BIND
for Berkeley Internet Name Domain, or named , is the most
commonly used Domain Name System (DNS) server on the Internet.
On Unix-like systems it is the de facto standard.
BIND was originally created by four graduate students at
the Computer Systems Research Group at the University of California,
Berkeley, and was first released with 4.3BSD. Paul Vixie started
maintaining it in 1988 while working for DEC. Today, BIND
is maintained by the Internet Systems Consortium.
A new version of BIND (BIND 9) was written from scratch in
part to address the architectural difficulties with auditing
the earlier BIND code bases, and also to support DNSSEC (DNS
Security Extensions). Other important features of BIND 9 include:
TSIG, DNS notify, nsupdate, IPv6, rndc flush (remote name
daemon control), views, multiprocessor support, and an improved
portability architecture. rndc uses a shared secret to provide
encryption for local and remote terminals during each session.
Database support
Earlier versions of BIND offered no mechanism to store and
retrieve zone data in anything other than flat text files.
Since BIND 9.4 DLZ has been available as a compile time option
allowing for zone storage in a variety of database formats
including LDAP, Berkeley DB, PostgreSQL, MySQL, and ODBC.
Security
Like Sendmail, WU-FTPD and other systems dating back to the
earlier days of the Internet (when security was not such an
issue as it has since become) BIND 4 and BIND 8 have had a
large number of serious security vulnerabilities over the
years and as such their use is now strongly discouraged. While
BIND 9 was a complete rewrite, it has still experienced numerous
vulnerabilities.
Configuration issues
The configuration files are not checked automatically for
errors at runtime, but a configuration syntax verification
tool is included in the distribution
|