Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Matt Simerson edited this page Jun 18, 2014 · 27 revisions

Install Nameserver

BIND needs no install instructions as it's very portable and already installed on most Unix-like systems. All nameservers except tinydns and MaraDNS can read from BIND-style zone files. Like tinydns, NSD compiles all the data into a database which it serves from.

References

TL:DR; BIND aims to support every DNS feature possible. NSD, Knot, and Yadifa aim to be fast and secure. Tinydns is secure and fast.

Performance comparisons:

TL;DR NSD, Knot, and Yadifa scale really really well. Tinydns was always faster than BIND. PowerDNS is comparable to BIND.

Comparison of managed DNS service providers.

DNS Server Security

Where it wasn't much work coughnot BINDcough, I excluded vulnerabilities that applied to the recursive portions of a DNS package. Example: djbdns had 3 CVEs for dnscache and 0 for tinydns.

TL;DR In order of fewest vulnerabilities: tinydns (0), Knot (0), NSD (2), MaraDNS (12), PowerDNS (8), BIND (78)

Clone this wiki locally