Re: suggetsed distro for Bind 

Robert McDonald bmcdonaldjr at gmail.com
Wed Jul 23 13:46:21 UTC 2025


FreeBSD gets my vote. Current version is 14.3 and Bind PKG is 9.20.10.

Easy to install and maintain.
Fairly easy on resources.

If this is a commercial installation, make certain to have BSD talent on
staff. Linux talent is helpful but BSD has some differences.

If it's just for home, the leaning curve is pretty quick.

Make sure to run some sort of time app (NTP, Chrony, etc.) Use of ANY
encryption requires correct time. (e.g. DNSSEC including validation, signed
transfers/updates, etc.) Good practice just to include it by default.

There are lots of resources available on the Internet.

Regards,

Bob


Sent from my Google Pixel 9a phone.

On Wed, Jul 23, 2025, 09:19 <bind-users-request at lists.isc.org> wrote:

> Send bind-users mailing list submissions to
>         bind-users at lists.isc.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.isc.org/mailman/listinfo/bind-users
> or, via email, send a message with subject or body 'help' to
>         bind-users-request at lists.isc.org
>
> You can reach the person managing the list at
>         bind-users-owner at lists.isc.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of bind-users digest..."
>
>
> Today's Topics:
>
>    1. Re: suggetsed distro for Bind (Renzo Marengo)
>    2. RE: suggetsed distro for Bind (Marc)
>    3. Re: suggetsed distro for Bind (Michal Nowak)
>    4. Re: suggetsed distro for Bind (Ond?ej Sur?)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Wed, 23 Jul 2025 15:10:48 +0200
> From: Renzo Marengo <buckroger2011 at gmail.com>
> To: Ond?ej Sur? <ondrej at isc.org>
> Cc: bind-users at lists.isc.org
> Subject: Re: suggetsed distro for Bind
> Message-ID:
>         <
> CAMmfGZSTyB5KUUZ9vw9+2aOjxak3r--gHr0fvYWn6zbsF_Px1A at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Thank you very much, I verified and I'm interesting to:
>
> Red Hat Enterprise Linux / CentOS / AlmaLinux 8, 9
>
> what do I think  about Oracle Linux 9 ? It' based on RedHat code.
>
>
> Il giorno mer 23 lug 2025 alle ore 15:05 Ond?ej Sur? <ondrej at isc.org> ha
> scritto:
>
> > It would be best to pick something from a list of supported platforms:
> >
> https://bind9.readthedocs.io/en/v9.20.11/chapter2.html#supported-platforms
> >
> > And then cross-check it with list of ISC provided packages (Fedora,
> > RHEL-like, Debian, Ubuntu) if you want a base system that changes less
> > often.
> >
> > Or just any distro with Podman/Docker.
> >
> > FreeBSD packages are also well maintained in ports.
> >
> > I guess rolling distros like Arch Linux should also work well.
> >
> > But definitely not something that reached end-of-life last year (CentOS
> > Linux 7 reached end of life (EOL) on June 30, 2024).
> >
> > Ondrej
> > --
> > Ond?ej Sur? ? ISC (He/Him)
> >
> > My working hours and your working hours may be different. Please do not
> > feel obligated to reply outside your normal working hours.
> >
> > On 23. 7. 2025, at 14:54, Renzo Marengo <buckroger2011 at gmail.com> wrote:
> >
> > ?
> > I'd like to migrate from bind 9.11 lo last version.
> > This service is acting as cache dns server and It' running on Centos 7
> > server, what Linux distro do you suggest me for new Bind?
> > --
> > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> > from this list
> >
> > ISC funds the development of this software with paid support
> > subscriptions. Contact us at https://www.isc.org/contact/ for more
> > information.
> >
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> >
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://lists.isc.org/pipermail/bind-users/attachments/20250723/da9128ec/attachment-0001.htm
> >
>
> ------------------------------
>
> Message: 2
> Date: Wed, 23 Jul 2025 13:14:51 +0000
> From: Marc <Marc at f1-outsourcing.eu>
> To: Renzo Marengo <buckroger2011 at gmail.com>, Ond?ej Sur?
>         <ondrej at isc.org>
> Cc: "bind-users at lists.isc.org" <bind-users at lists.isc.org>
> Subject: RE: suggetsed distro for Bind
> Message-ID: <4f0d0f9efe634a46810830dd524cefa0 at f1-outsourcing.eu>
> Content-Type: text/plain; charset="utf-8"
>
>
> Then maybe rocky. CentOS is not the same any more. Although for just bind
> it does not matter that much
>
> > Thank you very much, I verified and I'm interesting to:
> >
> > Red Hat Enterprise Linux / CentOS / AlmaLinux 8, 9
> >
> > what do I think  about Oracle Linux 9 ? It' based on RedHat code.
> >
> >
> > Il giorno mer 23 lug 2025 alle ore 15:05 Ond?ej Sur? <ondrej at isc.org
> > <mailto:ondrej at isc.org> > ha scritto:
> >
> >
> >       It would be best to pick something from a list of supported
> > platforms:
> > https://bind9.readthedocs.io/en/v9.20.11/chapter2.html#supported-
