diff --git a/manifest/armv7l/b/bind.filelist b/manifest/armv7l/b/bind.filelist
index b5b1e25fb5..6a5e41a77b 100644
--- a/manifest/armv7l/b/bind.filelist
+++ b/manifest/armv7l/b/bind.filelist
@@ -6,6 +6,7 @@
 /usr/local/bin/dnssec-importkey
 /usr/local/bin/dnssec-keyfromlabel
 /usr/local/bin/dnssec-keygen
+/usr/local/bin/dnssec-ksr
 /usr/local/bin/dnssec-revoke
 /usr/local/bin/dnssec-settime
 /usr/local/bin/dnssec-signzone
@@ -20,9 +21,6 @@
 /usr/local/bin/nsec3hash
 /usr/local/bin/nslookup
 /usr/local/bin/nsupdate
-/usr/local/etc/bind.keys
-/usr/local/include/bind9/check.h
-/usr/local/include/bind9/getaddresses.h
 /usr/local/include/dns/acl.h
 /usr/local/include/dns/adb.h
 /usr/local/include/dns/badcache.h
@@ -52,7 +50,6 @@
 /usr/local/include/dns/edns.h
 /usr/local/include/dns/enumclass.h
 /usr/local/include/dns/enumtype.h
-/usr/local/include/dns/events.h
 /usr/local/include/dns/fixedname.h
 /usr/local/include/dns/forward.h
 /usr/local/include/dns/geoip.h
@@ -63,15 +60,16 @@
 /usr/local/include/dns/keydata.h
 /usr/local/include/dns/keyflags.h
 /usr/local/include/dns/keymgr.h
+/usr/local/include/dns/keystore.h
 /usr/local/include/dns/keytable.h
 /usr/local/include/dns/keyvalues.h
 /usr/local/include/dns/librpz.h
 /usr/local/include/dns/log.h
-/usr/local/include/dns/lookup.h
 /usr/local/include/dns/master.h
 /usr/local/include/dns/masterdump.h
 /usr/local/include/dns/message.h
 /usr/local/include/dns/name.h
+/usr/local/include/dns/nametree.h
 /usr/local/include/dns/ncache.h
 /usr/local/include/dns/nsec.h
 /usr/local/include/dns/nsec3.h
@@ -80,6 +78,7 @@
 /usr/local/include/dns/order.h
 /usr/local/include/dns/peer.h
 /usr/local/include/dns/private.h
+/usr/local/include/dns/qp.h
 /usr/local/include/dns/rbt.h
 /usr/local/include/dns/rcode.h
 /usr/local/include/dns/rdata.h
@@ -90,6 +89,7 @@
 /usr/local/include/dns/rdataslab.h
 /usr/local/include/dns/rdatastruct.h
 /usr/local/include/dns/rdatatype.h
+/usr/local/include/dns/remote.h
 /usr/local/include/dns/request.h
 /usr/local/include/dns/resolver.h
 /usr/local/include/dns/result.h
@@ -97,7 +97,6 @@
 /usr/local/include/dns/rpz.h
 /usr/local/include/dns/rriterator.h
 /usr/local/include/dns/rrl.h
-/usr/local/include/dns/sdb.h
 /usr/local/include/dns/sdlz.h
 /usr/local/include/dns/secalg.h
 /usr/local/include/dns/secproto.h
@@ -106,8 +105,8 @@
 /usr/local/include/dns/stats.h
 /usr/local/include/dns/time.h
 /usr/local/include/dns/tkey.h
+/usr/local/include/dns/trace.h
 /usr/local/include/dns/transport.h
-/usr/local/include/dns/tsec.h
 /usr/local/include/dns/tsig.h
 /usr/local/include/dns/ttl.h
 /usr/local/include/dns/types.h
@@ -122,11 +121,9 @@
 /usr/local/include/dst/dst.h
 /usr/local/include/dst/gssapi.h
 /usr/local/include/irs/resconf.h
-/usr/local/include/isc/aes.h
-/usr/local/include/isc/align.h
-/usr/local/include/isc/app.h
+/usr/local/include/isc/ascii.h
 /usr/local/include/isc/assertions.h
-/usr/local/include/isc/astack.h
+/usr/local/include/isc/async.h
 /usr/local/include/isc/atomic.h
 /usr/local/include/isc/attributes.h
 /usr/local/include/isc/backtrace.h
