aboutsummaryrefslogtreecommitdiff
path: root/dns/bind911/pkg-help
diff options
context:
space:
mode:
Diffstat (limited to 'dns/bind911/pkg-help')
-rw-r--r--dns/bind911/pkg-help28
1 files changed, 0 insertions, 28 deletions
diff --git a/dns/bind911/pkg-help b/dns/bind911/pkg-help
deleted file mode 100644
index 5539e5745c0e..000000000000
--- a/dns/bind911/pkg-help
+++ /dev/null
@@ -1,28 +0,0 @@
- NATIVE_PKCS11
-When using the NATIVE_PKCS11 option, BIND will use the PKCS#11
-engine specified by the named_pkcss11_engine variable in
-/etc/rc.conf for *all* crypto operations.
-
-This is primarily intended to be used in an authoritative
-case.
-
-If BIND is also operating as a validating resolver,
-NATIVE_PKCS11 should not be used, because the HSM will be
-used for all crypto, including DNSSEC validations, and the
-HSM is likely to be slower than the CPU for this purpose.
-Additionally, the HSM might not support all of the PKCS#11
-API functions needed for signature verification.
-
-
- START_LATE
-Most of the time, BIND needs to start early in the boot
-process. Enable this if BIND starts too early for you and
-you need it to start later.
-
-
- TUNING_LARGE
- https://kb.isc.org/article/AA-01314/0
-Tunes certain compiled-in constants and default settings to
-values better suited to large servers with 12/16GB+ of memory.
-This can improve performance on such servers, but will consume
-more memory and may degrade performance on smaller systems.