Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
10
votes
5 answers

Any way to reduce bind9 memory footprint?

I am running my own Authoritative DNS on bind9 for like 5 of my domains with little traffic. I am running them on 2 separate VPS servers (so every Mb of memory costs me some $x2). Is there any way to reduce it's memory consumption down from…
BarsMonster
  • 724
  • 4
  • 12
  • 26
9
votes
2 answers

Configure BIND to prefer IPv4 without disabling IPv6

Our office network is internally dual-stack, but the connection to the rest of the Internet is IPv4-only. I've got BIND 9.9 set up on a Linux box to handle DNS resolution. Is there a way to configure BIND to prefer to use IPv4 when contacting other…
Mark
  • 668
  • 4
  • 10
9
votes
2 answers

Will setting lower TTL on name server (NS) records cause the TTLs on other records to lower?

I have a question on setting TTLs on NS records. Taking this example: example.com. 3600 NS ns1.example.com. example.com. 3600 NS ns2.example.com. test 14400 A example.com. So in this example the name server records are set with a TTL of…
CJD
  • 237
  • 1
  • 3
  • 5
9
votes
2 answers

Bind DNS Recursion Slow

We have just setup a recursive DNS server using the latest stable release of Bind 9.10 We are finding that recursive DNS lookups are quite slow. Anywhere from 1 - 3 seconds. Once the lookup is in cache, DNS resolves in a matter of milliseconds as…
ausip
  • 416
  • 1
  • 5
  • 8
9
votes
2 answers

safely restart / reload bind dns

I have a old bind dns server (linux centos5.5 with bind 9.3.6) with 2000+ zone files. Whenever any change is done in any file the dns is restarted. I guess a reload must be sufficient though. Problem is that a restart takes a long time 50s-60s…
Ram
  • 227
  • 1
  • 3
  • 5
9
votes
2 answers

DDNS, BIND and leftover .jnl files

I have configured BIND and ISC DHCPD to work together (using keys for updates). Now it's not that it does not work at all: forward maps etc are most often added. However, very often, for no apparent reason the .jnl file (journal) for the zone is…
LetMeSOThat4U
  • 1,371
  • 2
  • 17
  • 35
9
votes
5 answers

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this too tight a configuration?
Red Cricket
  • 470
  • 2
  • 8
  • 21
9
votes
4 answers

setting up bind to work with nsupdate (SERVFAIL)

I'm trying to update my DNS-Server dynamically using nsupdate. Prerequisite I'm using Debian 6 on my DNS-Server and Debian 4 on my client. I created a public/private key pair using: dnssec-keygen -C -a HMAC-MD5 -b 512 -n USER sub.example.com. I…
Marco
  • 435
  • 1
  • 3
  • 16
8
votes
1 answer

How to remove DNSSEC support from a domain?

A organization has DNSSEC support for their domains. They have a BIND9 as authoritative name server running which also manages the keys. However it was decided to remove DNSSEC. Is it sufficient to remove the key material in /var/lib/bind/pri and…
qbi
  • 183
  • 1
  • 1
  • 5
8
votes
1 answer

ANAME / ALIAS records for BIND

I operate some DNS servers using BIND for around 15,000 domain names. Some customers would like to start using a Full-Site Content Delivery CDN and a requirement for this is supporting the usage of ANAME / ALIAS DNS records, which are now supported…
Nick
  • 83
  • 1
  • 1
  • 4
8
votes
1 answer

/usr/bin/host executed by hacked PHP script

Today I noticed unusual high request rate on Apache webserver and also quite high incoming network traffic. Upon checking Apache's mod_status page, I found the offending URLs to be from path…
Marki555
  • 1,538
  • 1
  • 14
  • 27
8
votes
2 answers

Can BIND alter a response based on requesting IP address?

Hello Serverfault, I work for a hospital who set up their network using 192.168.0.0/23 (before I arrived). We are wanting to have laptops and mobile clients connect from remote locations using VPN, but the hospital network clashes very hard with…
Vile Brigandier
  • 418
  • 3
  • 8
8
votes
3 answers

Updates to a BIND dynamic zone that is shared between views delayed

Here's the quick and dirty: On BIND9 with a dynamic zone that's shared between views, doing a nsupdate, updating/creating/deleting a record will work fine if I query for that record from a client that falls into the same view I did the nsupdate…
enragedSquirrel
  • 83
  • 1
  • 1
  • 4
8
votes
2 answers

When should .local be used?

So, I've set up a few Win Servs in my time and always did the .local thing when there was a router that sepearated my internal from external networks. Now that I'm setting up an *nix box for the first time, does this concept still apply? Do I…
Chad Harrison
  • 6,990
  • 10
  • 29
  • 41
8
votes
1 answer

BIND9 forwarders not working. Internal DNS resolves but doesn't forward requests it can't process

I have BIND9 set up with proper recorders for my domain example.com, something.example.com is actually working... When I have my DHCP server pointing at this DNS server I can get to webmin (https://something.example.com:10000) for the server it's…
user29600
  • 419
  • 5
  • 17
  • 30