> > platforms
> >
> >       And then cross-check it with list of ISC provided packages (Fedora,
> > RHEL-like, Debian, Ubuntu) if you want a base system that changes less
> > often.
> >
> >       Or just any distro with Podman/Docker.
> >
> >       FreeBSD packages are also well maintained in ports.
> >
> >       I guess rolling distros like Arch Linux should also work well.
> >
> >       But definitely not something that reached end-of-life last year
> > (CentOS Linux 7 reached end of life (EOL) on June 30, 2024).
> >
> >       Ondrej
> >       --
> >       Ond?ej Sur? ? ISC (He/Him)
> >
> >       My working hours and your working hours may be different. Please do
> > not feel obligated to reply outside your normal working hours.
> >
> >
> >               On 23. 7. 2025, at 14:54, Renzo Marengo
> > <buckroger2011 at gmail.com <mailto:buckroger2011 at gmail.com> > wrote:
> >
> >
> >
> >
> >               I'd like to migrate from bind 9.11 lo last version.
> >               This service is acting as cache dns server and It' running
> on
> > Centos 7 server, what Linux distro do you suggest me for new Bind?
> >               --
> >               Visit https://lists.isc.org/mailman/listinfo/bind-users to
> > unsubscribe from this list
> >
> >               ISC funds the development of this software with paid
> support
> > subscriptions. Contact us at https://www.isc.org/contact/ for more
> > information.
> >
> >
> >               bind-users mailing list
> >               bind-users at lists.isc.org <mailto:bind-users at lists.isc.org>
> >               https://lists.isc.org/mailman/listinfo/bind-users
> >
>
>
> ------------------------------
>
> Message: 3
> Date: Wed, 23 Jul 2025 15:15:21 +0200
> From: Michal Nowak <mnowak at isc.org>
> To: bind-users at lists.isc.org
> Subject: Re: suggetsed distro for Bind
> Message-ID: <ee8870d6-9471-45b5-b841-94c0a23f4e98 at isc.org>
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> On 23/07/2025 15:10, Renzo Marengo wrote:
> > Thank you very much, I verified and I'm interesting to:
> >
> > Red Hat Enterprise Linux / CentOS / AlmaLinux 8, 9
> >
> > what do I think? about Oracle Linux 9 ? It' based on RedHat code.
>
> It will work just fine as any other RHEL fork.
>
>
> ------------------------------
>
> Message: 4
> Date: Wed, 23 Jul 2025 15:19:14 +0200
> From: Ond?ej Sur? <ondrej at isc.org>
> To: Carlos Horowicz <carlos at planisys.com>
> Cc: bind-users at lists.isc.org
> Subject: Re: suggetsed distro for Bind
> Message-ID: <1C7FCEEE-6109-4A55-A446-A504624E6E54 at isc.org>
> Content-Type: text/plain; charset="utf-8"
>
> Docker/Podman is just a container, not *-virtualization platform, so
> there?s full access to the underlying hardware.
> --
> Ond?ej Sur? ? ISC (He/Him)
>
> My working hours and your working hours may be different. Please do not
> feel obligated to reply outside your normal working hours.
>
> > On 23. 7. 2025, at 15:10, Carlos Horowicz via bind-users <
> bind-users at lists.isc.org> wrote:
> >
> > ?
> > I?m not sure if a container will pass through the CPU instruction set
> required to leverage hardware acceleration on newer (or even not-so-new)
> Intel processors. In KVM, for example, you have to enable it explicitly.
> >
> > One way to check for supported instructions is:
> >
> > grep -o -w 'aes\|sha_ni\|pclmulqdq\|rdseed\|rdrand\|avx\|avx2\|avx512'
> /proc/cpuinfo | sort | uniq
> >
> > Hardware acceleration can be beneficial if you?re running a resolver
> that performs a lot of DNSSEC validation?SHA_NI in particular can speed up
> operations involving DS/NSEC/NSEC3 records. That said, if you?re only
> running an authoritative server or a small-scale resolver, crypto
> acceleration may not be critical.
> >
> > Fwiw, my preferred distro for running BIND9 is Debian 12?it includes
> dnstap support out of the box.
> >
> >> On 23/07/2025 14:57, Marc wrote:
> >> Maybe consider running it in a container and keeping nice and small
> with alpine linux
> >>
> >>> I'd like to migrate from bind 9.11 lo last version.
> >>> This service is acting as cache dns server and It' running on Centos 7
> >>> server, what Linux distro do you suggest me for new Bind?
> > --
> > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
> >
> > ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
> >
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://lists.isc.org/pipermail/bind-users/attachments/20250723/e3692721/attachment.htm
> >
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
>
> ------------------------------
>
> End of bind-users Digest, Vol 4767, Issue 2
> *******************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20250723/d8071250/attachment-0001.htm>


More information about the bind-users mailing list