BIND DNS Server

BIND (Berkeley Internet Name Domain) is the most widely used DNS software on the internet, developed and maintained by the Internet Systems Consortium (ISC) since 1994 as a free and open-source implementation of the DNS protocols. Originally written at UC Berkeley in the early 1980s by Douglas Terry, Mark Painter, David Riggle, and Songnian Zhou as part of the 4.3BSD release, BIND has been the de facto standard DNS server for decades. BIND 9 (the current major version, first released in 2000) is a complete rewrite written in C that implements all major DNS RFCs including RFC 1034/1035 (core DNS), RFC 4033-4035 (DNSSEC with zone signing and validation), RFC 7858 (DNS over TLS), RFC 8484 (DNS over HTTPS), RFC 7871 (EDNS Client Subnet), and many others. Key features include: authoritative DNS service (serving zones from zone files or via dynamic updates), recursive resolver (caching resolver with iterative query resolution, stub zones, forwarding, and response policy zones for filtering), DNSSEC support (zone signing with offline KSK/online ZSK key management, NSEC/NSEC3 for authenticated denial of existence, trust anchor management with automated key rollover via RFC 5011), dynamic DNS updates (RFC 2136 for programmatically modifying zone data), incremental zone transfers (IXFR) and full zone transfers (AXFR) for secondary servers, response Rate Limiting (RRL) to mitigate DNS amplification attacks, and a comprehensive logging and statistics system with XML and JSON statistics channels. BIND configuration uses the named.conf file with view-based configuration (different responses for different clients).