Bind9 + TCP_FASTOPEN => no rndc

hiren panchasara hiren at strugglingcoder.info
Wed Sep 27 19:20:03 UTC 2017


On 09/27/17 at 01:35P, Christopher Sean Hilton wrote:
> I'm trying to configure bind 9.11 as a nameserver on FreeBSD
> 11-STABLE. When the bind9 port compile it enables TCP_FASTOPEN but the
> changes haven't yet been baked into the GENERIC Kernel. I can't find a
> way to disable the use of TCP_FASTOPEN in bind at startup. Is the only
> way to fix this problem to build a new kernel with TCP_FASTOPEN
> enabled?

afaik, yes. options TCP_RFC7413 in kernconf.
It defaults to off even with the option. net.inet.tcp.fastopen.enabled=1
will enable actual use.

Cheers,
Hiren
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 603 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20170927/8e54e8bf/attachment.sig>


More information about the freebsd-stable mailing list