mindfreakthemon/bind repository overview

⁠Introduction

BIND (Berkeley Internet Name Domain) is a complete, highly portable implementation of the DNS (Domain Name System) protocol.

The BIND name server, named, is able to serve as an authoritative name server, recursive resolver, DNS forwarder, or all three simultaneously. It implements views for split-horizon DNS, automatic DNSSEC zone signing and key management, catalog zones to facilitate provisioning of zone data throughout a name server constellation, response policy zones (RPZ) to protect clients from malicious data, response rate limiting (RRL) and recursive query limits to reduce distributed denial of service attacks, and many other advanced DNS features. BIND also includes a suite of administrative tools, including the dig and delv DNS lookup tools, nsupdate for dynamic DNS zone updates, rndc for remote name server administration, and more.

⁠Image Configuration

⁠Zones

Image automatically includes all zones from etc/bind/zones/*.zone. It will automatically create a config for master zone in BIND.

Example of example.com.zone:

$ORIGIN example.com.
$TTL 1800
example.com. IN SOA ns1.example.com. hostmaster.example.com. 1546799845 10800 3600 604800 1800
example.com. 1800 IN NS ns1.example.com.
example.com. 1800 IN NS ns2.example.com.
*.example.com. 3600 IN A 127.0.0.1

⁠Confs

Image automatically includes all confs for a specific zone from etc/bind/confs/*.conf. Conf file must be named the same as the zone file, e.g. if your zone name file is example.com.zone, your conf file for this zone should be example.com.conf.

Example example.com.conf:

update-policy {
    grant name.key subdomain example.com. txt;
};

⁠Keys

Image automatically includes all keys from etc/bind/keys/*.key.

Example:

key "name.key" {
	algorithm hmac-sha512;
	secret "mysecretkey==";
};

⁠Docker Compose Configuration

⁠Example

bind:
    container_name: bind
    hostname: ns.example.com
    image: mindfreakthemon/bind:latest
    restart: unless-stopped
    volumes:
      - bind/confs:/etc/bind/confs:ro
      - bind/keys:/etc/bind/keys:ro
      - bind/zones:/etc/bind/zones  # cannot be ro since rndc occationally updates zone
    networks:
      - bind
    ports:
      - "53:53"
      - "53:53/udp"