BIND (pronounced /ˈbaɪnd/), for Berkeley Internet Name Daemon, or name d (/ˈneɪmdiː/), is as of 2010[update] the most commonly used Domain Name System The Domain Name System is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various information with domain names assigned to each of the participants. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers (DNS) server on the Internet The Internet is a global system of interconnected computer networks that use the standard Internet Protocol Suite to serve billions of users worldwide. It is a network of networks that consists of millions of private, public, academic, business, and government networks of local to global scope that are linked by a broad array of electronic and.[1] On Unix-like A Unix-like operating system is one that behaves in a manner similar to a Unix system, while not necessarily conforming to or being certified to any version of the Single UNIX Specification systems it is the de facto De facto is a Latin expression that means "by [the] fact". In law, it is meant to mean "in practice but not necessarily ordained by law" or "in practice or actuality, but without being officially established". It is commonly used in contrast to de jure when referring to matters of law, governance, or technique (such standard Standardization or standardisation is the process of developing and agreeing upon technical standards. A standard is a document that establishes uniform engineering or technical specifications, criteria, methods, processes, or practices. Some standards are mandatory while others are voluntary. Voluntary standards are available if one chooses to.
Originally written by four graduate students Postgraduate education involves learning and studying for degrees or other qualifications for which a first or Bachelor's degree generally is required, and is normally considered to be part of tertiary or higher education. In North America, this level is generally referred to as graduate school at the Computer Systems Research Group The Computer Systems Research Group was a research group at the University of California, Berkeley that was dedicated to enhancing AT&T Unix operating system and funded by Defense Advanced Research Projects Agency at the University of California, Berkeley The University of California, Berkeley , is a public research university located in Berkeley, California, United States. The oldest of the ten major campuses affiliated with the University of California, Berkeley offers some 300 undergraduate and graduate degree programs in a wide range of disciplines. The university occupies 6,651 acres (2,692 ha), BIND had its first release with 4.3BSD Berkeley Software Distribution is the UNIX operating system derivative developed and distributed by the Computer Systems Research Group (CSRG) of the University of California, Berkeley, from 1977 to 1995. Paul Vixie Paul Vixie is the author of several RFCs and standard UNIX system programs, among them SENDS, proxynet, rtty and Vixie cron started maintaining it in 1988 while working for DEC Digital Equipment Corporation was a pioneering American computer company, a leading vendor in the minicomputer market though the 1960s and 1970s, and for a long time one of the most admired within the hacker community.[citation needed]. As of 2010[update], the Internet Systems Consortium ISC was founded in 1994 as Internet Software Consortium, Inc. by Rick Adams, Carl Malamud and Paul Vixie with UUNET funding to develop and support a number of Internet software reference implementations. In January 2004 the original ISC's projects, assets and staff were transferred to Internet Systems Consortium, Inc., the current ISC maintains BIND.
A new version of BIND (BIND 9) was written[by whom?] from scratch in part to address the architectural difficulties with auditing the earlier BIND code bases, and also to support DNSSEC The Domain Name System Security Extensions is a suite of Internet Engineering Task Force (IETF) specifications for securing certain kinds of information provided by the Domain Name System (DNS) as used on Internet Protocol (IP) networks. It is a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, (DNS Security Extensions). Other important features of BIND 9 include: TSIG TSIG is a computer networking protocol defined in RFC 2845. It is used primarily by the Domain Name System (DNS) to provide a means of authenticating updates to a Dynamic DNS database, although it can also be used between servers and for regular queries. TSIG uses shared secret keys and one-way hashing to provide a cryptographically secure means, DNS notify, nsupdate, IPv6 Internet Protocol version 6 is an Internet Protocol version which is designed to succeed IPv4, the first implementation which is still in dominant use currently[update]. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol is the foreseeable IPv4 address exhaustion. IPv6, rndc flush (remote name daemon control), views, multiprocessor support, and an improved portability architecture. rndc uses a shared secret In cryptography, a shared secret is a piece of data only known to the parties involved in a secure communication. The shared secret can be a password, a passphrase, a big number or an array of randomly chosen bytes to provide encryption for local and remote terminals during each session.
Contents |
History
BIND originally emerged in the early 1980s as a result of a DARPA The Defense Advanced Research Projects Agency is an agency of the United States Department of Defense responsible for the development of new technology for use by the military. DARPA has been responsible for funding the development of many technologies which have had a major effect on the world, including computer networking, as well as NLS, which grant. In the mid-1980s, DEC Digital Equipment Corporation was a pioneering American computer company, a leading vendor in the minicomputer market though the 1960s and 1970s, and for a long time one of the most admired within the hacker community.[citation needed] employees took over BIND development. One of these employees, Paul Vixie Paul Vixie is the author of several RFCs and standard UNIX system programs, among them SENDS, proxynet, rtty and Vixie cron, continued to work on BIND after leaving DEC. He eventually helped start the ISC, which became the entity responsible for maintaining BIND.
