ISC BIND 9.18.42 Released: Major Milestone for DNS Security

On November 5, 2025, the Internet Systems Consortium (ISC) released BIND 9.18.42, a major upgrade to the popular DNS server software. This milestone release brings enhanced security features, improved performance, and early support for emerging DNS protocols.

Key enhancements in BIND 9.18.42 include:

- DNSSEC hardening with new default key-rolling policies and stricter validation

- Early support for DNS over HTTPS (DoH) and DNS over TLS (DoT) extensions

- Query-processing latency improvements of up to 12% on typical workloads

- Updated named-checkconf utility for validating DoH configuration files

- A revamped logging system that provides JSON output for modern observability tools

The release was overseen by project lead Michal Nowak, who highlighted the shift towards a more secure, privacy-focused DNS ecosystem. BIND 9.18.42 builds on the project's reputation for reliability while addressing critical modern security requirements and performance demands.

The new version's impact is being felt across various sectors:

- Cloud providers like AWS and Google Cloud are testing BIND 9.18.42 for potential adoption

- Edge computing startups are leveraging the improved DNSSEC defaults for secure service discovery

- Telecom operators see performance gains as beneficial for 5G applications

- Industry analysts note the move toward encrypted DNS could help meet privacy regulations

BIND 9.18.42 sets a new standard for open-source DNS solutions, balancing robust security, performance, and extensibility. As the internet evolves toward encrypted and privacy-preserving protocols, this release positions BIND as a crucial component in shaping the future of network architecture.