Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to run two instances of bind on a server, one for authoritative answers and one for recursive queries. MaraDNS can easily be configured to run multiple instances. You just add a line for each instance in /etc/default/maradns file, stating configuration file for that instance

What is the best way of doing this with bind in debian ? Copying the initscript and modifying paths seams like a hack.

share|improve this question
Why would you want that? – Chris S Nov 20 '10 at 3:19
@Chris S, there have been exploits in the past that cause cause problems, when Bind is acting as both an Authoriative and Recursive roles. Most security pros suggest that you should never have a single DNS server perform both roles. Given the security concern, you would probably want to run multiple instances because you can't afford extra boxes, and/or don't want to mess with VMs. – Zoredache Nov 20 '10 at 8:02
Like @Zoredache said, we want to seperate recursive & authoritative servers. And we want to do this with minimum hassle, so I want to do it with two bind instances listening on two IPs. – hayalci Nov 22 '10 at 20:00
up vote 3 down vote accepted

I presume that you have these listening on different interfaces... you can make a second bind configuration directory (or at least a separate named2.conf or something) and a copy of /etc/init.d/bind9, and use the -c flag to /usr/sbin/named in the "other" bind9 initscript to have the second copy of bind load the second configuration. You'll need to update the other stuff in the initscript like PIDFILE, and of make sure each one uses a different working directory in the bind configuration.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.