DNSSEC Look-aside Validation Registry has been deprecated. Decommissioning planned...

Remove config option to use DLV.
- https://www.isc.org/blogs/dlv/
- https://www.isc.org/downloads/bind/dlv/

diff --git a/bind-named.conf b/bind-named.conf
index ed68a278d37e01d6056928bee755affdd4778fa4..83e3783bd5a9bf90264c49058e54caa458118a47 100644 (file)
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -12,7 +12,6 @@ options {
 
        #dnssec-enable yes;      # enable DNSSEC, default yes
        dnssec-validation auto;  # enable DNSSEC validation with the key from bind.keys
-       dnssec-lookaside auto;   # enable DNSSEC DLV registry check with the key from bind.keys
 };
 
 zone "localhost" IN {