@@ -134,34 +131,37 @@
 /usr/local/include/isc/base32.h
 /usr/local/include/isc/base64.h
 /usr/local/include/isc/buffer.h
-/usr/local/include/isc/cmocka.h
 /usr/local/include/isc/commandline.h
 /usr/local/include/isc/condition.h
 /usr/local/include/isc/counter.h
 /usr/local/include/isc/crc64.h
-/usr/local/include/isc/deprecated.h
 /usr/local/include/isc/dir.h
+/usr/local/include/isc/dnsstream.h
 /usr/local/include/isc/endian.h
+/usr/local/include/isc/entropy.h
 /usr/local/include/isc/errno.h
 /usr/local/include/isc/error.h
-/usr/local/include/isc/event.h
-/usr/local/include/isc/eventclass.h
 /usr/local/include/isc/file.h
+/usr/local/include/isc/fips.h
 /usr/local/include/isc/formatcheck.h
 /usr/local/include/isc/fuzz.h
-/usr/local/include/isc/glob.h
+/usr/local/include/isc/getaddresses.h
 /usr/local/include/isc/hash.h
+/usr/local/include/isc/hashmap.h
 /usr/local/include/isc/heap.h
 /usr/local/include/isc/hex.h
+/usr/local/include/isc/histo.h
 /usr/local/include/isc/hmac.h
 /usr/local/include/isc/ht.h
 /usr/local/include/isc/httpd.h
 /usr/local/include/isc/interfaceiter.h
 /usr/local/include/isc/iterated_hash.h
+/usr/local/include/isc/job.h
 /usr/local/include/isc/lang.h
 /usr/local/include/isc/lex.h
 /usr/local/include/isc/list.h
 /usr/local/include/isc/log.h
+/usr/local/include/isc/loop.h
 /usr/local/include/isc/magic.h
 /usr/local/include/isc/managers.h
 /usr/local/include/isc/md.h
@@ -171,17 +171,17 @@
 /usr/local/include/isc/mutexblock.h
 /usr/local/include/isc/net.h
 /usr/local/include/isc/netaddr.h
-/usr/local/include/isc/netdb.h
 /usr/local/include/isc/netmgr.h
 /usr/local/include/isc/netscope.h
 /usr/local/include/isc/nonce.h
-/usr/local/include/isc/offset.h
 /usr/local/include/isc/once.h
 /usr/local/include/isc/os.h
+/usr/local/include/isc/overflow.h
 /usr/local/include/isc/parseint.h
-/usr/local/include/isc/pool.h
+/usr/local/include/isc/pause.h
 /usr/local/include/isc/portset.h
-/usr/local/include/isc/print.h
+/usr/local/include/isc/proxy2.h
+/usr/local/include/isc/queue.h
 /usr/local/include/isc/quota.h
 /usr/local/include/isc/radix.h
 /usr/local/include/isc/random.h
@@ -189,38 +189,39 @@
 /usr/local/include/isc/refcount.h
 /usr/local/include/isc/regex.h
 /usr/local/include/isc/region.h
-/usr/local/include/isc/resource.h
 /usr/local/include/isc/result.h
 /usr/local/include/isc/rwlock.h
 /usr/local/include/isc/safe.h
 /usr/local/include/isc/serial.h
+/usr/local/include/isc/signal.h
 /usr/local/include/isc/siphash.h
 /usr/local/include/isc/sockaddr.h
-/usr/local/include/isc/stat.h
+/usr/local/include/isc/spinlock.h
 /usr/local/include/isc/stats.h
-/usr/local/include/isc/stdatomic.h
 /usr/local/include/isc/stdio.h
 /usr/local/include/isc/stdtime.h
 /usr/local/include/isc/strerr.h
 /usr/local/include/isc/string.h
 /usr/local/include/isc/symtab.h
 /usr/local/include/isc/syslog.h
-/usr/local/include/isc/task.h
-/usr/local/include/isc/taskpool.h
 /usr/local/include/isc/thread.h
+/usr/local/include/isc/tid.h
 /usr/local/include/isc/time.h
 /usr/local/include/isc/timer.h
