BIND DNS “replacement” released

NLnet Labs, Verisign, Nominet, and Kerei have announced the release of a new DNS server to potentially replace ISC’s BIND:

http://www.unbound.net/

Built from the ground up, it’s supposed to be faster and more secure, in part supporting DNSSEC out of the box.

Of course as with all new software, it remains to be seen if some major flaws/holes are found in it. This is where older software typically has an advantage, despite any claims otherwise, since “trial by fire” is usually where the major issues are found. At the organizations where I hold sway, we will probably delay any possible implementation, letting others work through the issues first.