NSD

From Wikipedia, the free encyclopedia

This article is about the computer program. For the NASA detonator, see NASA standard detonator. For NSD Delhi, see National School of Drama.
NSD
Developer: NLnet Labs
Latest release: 3.0.2 / November 3, 2006
OS: Unix-like
Use: DNS server
License: BSD license
Website: www.nlnetlabs.nl/nsd/

In Internet computing, NSD (for "name server daemon") is an open-source server program for the Domain Name System. It was developed by NLnet Labs of Amsterdam at the request of the RIPE NCC, from scratch as an authoritative name server (i.e., not implementing the recursive caching function by design).

NSD uses BIND-style zone-files (zone-files used under BIND can usually be used unmodified in NSD, once entered into the NSD configuration).

NSD uses zone information compiled via 'zonec' into a binary database file (nsd.db) which allows fast startup of the NSD name-service daemon, and allows syntax-structural errors in Zone-Files to be flagged at compile-time (before being made available to NSD service itself).

The collection of programs/processes that make-up NSD are designed so that the NSD daemon itself runs as a non-privileged user and can be easily be configured to run in a Chroot jail, such that security flaws in the NSD daemon are not so likely to result in system-wide compromise as without such measures.

Two of the Internet root nameservers have been switched to NSD.

  • k.root-servers.net was switched to NSD on February 19, 2003.
  • One of the 2 load-balanced servers for h.root-servers.net (called "H1", "H2") was switched to NSD, and now there are 3 servers all running NSD (called "H1", "H2", "H3").

[edit] See also

[edit] External links

  • NSD web page, NLnet Labs; [1]
  • "k.root-servers.net Changing DNS Software at on 19.2.2003", Daniel Karrenberg, RIPE DNS Working Group mailing list, 14 Feb 2003; [2]
  • "Stichting NLnet; Annual Report 2003" mentioning NSD on h.root-servers.net; [3]
  • "K-root Homepage"; [4]
  • "H.ROOT-SERVERS.NET STATISTICS"; [5]