mail us  |  mail this page

contact us
training  | 
tech stuff  | 

BIND 9 Support

Appendix C: DNS Resources

  1. Alternate Open source DNS Software
  2. BIND APIs and Drivers
  3. Zone Management
  4. DNS Web Sites
  5. Dynamic DNS services
  6. Useful Links

Alternate DNS Software

The following links provide additional information about alternative Open Source DNS software.


Python binding to BIND 9 APIs. GPLv2.


A customizable DNS proxy server. License ?


DNS tools/proxy written in Java.

djbdns I

A modified version of djbdns a full DNS bind replacement - but with less features.

djbdns II

Dan Berstein's page (the author of the origibal djbdns). A full DNS bind replacement - but with less features.


DN proxy.


DNS tools including a reverse mapper written in Python. Contributed by Nominium the BIND developers.


Lightweight DNS server based on Berkeley Database (BDB). GPL.

Domain Name Relay Daemon

Proxy DNS. Optimized for dial-up networks.


C library to support getDNS API a flexible asynchronous, low-level API to access DNS (including DNSSEC) functionality. Open Source - New BSD License. Python and nodejs bindings also available from separate authors.


Dynamic IP DNS system written in Perl.

Knot DNS

Authoritative DNS only. Supports DNSSEC. Compiled zone files for load performance. Dynamic add and delete of zones. Targeted at root and TLD operators and designed for continuous operation. *nix support only (packages and ports available). Open Source - GNU GPL.

Knot Resolver

Full service caching resolver (and resolver library). Supports DNSSEC. *nix support only (packages and ports available). Open Source - GNU GPL.


Sophisticated DNS Load Balancing server.


Load balancing Name Server written in Perl.


LDAP based DNS server based on core djbdns code. License ?


LDAP based DNS server based on reworked core and without the use of OpenLDAP libraries. License ?.


C library for DNS and DNSSEC based on PERL NET::DNS functionality. License GPL.


A secure DNS for *NIX systems. Limited function DNS.


GNU licensed. Uses MySQL to hold zone file records. No resolve library. Does not support recursive queries.


Authoritative Only DNS server. Currently at version 4. Supports DNSSEC. Performance is 2 to 3 times BIND. A very serious product and deployed in the RIPE root-server network. Modest documentation.


Authoritative and recursive DNS server written in Python. LGPL.


No longer actively maintained by author (but there isalternative site. Permanent caching server (Proxy DNS). Optimized for dial-up networks.


Proxy DNS


Runs on FreeBSD, Linux and Windows. Uses Filemonitor to auto-update zone file changes. Resolver library. SAM is a lite (authoritative only) version for windows only. Various other tools. License


Authoritative Only DNS server. Flexible back-end supports zone files, MySQL, PostGeSQL, Microsoft SQL, Orable, DB2 and many more. GPL.

Stanford DNS Server

Underlying support for lbnamed written in Perl.


Full service caching resolver (and resolver library). Supports DNSSEC. *nix support only (packages and ports available). Open Source - BSD License.


Limited function DNS (formerly ENS).

BIND APIs and Drivers

The following links provide information about alternative API for BIND 9 and Open source drivers which use the existing BIND 9 APIs


BIND-DLZ is now provided as a contribution within the normal BIND 9 distribution.


A BIND 9 SDB API back-end using LDAP.

DNS Web sites

The following links provide information about DNS or tools for verifying DNS systems: DNS Security Extensions (DNSSEC) DNS and BIND Resources Great DNSSEC resources, HowTo etc. Comprehensive DNS Tools Checks a number of parameters in an operational DNS.

Dynamic IP DNS Services Name services for dynamic IPs.

The following Links provide some useful background, information on loosely related topics by category:

IPv6 - major information source for IPv6 deployemnt and products. - IPv6 Forum for industry participants. - On-line tool to build IPv6 reverse mapping files.

DNS Operations describes the root-servers and the organizations that administer them. RIPE default value recommendations for TTLs.

