The other day it turned out that one stupid colleague does not understand how DNS works at all. Moreover, he doesn’t want to understand. He used to apply the Bind package when he was a sysadmin. In fairness, he’s easier to pity. At first I tried to argue and prove something, but then I realized that “A nod’s as good as a wink to a blind horse”.
Bind is both authoritarian and recursive DNS server.
Unfortunately, therefore, many people do not understand that there are two completely different tasks:
One for zone maintenance.
The second is recursive name resolution.
If you want to understand the difference, take a look at the NSD and Unbound servers. Or the PowerDNS server it also consists of two components