BIND9 Views

Control how to respond to queries
based on query's src/dst, TSIG
allow named have different configurations per view
zone files
access control
whether to perform/allow zone transfer
...
useful for a DNS server on a FW boundary
"2-face" DNS server
authoritative-only + caching in a single box