DJBDNS or BIND

That is the question....

[Lisa]

Ok, what is the better name server? I have heard a thousand arguements back and forth on this. I just can't make up my mind.

[littleman]

I have no experience with djbdns, but from what I read it is easy to set up. I usually have bind running locally on my desktop because my ISP has very flaky DNS servers. I've read that 90% of the worlds DNS servers are BIND, the license is right, and the knowledge base is extremely high. That said BIND's setup is like solving a haiku -- at least the first time.

[scotty]

DJBDNS is done by the famous cryptographer/hacker DJ Bernstein, who also designed/coded Qmail. Personally I have not tried DJBDNS yet because most my boxes are production servers, and I would not want to risk my BIND settings... However, like Qmail, DJBDNS is designed to have a chain of small applications linking together to provide similar functionality as BIND (which is one single monolithic app). It provides much better security by having most parts running as non-root users, and parts chroot into its own jail.

Personally I run BIND9 on all my NS, and from the traffic I got (which is not much), they actuallys run "okay". BIND works for me, fast enough for me, all my zones are already configured for BIND, and I have (not-yet) been hacked due to BIND. I see no point of changing for now, but I might give it a try when I need to set up a new NS.