MaraDNS
A security-aware DNS server
      
Erre con erre cigarro
Erre con erre barril
Rápido ruedan los carros
En el ferrocarril

MaraDNS Advocacy

I feel MaraDNS' greatest strength is that it is a small, minimal DNS server that is easy to set up. It also is remarkably secure -- but that doesn't mean its code is perfect. It just means that it is written in a way that minimizes security bugs and that I take responsibilty for any security bugs found.

MaraDNS in the press

MaraDNS has been praised in the press. Here are some examples of books, articles, and papers which discuss MaraDNS:
  • Mens, Jan-Piet (2008). Alternative DNS Servers: Choice and Deployment, and Optional SQL/LDAP Back-Ends (Paperback). UIT Cambridge Ltd. ISBN 0954452992.

    This book devotes an entire chapter to MaraDNS

  • Danchev, Dancho. How OpenDNS, PowerDNS and MaraDNS remained unaffected by the DNS cache poisoning vulnerability ZDNet.

    This article affirms MaraDNS' excellent security design, pointing out that MaraDNS was never vulnerable to the 2008 cache poisoning attacks.

  • Schroder, Carla (2007). Linux Networking Cookbook (Paperback). O'Reilly. ISBN 0596102488.

    This book, on page 545, endorses MaraDNS, stating that "My recommended combination is [...] MaraDNS for a public authoritative server"

  • João Antunes; Nuno Ferreira Neves; Paulo Veríssimo (2007), Finding Local Resource Exhaustion Vulnerabilities, 18th IEEE International Symposium on Software Reliability Engineering, Trollhättan, Sweden http://homepages.di.fc.ul.pt/~nuno/pubs.html

    This article discussion MaraDNS' denial-of-service resistance, pointing out that "Figure 2, for instance, shows that the BIND server performs worse than MaraDNS under the same attack, which means that the later is able to sustain a larger number of attacks than the first"

  • Rutherford, Matthew J. (2006), Adequate System-Level Testing of Distributed Systems, Department of Computer Science, Boulder, CO, http://mjrutherford.org/node/11

    This PhD thesis mentions MaraDNS several times.

MaraDNS is used by a number of ISPs to serve thousands of domains. MaraDNS is used by Boeing. MaraDNS is ready to be used by your business or enterprise.