macOS
Homebrewverified · 100%
brew install bindprovider-native install command
brew / rank 1134
Install bind with Homebrew
Implementation of the DNS protocols. Version 9.20.26 via Homebrew; verified 2026-07-22.
install
Additional install commands
overview
Package summary
Implementation of the DNS protocols
Project links
Commands and aliases
- arpaname
- ddns-confgen
- delv
- dig
- dnssec-cds
- dnssec-dsfromkey
- dnssec-importkey
- dnssec-keyfromlabel
- dnssec-keygen
- dnssec-ksr
- dnssec-revoke
- dnssec-settime
- dnssec-signzone
- dnssec-verify
- host
- mdig
- named
- named-checkconf
- named-checkzone
- named-compilezone
- named-journalprint
- named-rrchecker
- nsec3hash
- nslookup
- nsupdate
- rndc
- rndc-confgen
- tsig-keygen
history
Project history and usage
BIND 9 is ISC's classic open-source DNS implementation: a name server, recursive resolver, DNSSEC platform, and suite of DNS administration tools including `named`, `dig`, `host`, `nslookup`, `rndc`, and DNSSEC utilities.
Project history
ISC's official BIND history says Berkeley Internet Name Domain began in the early 1980s at UC Berkeley as a DARPA-funded graduate-student project. After UC Berkeley, DEC and Paul Vixie carried major stewardship, and ISC was founded in 1994 specifically to provide a home for BIND development and maintenance.
Adoption history
BIND's adoption is bound to the adoption of DNS itself. ISC describes BIND 9 as the first, oldest, and most commonly deployed DNS solution, and says it is used for publishing the DNSSEC-signed root zone, top-level domains, hosting providers, enterprises, and large resolver farms. The input package facts show BIND packaged across major Unix and cross-platform package managers.
How it is used
Package users install BIND either for the `named` daemon or for the DNS toolbelt. On servers it acts as an authoritative name server, recursive resolver, forwarder, or split-horizon DNS service; on developer and operator workstations the package is often installed just to get `dig`, `host`, `nslookup`, `nsupdate`, and DNSSEC inspection/signing tools.
Why package nerds care
BIND is package-nerd bedrock: one package contains a daemon that helped define Internet infrastructure operations and a CLI toolkit that generations of sysadmins treat as diagnostic muscle memory. Its packaging also carries distro policy decisions about chrooting, service managers, default paths, crypto libraries, DNSSEC defaults, and whether users install the full server just to get `dig`.
Timeline
- Early 1980s: BIND originally written at UC Berkeley under a DARPA grant.
- 1994: ISC founded to provide a home for BIND development and maintenance.
- 1997-05: First production-ready BIND 8 released.
- 2000-09: BIND 9 released as a major rewrite of the architecture.
- 2009: ISC begins BIND 10 rewrite effort.
- 2014: ISC ends BIND 10 development and refocuses on BIND 9.
- 2016: BIND 9.11.0 and later move to the MPL 2.0 license.
- 2018-02: BIND project migrates to ISC's self-hosted GitLab.
- 2019-2020: ISC replaces BIND's home-grown network interface layer with libuv.
Related projects
- Related DNS software includes NSD, Unbound, Knot DNS, PowerDNS Authoritative Server, PowerDNS Recursor, dnsmasq, CoreDNS, and systemd-resolved; related BIND-era projects include the discontinued BIND 10/Bundy effort.
Sources
- Official BIND 9 README from ISC GitLab.
- Official ISC BIND page.
- Official ISC History of BIND page.
- Packaged executable and package-manager facts from source_facts.
security posture
Risk level: orange
formula declares a Homebrew service.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- formula declares a Homebrew service
Signals
- metadata:service
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/etc/named.conf/usr/local/etc/namedb/named.conf
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
arpaname | executable | indexed executable | Discovered from the local executable index. |
ddns-confgen | executable | indexed executable | Discovered from the local executable index. |
delv | executable | indexed executable | Discovered from the local executable index. |
dig | executable | indexed executable | Discovered from the local executable index. |
dnssec-cds | executable | indexed executable | Discovered from the local executable index. |
dnssec-dsfromkey | executable | indexed executable | Discovered from the local executable index. |
dnssec-importkey | executable | indexed executable | Discovered from the local executable index. |
dnssec-keyfromlabel | executable | indexed executable | Discovered from the local executable index. |
dnssec-keygen | executable | indexed executable | Discovered from the local executable index. |
dnssec-ksr | executable | indexed executable | Discovered from the local executable index. |
dnssec-revoke | executable | indexed executable | Discovered from the local executable index. |
dnssec-settime | executable | indexed executable | Discovered from the local executable index. |
dnssec-signzone | executable | indexed executable | Discovered from the local executable index. |
dnssec-verify | executable | indexed executable | Discovered from the local executable index. |
host | executable | indexed executable | Discovered from the local executable index. |
mdig | executable | indexed executable | Discovered from the local executable index. |
named | executable | indexed executable | Discovered from the local executable index. |
named-checkconf | executable | indexed executable | Discovered from the local executable index. |
named-checkzone | executable | indexed executable | Discovered from the local executable index. |
named-compilezone | executable | indexed executable | Discovered from the local executable index. |
named-journalprint | executable | indexed executable | Discovered from the local executable index. |
named-rrchecker | executable | indexed executable | Discovered from the local executable index. |
nsec3hash | executable | indexed executable | Discovered from the local executable index. |
nslookup | executable | indexed executable | Discovered from the local executable index. |
nsupdate | executable | indexed executable | Discovered from the local executable index. |
rndc | executable | indexed executable | Discovered from the local executable index. |
rndc-confgen | executable | indexed executable | Discovered from the local executable index. |
tsig-keygen | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version9.20.26
manager updated2026-07-22
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:bind |
|---|---|
| Version | 9.20.26 |
| Package manager | Homebrew |
| Homepage | https://www.isc.org/bind/ |
| Last updated | 2026-07-22T17:23:40Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation