Discussion:
[Opendnssec-user] Recommendations for production use
Arun N S
2016-05-15 09:38:39 UTC
Permalink
Hi,

Any recommendation for the opendnssec / softhsm installation candidates
for production? Should we stick with the OS shipped
version softhsm-2.0.0rc1-3.el7.x86_64, opendnssec-1.4.7-3.el7.x86_64
(incase of Redhat 7) or compile and install the latest stable from
opendnssec.org?

thanks,

--
arun
Emil Natan
2016-05-15 10:13:43 UTC
Permalink
As a rule of a thumb (for me at least), if DNS/DNSSEC is your core
business go for the source and building the software by yourself. You would
like finer control over build and features. Otherwise stick with whatever
provided by the OS.

ena
Post by Arun N S
Hi,
Any recommendation for the opendnssec / softhsm installation candidates
for production? Should we stick with the OS shipped
version softhsm-2.0.0rc1-3.el7.x86_64, opendnssec-1.4.7-3.el7.x86_64
(incase of Redhat 7) or compile and install the latest stable from
opendnssec.org?
thanks,
--
arun
_______________________________________________
Opendnssec-user mailing list
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
Arun Natarajan
2016-05-17 09:27:27 UTC
Permalink
Thanks for the suggestion.
Post by Emil Natan
As a rule of a thumb (for me at least), if DNS/DNSSEC is your core
business go for the source and building the software by yourself. You would
like finer control over build and features. Otherwise stick with whatever
provided by the OS.
ena
Post by Arun N S
Hi,
Any recommendation for the opendnssec / softhsm installation candidates
for production? Should we stick with the OS shipped
version softhsm-2.0.0rc1-3.el7.x86_64, opendnssec-1.4.7-3.el7.x86_64
(incase of Redhat 7) or compile and install the latest stable from
opendnssec.org?
thanks,
--
arun
_______________________________________________
Opendnssec-user mailing list
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
Benno Overeinder
2016-05-17 11:54:05 UTC
Permalink
Hi,

Maybe not yet available in all distributions, but you might want to go with OpenDNSSEC 1.4.10 that includes many important bug fixes.

— Benno
Post by Arun Natarajan
Thanks for the suggestion.
As a rule of a thumb (for me at least), if DNS/DNSSEC is your core business go for the source and building the software by yourself. You would like finer control over build and features. Otherwise stick with whatever provided by the OS.
ena
Hi,
Any recommendation for the opendnssec / softhsm installation candidates for production? Should we stick with the OS shipped version softhsm-2.0.0rc1-3.el7.x86_64, opendnssec-1.4.7-3.el7.x86_64 (incase of Redhat 7) or compile and install the latest stable from opendnssec.org?
thanks,
--
arun
_______________________________________________
Opendnssec-user mailing list
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
_______________________________________________
Opendnssec-user mailing list
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
--
Benno J. Overeinder
NLnet Labs
http://www.nlnetlabs.nl/
Arun Natarajan
2016-05-17 12:30:07 UTC
Permalink
Thanks, that is one good reason use the compiled version. The binary
updates from the OS vendor takes long time always.

--
arun
Post by Benno Overeinder
Hi,
Maybe not yet available in all distributions, but you might want to go
with OpenDNSSEC 1.4.10 that includes many important bug fixes.
— Benno
Post by Arun Natarajan
Thanks for the suggestion.
As a rule of a thumb (for me at least), if DNS/DNSSEC is your core
business go for the source and building the software by yourself. You would
like finer control over build and features. Otherwise stick with whatever
provided by the OS.
Post by Arun Natarajan
ena
Hi,
Any recommendation for the opendnssec / softhsm installation candidates
for production? Should we stick with the OS shipped version
softhsm-2.0.0rc1-3.el7.x86_64, opendnssec-1.4.7-3.el7.x86_64 (incase of
Redhat 7) or compile and install the latest stable from opendnssec.org?
Post by Arun Natarajan
thanks,
--
arun
_______________________________________________
Opendnssec-user mailing list
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
_______________________________________________
Opendnssec-user mailing list
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
--
Benno J. Overeinder
NLnet Labs
http://www.nlnetlabs.nl/
Continue reading on narkive:
Loading...