The development of BIND 9 took place under a combination of commercial and military contracts. Most of the features of BIND 9 were funded by UNIX vendors who wanted to ensure that BIND stayed competitive with Microsoft's DNS offerings; the DNSSEC The Domain Name System Security Extensions is a suite of Internet Engineering Task Force (IETF) specifications for securing certain kinds of information provided by the Domain Name System (DNS) as used on Internet Protocol (IP) networks. It is a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, features were funded by the US military, which regarded DNS security as important.
The acronym BIND derives from its first domain use, Berkeley Internet Name Domain and its server software the "Berkeley Internet Name Domain (BIND) Server". It was not, as is sometimes assumed[by whom?], Berkeley Internet Name Daemon. The original acronym is clear from the title of and usage in the original BIND paper, The Berkeley Internet Name Domain Server.[2]
Criticisms
Database support
Earlier versions of BIND offered no mechanism to store and retrieve zone data in anything other than flat text files. BIND 9.4 [3] DLZ made available (as a compile-time option) zone storage in a variety of database formats including LDAP The Lightweight Directory Access Protocol, or LDAP , is an application protocol for querying and modifying data using directory services running over TCP/IP, Berkeley DB Berkeley DB is a computer software library that provides a high-performance embedded database, with bindings in C, C++, Java, Perl, Python, Ruby, Tcl, Smalltalk, and other programming languages. BDB stores arbitrary key/data pairs as byte arrays, and supports multiple data items for a single key. BDB can support thousands of simultaneous threads, PostgreSQL PostgreSQL, often simply Postgres, is an object-relational database management system . It is released under an MIT-style license and is thus free and open source software. As with many other open-source programs, PostgreSQL is not controlled by any single company - a global community of developers and companies develops the system, MySQL MySQL is a relational database management system that runs as a server providing multi-user access to a number of databases. MySQL is officially pronounced /maɪˌɛskjuːˈɛl/ ("My S-Q-L"), but is often pronounced /maɪˈsiːkwəl/ ("My Sequel"). It is named for original developer Michael Widenius's daughter My, and ODBC In computing, Open Database Connectivity provides a standard software API method for using database management systems (DBMS). The designers of ODBC aimed to make it independent of programming languages, database systems, and operating systems.
Security
Like Sendmail Sendmail is a general purpose internetwork email routing facility that supports many kinds of mail-transfer and -delivery methods, including the Simple Mail Transfer Protocol used for email transport over the Internet, WU-FTPD and other systems dating back to the earlier days of the Internet, BIND 4 and BIND 8 have had a large number of serious security vulnerabilities over the years and as such their use is now strongly discouraged.[4] While BIND 9 was a complete rewrite A rewrite in computer programming is the act or result of re-implementing a large portion of existing functionality without re-use of its source code. When the rewrite is not using existing code at all, it is common to speak of a rewrite from scratch. When instead only parts are re-engineered, which have otherwise become complicated to handle or, it has still experienced several vulnerabilities.[5]
See also
- Comparison of DNS server software This article presents a comparison of the features, platform support, and packaging of independent implementations of Domain name system name server software
- DNS management software DNS management software is computer software that controls Domain Name System server clusters. Its main purpose is to reduce human error when editing complex and repetitive text-based DNS server configuration files. Such files are often deployed on multiple physical servers
References
- ^ Don Moore. "Don Moore's May 2004 DNS Internet survey". http://mydns.bboy.net/survey/.
- ^ Douglas Brian Terry, Mark Painter, David W. Riggle and Songnian Zhou, The Berkeley Internet Name Domain Server, Proceedings USENIX Summer Conference, Salt Lake City, Utah, June 1984, pages 23-31.
- ^ https://www.isc.org/about/pr/2007032700
- ^ P. Hudson, A. Hudson, B. Ball, H. Duff: Red Hat Fedora 4 Unleashed, page 723. Sams Publishing, 2005 ISBN 0-672-32792-9
- ^ "BIND Security Advisories". https://www.isc.org/advisories/bind. Retrieved 2010-04-18.
Books
- DNS and BIND, Fifth Edition by Paul Albitz, Cricket Liu. 2006. ISBN 0-596-10057-4.
- BIND 9 DNS Administration Reference Book: Name Server Operations and DNS Configuration using BIND. Published by Reed Media Services. 2007. ISBN 0-9790342-1-3.
External links
- The official BIND site at Internet Systems Consortium (ISC.org)
- CircleID Interview with Cricket Liu, author of 'DNS and BIND'
- A Brief History of BIND by ISC
- LWRES, a BIND 9 lightweight resolver library
Categories: DNS software Categories: Domain name system | Network-related software | Servers
Houston Chronicle
It's putting a lot of people in a bind , said Cy-Fair parent Angela LeBlanc. She and her husband both have work schedules that prevent them from driving ...
and more »
tomtom901
Sat, 10 Jul 2010 07:00:00 GM
Bind. DNS cannot find in-addr.arpa Installation/Configuration.
Q. Had a baby 5 months ago and my tummy is still big is it too late to bind it?
Asked by optomistique - Mon Feb 15 00:01:21 2010 - - 1 Answers - 0 Comments
A. its probably is too late but trying wouldn't hurt.
Answered by Jacky - Mon Feb 15 00:05:35 2010
