BIND
Open-source DNS server from ISC for authoritative and recursive name service.
HN commenters like BIND for its long, reliable track record123, trouble-free DNSSEC and split internal/external views.45 The main complaint is a long history of security vulnerabilities.67
Why people recommend it
Proven reliability · 3
Long-time users report few issues, and one commenter calls it the most battle-tested DNS server.
“BIND has been really good to me and I love their `view "external"` and `view "internal"` scopes”
“BIND is still my go-to because I am familiar with it.”
Show 1 more
“just by virtue that the majority of the internet's DNS is running on BIND that it's also the most battle tested of them all.”
Familiar standard · 2
Commenters value familiarity with it and note that most DNS tutorials target BIND.
“BIND is still my go-to because I am familiar with it.”
“just by virtue that the majority of the internet's DNS is running on BIND that it's also the most battle tested of them all.”
Flexible deployment · 2
Commenters run it for local homelab DNS, resolving servers and master servers.
“we also wanted to switch from our previous OpenBSD setup to Bind, where we were already running Bind on Ubuntu”
Split views · 1
A long-time user praises its internal and external view scopes.
“BIND has been really good to me and I love their `view "external"` and `view "internal"` scopes”
DNSSEC support · 1
One commenter says modern bind9 handles DNSSEC with no issues.
“modern bind9 seems to just handle DNSSEC with no issues when I've used it”
Caveats and dissent
Security history · 2
One critic calls it badly engineered with decades of serious vulnerabilities; another acknowledges the security issues, though suggests they mostly affect resolver use.
“it's just a badly engineered piece of software and had braindead vulnerabilities for decades”
“just by virtue that the majority of the internet's DNS is running on BIND that it's also the most battle tested of them all.”
Often compared with
Who recommends it in their own words
Threads where it came up
- You Can Run a DNS Server 2 mentions
- Illinois Just Passed a Law That Puts Linux on the Hook for Age Verification 1 mention
- Revocation of X.509 Certificates 1 mention
- My Homelab Setup 1 mention
- IPv6 just turned 30 and still hasn't taken over the world 1 mention
- DNS Firewalling with MISP and Technitium DNS Server 1 mention
Also written as BIND 9. Data: bind.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 9
“systemd will gladly run your BIND, ISC DHCP and NetworkManager for you if you tell it to, no? In fact we do so at my place of work.”
“modern bind9 seems to just handle DNSSEC with no issues when I've used it”
“BIND has been really good to me and I love their `view "external"` and `view "internal"` scopes”
“BIND is still my go-to because I am familiar with it.”
“I use bind 9 and nginx for that.”
“I know for a fact that BIND 9 prefers non-link-local IPv6 source addresses over IPv4 addresses”
“it's just a badly engineered piece of software and had braindead vulnerabilities for decades”
“we also wanted to switch from our previous OpenBSD setup to Bind, where we were already running Bind on Ubuntu”
“just by virtue that the majority of the internet's DNS is running on BIND that it's also the most battle tested of them all.”