I do! tinydns and dnscache all the way (although considering alternatives that aren't BIND[1]); only problem I've had was the auto-SOA generation which the .is

I do! tinydns and dnscache all the way (although considering alternatives that aren't BIND[1]); only problem I've had was the auto-SOA generation which the .is people didn't like (they want each NS to have the same SOA) but since I generate the data file with a script anyway, it was an easy tweak to make that SOA a known value. [1] Historical issues with running at an ISP in the late 90s and the various security issues since.