Jump to content

NSD

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Kiwi128 (talk | contribs) at 08:45, 2 April 2020 (update preview version => 4.3.1rc1). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

NSD
Developer(s)NLnet Labs
Initial releaseMay 30, 2002; 22 years ago (2002-05-30)
Stable release
4.3.0 / March 17, 2020; 4 years ago (2020-03-17)[1]
Preview release
4.3.1rc1 / April 2, 2020; 4 years ago (2020-04-02)[2]
Repository
Operating systemUnix-like
TypeDNS server
LicenseBSD license
Websitewww.nlnetlabs.nl/projects/nsd/about/ Edit this on Wikidata

In Internet computing, NSD (for "name server daemon") is an open-source Domain Name System (DNS) server. It was developed by NLnet Labs of Amsterdam in cooperation with the RIPE NCC, from scratch as an authoritative name server (i.e., not implementing the recursive caching function by design). The intention of this development is to add variance to the "gene pool" of DNS implementations used by higher level name servers and thus increase the resilience of DNS against software flaws or exploits.

NSD uses BIND-style zone-files (zone-files used under BIND can usually be used unmodified in NSD, once entered into the NSD configuration).

NSD uses zone information compiled via zonec into a binary database file (nsd.db) which allows fast startup of the NSD name-service daemon, and allows syntax-structural errors in Zone-Files to be flagged at compile-time (before being made available to NSD service itself).

The collection of programs/processes that make-up NSD are designed so that the NSD daemon itself runs as a non-privileged user and can be easily configured to run in a Chroot jail, such that security flaws in the NSD daemon are not so likely to result in system-wide compromise as without such measures.

As of May, 2018, four of the Internet root nameservers are using NSD:

  • k.root-servers.net was switched to NSD on February 19, 2003.[3]
  • One of the 2 load-balanced servers for h.root-servers.net (called "H1", "H2") was switched to NSD, and now there are 3 servers all running NSD (called "H1", "H2", "H3").[4]
  • l.root-servers.net switched to NSD[5] on February 6, 2007[citation needed].
  • d.root-servers.net was switched to NSD in May 2018.[6]

Several other TLDs use NSD for part of their servers.

See also

References

  1. ^ Wijngaards, Wouter (17 March 2020). "NSD 4.3.0 released". nsd-users (Mailing list). Retrieved 17 March 2020.
  2. ^ Wijngaards, Wouter (2 April 2020). "NSD 4.3.1rc1 pre-release". nsd-users (Mailing list). Retrieved 2 April 2020.
  3. ^ Karrenberg, Daniel (14 February 2003). "k.root-servers.net Changing DNS Software at on 19.2.2003". Retrieved 14 May 2014.
  4. ^ ""Stichting NLnet; Annual Report 2003" mentioning NSD on h.root-servers.net". Stichting NLnet Labs. 18 May 2004. p. 13. Retrieved 30 January 2007.
  5. ^ Patrick Jones (2014-09-09). Lightning Talk on L-root (PDF). ENOG 8. Retrieved 2016-01-04.
  6. ^ "D-Root History Page".