BIND is the caching, authoritative DNS server that is responsible for about 90% of the Internet's DNS system, or more. A number of people dislike BIND however, and are major fans of DanBernstein's TinyDNS.
This page will be a comparison of the two DNS servers. As with most comparisons, it wont be fair or unbiased. If anything, its a rebuttal of all the pro-TinyDns fanboy whining that goes on :)
I'm pulling these points (for now) from Brad Knowle's paper on Name Server Comparison. This paper was focussed on performance of an authoritative or caching nameserver, but discusses the differences in the servers as well.
Pro:
Cons:
Pros:
Cons:
Cons:
The author of this paper didn't have any positive points about djb's DNS suite, although they are widly publicised elsewhere. Some of the more salient, positive points regarding TinyDNS include:
As a real-world ISP owner and user of DJBDNS for years and years across dozens of machines (mostly linux), I can say DJBDNS saved our business several times over. BIND was hacked on our boxes so many times--you can imagine how painful and expensive that was! We never "got" BIND's arcane language (which reportedly can be learned only thru repeated use). How can one seriously consider BIND-anything after the incredible fiascos that were BIND 4x and 8x? The complete absence of security issues in DJBDNS was our #1 drive in switching to DJBDNS from BIND. Its dramatically increased speed was a nice side benefit. DJBDNS saved our business. It saved time and money and downtime and face. It gave us noticeably increased uptimes, simplicity and speed. If you're a zeeboid, geekoid, or flameoid, stick with BIND--you deserve each other. But if you are a straightfoward, sensible business owner who can't afford downtime or being hacked and need something that's no bullsht-get-the-job-done, then you really need DJBDNS. Some think DJB can be an ass; if that's true, I think he's earned it. I dunno DJB, don't care about DJB, but he writes GREAT software, and only a fool would dismiss it without experiencing how abruptly it blows BIND 4, 8, 9, or anything right into the weeds. BTW, qmail does for email what DJBDNS does for DNS. --Oct, 2004, from SafetyOrange?
A few comments on the above note: This page was intended as a comparison page, based on comparison of facts and analysis. Where facts are outdated, please feel free to edit the notes at the top of the page. For example, the fact that you can use axferd for TCP support is new, and worth adding. The rest of your comments are speculative or anecdotal. I'm not saying this because I instantly believe you to be wrong, or because you are in favour of DJBDNS. I'm saying it because your statements that you've "not seen" a lot of the problems with DjBDNS doesn't actually mean you weren't being affected by them, it only means you weren't observing them. The author of the original paper this page is based on conducted extensive tests into the behaviour and performance of the DNS servers he investigated, and was actively looking for broken behaviour. I personally wouldn't have a clue if the DNS servers I run were showing quirky behaviour, because I don't look for quirky behaviour - I assume they work fine, but that's all I can say. I've cleaned the original comparison points up, however you can feel free to add in any actual comments in this section. Also, can you please keep the tone of your comments level, as putting inflammatory comments (like your zeeboid one above) in here is merely a good way to get your edit reversed completely. -- DanielLawson
2 pages link to BindVsTinyDNS: