BIND 9
DNSbind
Reference DNS implementation serving as authoritative server or validating resolver.
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| anycast | boolean | — | no | false | ▸ false |
| dnssecValidation | enum | auto | yes | no | no | auto | inherited |
| geoRouting | boolean | — | no | false | inherited |
| healthChecked | boolean | — | no | false | inherited |
| managed | boolean | — | no | true | ▸ false |
| redundantProviders | boolean | — | no | false | inherited |
| role | enum | authoritative | recursive | forwarder | no | — | inherited |
| ttlSeconds | integer | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
shared-dependency-without-redundancy
The design requires redundant discovery, but this DNS or coordination service, which everything depends on, runs on a single provider or a single replica. Its failure is the whole system's failure.
- — all of these hold:
- — the design requirement `availability.discoveryRedundant` is true
- — any of these hold:
- — the node's `redundantProviders` is false
- — the node's `replicated` is false
nodes:
- { id: "bind", component: "bind" }Alibaba Cloud DNSalibaba-dnsAlibaba Cloud Domain Namesalibaba-domainsAlibaba Cloud DNS PrivateZonealibaba-private-zoneAmazon Application Recovery Controller (ARC)aws-application-recovery-controllerAmazon Route 53 Global Resolveraws-route53-global-resolverAmazon Route 53 Resolver endpointaws-route53-resolverAmazon Route 53route53Azure DNSazure-dnsAzure DNS Private Resolverazure-dns-private-resolverAzure Private DNSazure-private-dnsAzure Traffic Managerazure-traffic-managerCloudflare DNScloudflare-dnsCloudflare Internal DNScloudflare-internal-dnsCloudflare Registrarcloudflare-registrarCloudflare Secondary DNScloudflare-secondary-dnsCoreDNScorednsGeneric DNSdnsDNSdns-resolverdnsmasqdnsmasqExternalDNSexternal-dnsKnot DNSknot-dnsIBM NS1 Connectns1Pi-holepi-holePowerDNS Authoritative ServerpowerdnsUnboundunboundDigitalOcean DNSdigitalocean-dnsGoogle Cloud DNSgoogle-cloud-dnsCloud Domainsgoogle-cloud-domainsIBM Cloud DNS Servicesibm-dns-servicesDNS Private Zoneoci-dns-private-zoneDNS Public Zoneoci-dns-zoneTraffic Management Steering Policyoci-traffic-managementOpenStack Designateopenstack-designate
# yaml-language-server: $schema=../../schema/component.schema.json # BIND 9: self-hosted implementation of the DNS protocol that can act as authoritative server, # recursive resolver or stub resolver. Per the BIND 9 ARM, dnssec-validation defaults to auto, using # the built-in root trust anchor and keeping it current without operator action. schemaVersion: "1" type: "component" id: "bind" kind: "dns" provider: "default" docs: "https://bind9.readthedocs.io/en/latest/reference.html" defaults: managed: false anycast: false properties: role: type: "enum" values: ["authoritative", "recursive", "forwarder"] dnssecValidation: type: "enum" values: ["auto", "yes", "no"] default: "auto"