 /usr/local/include/isc/tls.h
 /usr/local/include/isc/tm.h
 /usr/local/include/isc/types.h
+/usr/local/include/isc/urcu.h
 /usr/local/include/isc/url.h
 /usr/local/include/isc/utf8.h
 /usr/local/include/isc/util.h
+/usr/local/include/isc/uv.h
+/usr/local/include/isc/work.h
+/usr/local/include/isc/xml.h
 /usr/local/include/isccc/alist.h
 /usr/local/include/isccc/base64.h
 /usr/local/include/isccc/cc.h
 /usr/local/include/isccc/ccmsg.h
-/usr/local/include/isccc/events.h
 /usr/local/include/isccc/sexpr.h
 /usr/local/include/isccc/symtab.h
 /usr/local/include/isccc/symtype.h
@@ -228,13 +229,13 @@
 /usr/local/include/isccc/util.h
 /usr/local/include/isccfg/aclconf.h
 /usr/local/include/isccfg/cfg.h
+/usr/local/include/isccfg/check.h
 /usr/local/include/isccfg/duration.h
 /usr/local/include/isccfg/grammar.h
 /usr/local/include/isccfg/kaspconf.h
 /usr/local/include/isccfg/log.h
 /usr/local/include/isccfg/namedconf.h
 /usr/local/include/ns/client.h
-/usr/local/include/ns/events.h
 /usr/local/include/ns/hooks.h
 /usr/local/include/ns/interfacemgr.h
 /usr/local/include/ns/listenlist.h
@@ -251,25 +252,19 @@
 /usr/local/lib/bind/filter-a.so
 /usr/local/lib/bind/filter-aaaa.la
 /usr/local/lib/bind/filter-aaaa.so
-/usr/local/lib/libbind9-9.18.21.so
-/usr/local/lib/libbind9.la
-/usr/local/lib/libbind9.so
-/usr/local/lib/libdns-9.18.21.so
+/usr/local/lib/libdns-9.20.0.so
 /usr/local/lib/libdns.la
 /usr/local/lib/libdns.so
-/usr/local/lib/libirs-9.18.21.so
-/usr/local/lib/libirs.la
-/usr/local/lib/libirs.so
-/usr/local/lib/libisc-9.18.21.so
+/usr/local/lib/libisc-9.20.0.so
 /usr/local/lib/libisc.la
 /usr/local/lib/libisc.so
-/usr/local/lib/libisccc-9.18.21.so
+/usr/local/lib/libisccc-9.20.0.so
 /usr/local/lib/libisccc.la
 /usr/local/lib/libisccc.so
-/usr/local/lib/libisccfg-9.18.21.so
+/usr/local/lib/libisccfg-9.20.0.so
 /usr/local/lib/libisccfg.la
 /usr/local/lib/libisccfg.so
-/usr/local/lib/libns-9.18.21.so
+/usr/local/lib/libns-9.20.0.so
 /usr/local/lib/libns.la
 /usr/local/lib/libns.so
 /usr/local/sbin/ddns-confgen
@@ -285,6 +280,7 @@
 /usr/local/share/man/man1/dnssec-importkey.1.zst
 /usr/local/share/man/man1/dnssec-keyfromlabel.1.zst
 /usr/local/share/man/man1/dnssec-keygen.1.zst
+/usr/local/share/man/man1/dnssec-ksr.1.zst
 /usr/local/share/man/man1/dnssec-revoke.1.zst
 /usr/local/share/man/man1/dnssec-settime.1.zst
 /usr/local/share/man/man1/dnssec-signzone.1.zst
diff --git a/manifest/i686/b/bind.filelist b/manifest/i686/b/bind.filelist
index b5b1e25fb5..6a5e41a77b 100644
--- a/manifest/i686/b/bind.filelist
+++ b/manifest/i686/b/bind.filelist
@@ -6,6 +6,7 @@
 /usr/local/bin/dnssec-importkey
 /usr/local/bin/dnssec-keyfromlabel
 /usr/local/bin/dnssec-keygen
+/usr/local/bin/dnssec-ksr
 /usr/local/bin/dnssec-revoke
 /usr/local/bin/dnssec-settime
 /usr/local/bin/dnssec-signzone
@@ -20,9 +21,6 @@
 /usr/local/bin/nsec3hash
 /usr/local/bin/nslookup
 /usr/local/bin/nsupdate
-/usr/local/etc/bind.keys
-/usr/local/include/bind9/check.h
-/usr/local/include/bind9/getaddresses.h
 /usr/local/include/dns/acl.h
