Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
11
votes
1 answer

Can one server do DNS for a domain and a subdomain?

I have a situation where I need to replace the nameservers for both a.b.c and b.c. I'd rather not have to dedicate two machines to this. I've been reading about multi-homing but the examples all seem to be for *.b.c rather than a domain and a…
ethrbunny
  • 2,369
  • 4
  • 41
  • 75
11
votes
2 answers

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and have verified consistency of Active Directory…
Adam
  • 111
  • 3
11
votes
2 answers

Publishing long domain key records in bind9

I am setting up a mail system based on exim4. This system implements DKIM signing and checking (among other things). Signing seems to work without problems but checking doesn't work and exim4 complains about the syntax of my TXT records which…
alxgomz
  • 1,630
  • 1
  • 11
  • 14
11
votes
2 answers

Can I completely remove the Windows DNS in favour of BIND9 in an AD network?

I would like to remove the DNS feature of Windows Domain Controllers and point the DNS servers to our BIND9 servers. I know it's possible to setup coexistence but this requires a number of extra Windows DNS Servers equals to the number of Domain…
Vinícius Ferrão
  • 5,520
  • 11
  • 55
  • 95
11
votes
2 answers

packet queue performance discrepencies with BIND nameserver

Background: I've inherited a high volume caching nameserver environment (Redhat Enterprise Linux 5.8, IBM System x3550) that has inconsistent ring buffer settings: 1020 for eth0 and 255 for eth1. eth0 is connected to switch 1 of its local…
Andrew B
  • 32,588
  • 12
  • 93
  • 131
11
votes
1 answer

Amplified reflected attack on DNS servers

The term Amplified reflected attack is new to me, and I have a few questions about it. I've heard it mostly happens with DNS servers - is that true? How do you protect against it? How do you know if your servers can be used in such an attack -- Is…
Mike Janson
  • 277
  • 1
  • 5
  • 10
11
votes
2 answers

Check remaining TTL for nameserver

Is it possible to check how much time is left before a nameserver like 8.8.8.8 will update its records from my nameserver?
Greatestswordsman
  • 397
  • 1
  • 7
  • 19
11
votes
2 answers

Can I delegate part of a zone to another server?

I guess I'm wondering something similar to Can I create DNS records for some hosts, delegate other queries in the same domain to another DNS server?, but I'm hoping I'll get a different answer with BIND. Basically, I have home.mydomain.tld as a…
pioto
  • 331
  • 1
  • 4
  • 13
10
votes
9 answers

Automatically sync all zones between BIND 9

Is there a way to automatically synchronize all zones between BIND (9) servers so that I don't have to add zones to the slave when I add them to the master?
Pablo Fernandez
  • 7,438
  • 25
  • 71
  • 83
10
votes
3 answers

BIND 9's nsupdate dyndns update gives: "tsig verify failure (BADKEY)"

I've scoured through so many HOWTO pages on DDNS to try and fix this... I'm at a loss. WorkstationX = CentOS 6.2 x64 ServerX = Ubuntu 12.04 LTS x64 I don't understand why it's not working... I'm literally out of ideas. I have regenerated and…
Litch
  • 316
  • 1
  • 3
  • 10
10
votes
5 answers

How to migrate a BIND DNS server to new hardware?

I got a job to migrate 2x BIND DNS servers to new hardware. Apparently they are using 3U prehistoric servers running Ubuntu server 8.04. I'll get to install 2x 1U servers with Ubuntu server 9.04. How can I transfer DNS settings, DNS cache? What…
Jindrich
  • 4,968
  • 8
  • 30
  • 42
10
votes
2 answers

BIND/DNS Zone meaning of "IN"

I have been reading http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-zone.html but the document raised a question. What is the meaning of IN? Is it just a class which is optional or does it mean more than that? (Yes I read that in…
elhombre
  • 435
  • 1
  • 8
  • 18
10
votes
2 answers

Force forwarder DNS requests to TCP mode

I have set up a DNS-server on SLES10 (currently bind 9.6) on a multi-homed server. This server can be queried from all internal networks and delivers answers for all internal networks. We have two separate DNS "master" zones. Each of these zones is…
Nils
  • 7,695
  • 3
  • 34
  • 73
10
votes
1 answer

Will restarting the system flush BIND (named) cache?

Will restarting the system flush BIND (named) cache? I use GNU/Linux.
Akilan
  • 399
  • 1
  • 5
  • 11
10
votes
3 answers

Bind zone transfer refused

UPDATE: BIND Version: [root@10.224.45.130] $ named -v BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 Operating System: CentOS release 5.6 (Final) After running [root@10.224.45.131] $ dig @10.224.45.130 example.com. axfr: Slave: ; <<>> DiG…
Sarah Ryan
  • 251
  • 1
  • 3
  • 11