadwood correctly binds to a ULA address, but the SQA regression for making sure Deadwood works with IPv6 is broken (it's roughly a two-line fix, but I'm not doing it right now because I really need to stop having MaraDNS distract from my day job). IPv6 works with Deadwood in theory--well, except for ugly corner cases like glueless NS referrals which have AAAA but no A records--but this has not been tested. > So, that problem is solved. Celebrate! I'm glad you have resolved your issue. > it seems like the two daemons should try to link > to each other in some format. My original plan was to merge Deadwood's code with MaraDNS' authoritative code. Unfortunately, Deadwood took a couple of years longer to finish than I thought it originally would, and I got engaged and married before Deadwood was fully recursive. I don't know if your engaged or married, Joshua, so please don't take this the wrong way: I discovered that marriage changed my fundamental life priorities. I realized I no longer had time to perform professional quality software development "for fun and for free" any more. So, I made a promise to declare Deadwood and MaraDNS finished once full recursion was implemented, and canceled plans to merge Deadwood with MaraDNS. I finished Deadwood in September of 2010 and have been only maintaining Deadwood and MaraDNS since then. [1] I think these things are worthwhile to do. I think one advantage MaraDNS and Deadwood have is security, yes, and Deadwood has the best security a recursive DNS server can have short of implementing DNSSEC [2] [3]. I think another advantage is that Deadwood is tiny and MaraDNS really small; this works really great in MIPS routers and other embedded environments. Since I am no longer in a position to implement significant new features for MaraDNS and Deadwood, I would love to hand things over to a maintainer. I am not going to hand over the reins lightly; anyone who becomes MaraDNS' maintainer would have to demonstrate a long-term interest in MaraDNS' code base that lasts at least a year. Also, I ask that they increase the major version number of MaraDNS and Deadwood (MaraDNS 3 and Deadwood 4, or more simply MaraDNS/Deadwood 4) and I will continue to fix security problems found in MaraDNS 1, as well as performing basic bug fixes for MaraDNS 2, Deadwood 2, and Deadwood 3. - Sam [1] To be pedantic, I used to ask for donations and passed a tip hat around so that I could get paid to work on MaraDNS. My hopefully final funding drive was last November; I got enough money to touch up a couple of minor things that didn't get in to Deadwood 3.0, and to fully babysit MaraDNS until mid-March. [4] [2] This does not mean security problems are never discovered in Deadwood or MaraDNS. It, however, means that I take responsibility for said security problems and issue updates. [3] http://maradns.org/deadwood/doc/Recursive-algorithm.html [4] I will no longer be regularly looking at the mailing list as of March 15; people with MaraDNS support concerns will have to wait until around the end of the month for me to respond to queries posted here after that date.