Security SANS organization, specialising in system security. Offers an alert newsletter service. Use the Reading Room for good backgrounders. US Federally funded organisation and center for security expertise. Some useful backgrounders The research arm of RSA Security, Inc. - excellent overviews and articles. General security site covering a lot of topics including crytography. Some useful articles and whitepapers many written from a non-mathematicians viewpoint. US National Institute of Standard and Technology - Computer security division. Lots of security information and articles. - security organisation provides BugTrac mailing list for security announcements. - Data collection site. Headlines and up-to-the-minute status information. Excellent link site to various international security centers.

DNSSEC Automated tools for key rollovers and building DNSSEC.bis zones. Excellent portal site for collection of DNSSEC information. Status reports of the dnsext Work Group and current draft RFCs. PERL tools (Net::DNS and Net::DNS::SEC) for secure zone maintenance and key rollovers.

ENUM ENUM Forum Primarily US led group looking at North American Country Code (1) implementation of ENUM. Home page for a Neustart ENUM trial. RIPE is the ITU designated Tier-0 organisation for ENUM. Country status of ENUM usage.

Zone Management

Software to help you manage one or more zones. Licenses are GPL unless noted otherwise. List courtesy of David Nolan - many thanks (contact David info-dns at managedandmonitored dot net). Any errors are entirely ours.


The Carnegie Mellon NetReg package is a scalable and flexible Web-based multi-user system for managing networks, using perl and MySQL. It consolidates information about DNS zones, subnets, machine registrations, and DHCP configuration, and provides tools for easy management. The system exports ISC BIND configuration and zones, and can update them via either static zone files or TSIG signed dynamic DNS updates. It also exports ISC DHCP configurations, and has a SOAP API for integration with other systems. NetReg is designed for enterprise class network management, if you deal with dozens of hosts NetReg is more then you need. However if you deal with thousands or tens of thousands of hosts, NetReg may be exactly what you need. A live demo site is available off of the link above.


A system for generating internal DNS zones, external DNS zones, and DHCP configuration data from the same repository. HostDB is not database driven, doesn't provide a web interface, and isn't designed for managing large networks of hosts, but its great for small networks. You maintain a few small files describing your network and HostDB generates the necessary DNS & DHCP configuration.

DNS Control

DNS Control is a Web-based DNS management tool for BIND 9. It supports maintaining A, MX, and CNAME records, with all information stored in a MySQL database using ADODB. Written in PHP.


Maintain is a multi-user, highly extensible, Web-based management tool for medium to large size computer networks to maintain host information for building configuration files for DNS and DHCP. Written in PHP.

DNS Dusty

DNSDusty is an uncomplicated Web-based DNS management tool. It does all of its modifications via signed dynamic updates, and gets info on zones via zone transfers. Thus, it does not require any external databases, and plays along well with other tools that do dynamic updates (such as DHCP). DNSDusty is written as a Perl CGI script, so it should work with most Web servers.

Problems, comments, suggestions, corrections (including broken links) or something to add? Please take the time from a busy life to 'mail us' (at top of screen), the webmaster (below) or info-support at zytrax. You will have a warm inner glow for the rest of the day.

Pro DNS and BIND by Ron Aitchison


tech info
guides home
dns articles
1 objectives
big picture
2 concepts
3 reverse map
4 dns types
5 install bind
6 samples
7 named.conf
8 zone records
9 howtos
10 tools
11 trouble
12 bind api's
13 dns security
bits & bytes
15 messages
notes & tips
registration FAQ
dns resources
dns rfcs
change log

Creative Commons License
This work is licensed under a Creative Commons License.

If you are happy it's OK - but your browser is giving a less than optimal experience on our site. You could, at no charge, upgrade to a W3C STANDARDS COMPLIANT browser such as Firefox




Icons made by Icomoon from is licensed by CC 3.0 BY
share page via facebook tweet this page


email us Send to a friend feature print this page Display full width page Decrease font size Increase font size



Debian Linux


GNU-Free SW Foundation


Open Source Initiative
Creative Commons


Ibiblio - Library
Open Book Project
Open Directory


CSS Technology SPF Record Conformant Domain
Copyright © 1994 - 2024 ZyTrax, Inc.
All rights reserved. Legal and Privacy
site by zytrax
hosted by
web-master at zytrax
Page modified: January 20 2022.