This is a rebranded open-source software product, with additional charges applicable for support and maintenance.
BIND 9 has developed into a highly versatile and feature-rich DNS system, suitable for a wide range of applications. Being the initial and most widely adopted solution, BIND 9 enjoys a larger user base and is more familiar to network engineers than any other system.
BIND 9 is fully transparent open-source software, licensed under MPL 2.0. Users have the freedom to enhance BIND 9’s functionality and contribute to the community through an open Gitlab.
Key Features of BIND 9:
Response Rate Limiting (RRL): This enhancement to “named” aims to mitigate “amplification attacks” by enforcing rate limits on DNS responses.
Minimal ANY Responses: Queries for ANY records can potentially be exploited for abuse as they often result in responses much larger than the original query.
DLZ – Dynamically Loadable Zones (DLZ): This feature empowers BIND 9 to directly fetch zone data from an external database.
Minimum Reload Time: Update your BIND 9 server’s zone files using the remote name daemon control (rndc) utility without the need to restart BIND 9.
HSM Support – Hardware Security Modules (HSMs) are utilized for secure key material storage outside of BIND 9, enhancing security.
DNSSEC with Inline Signing: BIND 9 provides comprehensive support for DNSSEC, offering a mature, feature-rich, and user-friendly implementation of this critical security feature.
