I don't think the in-tree bind supports dnssec. Bind 10 is the second or third major re-write of Paul Vixie's oriignal, designed to support it dnssec in the latest versions. nsd handles dnssec out of the box and it's in-tree. Once you get used to the config file, which is simple, it's pretty easy to migrate to. Even if you're a small site that doesn't care about dnssec, if you plan on managing larger authoritative servers and/or dnssec then it is worth picking up now.
Mikkel Bang [facebookman...@gmail.com] wrote: > Hello! > > For authoritative nameservers - which do you guys prefer, NSD or BIND? > > I've been using BIND all these years, but after Googling around, NSD seems > extremely attractive. Plus it follows BIND's zonefile format so I don't > really have to redesign my configs, how about that? > > Mikkel -- Keep them laughing half the time, scared of you the other half. And always keep them guessing. -- Clair George