 /usr/local/include/dns/adb.h
 /usr/local/include/dns/badcache.h
@@ -52,7 +50,6 @@
 /usr/local/include/dns/edns.h
 /usr/local/include/dns/enumclass.h
 /usr/local/include/dns/enumtype.h
-/usr/local/include/dns/events.h
 /usr/local/include/dns/fixedname.h
 /usr/local/include/dns/forward.h
 /usr/local/include/dns/geoip.h
@@ -63,15 +60,16 @@
 /usr/local/include/dns/keydata.h
 /usr/local/include/dns/keyflags.h
 /usr/local/include/dns/keymgr.h
+/usr/local/include/dns/keystore.h
 /usr/local/include/dns/keytable.h
 /usr/local/include/dns/keyvalues.h
 /usr/local/include/dns/librpz.h
 /usr/local/include/dns/log.h
-/usr/local/include/dns/lookup.h
 /usr/local/include/dns/master.h
 /usr/local/include/dns/masterdump.h
 /usr/local/include/dns/message.h
 /usr/local/include/dns/name.h
+/usr/local/include/dns/nametree.h
 /usr/local/include/dns/ncache.h
 /usr/local/include/dns/nsec.h
 /usr/local/include/dns/nsec3.h
@@ -80,6 +78,7 @@
 /usr/local/include/dns/order.h
 /usr/local/include/dns/peer.h
 /usr/local/include/dns/private.h
+/usr/local/include/dns/qp.h
 /usr/local/include/dns/rbt.h
 /usr/local/include/dns/rcode.h
 /usr/local/include/dns/rdata.h
@@ -90,6 +89,7 @@
 /usr/local/include/dns/rdataslab.h
 /usr/local/include/dns/rdatastruct.h
 /usr/local/include/dns/rdatatype.h
+/usr/local/include/dns/remote.h
 /usr/local/include/dns/request.h
 /usr/local/include/dns/resolver.h
 /usr/local/include/dns/result.h
@@ -97,7 +97,6 @@
 /usr/local/include/dns/rpz.h
 /usr/local/include/dns/rriterator.h
 /usr/local/include/dns/rrl.h
-/usr/local/include/dns/sdb.h
 /usr/local/include/dns/sdlz.h
 /usr/local/include/dns/secalg.h
 /usr/local/include/dns/secproto.h
@@ -106,8 +105,8 @@
 /usr/local/include/dns/stats.h
 /usr/local/include/dns/time.h
 /usr/local/include/dns/tkey.h
+/usr/local/include/dns/trace.h
 /usr/local/include/dns/transport.h
-/usr/local/include/dns/tsec.h
 /usr/local/include/dns/tsig.h
 /usr/local/include/dns/ttl.h
 /usr/local/include/dns/types.h
@@ -122,11 +121,9 @@
 /usr/local/include/dst/dst.h
 /usr/local/include/dst/gssapi.h
 /usr/local/include/irs/resconf.h
-/usr/local/include/isc/aes.h
-/usr/local/include/isc/align.h
-/usr/local/include/isc/app.h
+/usr/local/include/isc/ascii.h
 /usr/local/include/isc/assertions.h
-/usr/local/include/isc/astack.h
+/usr/local/include/isc/async.h
 /usr/local/include/isc/atomic.h
 /usr/local/include/isc/attributes.h
 /usr/local/include/isc/backtrace.h
@@ -134,34 +131,37 @@
 /usr/local/include/isc/base32.h
 /usr/local/include/isc/base64.h
 /usr/local/include/isc/buffer.h
-/usr/local/include/isc/cmocka.h
 /usr/local/include/isc/commandline.h
 /usr/local/include/isc/condition.h
 /usr/local/include/isc/counter.h
 /usr/local/include/isc/crc64.h
-/usr/local/include/isc/deprecated.h
 /usr/local/include/isc/dir.h
+/usr/local/include/isc/dnsstream.h
 /usr/local/include/isc/endian.h
+/usr/local/include/isc/entropy.h
 /usr/local/include/isc/errno.h
 /usr/local/include/isc/error.h
-/usr/local/include/isc/event.h
-/usr/local/include/isc/eventclass.h
 /usr/local/include/isc/file.h
+/usr/local/include/isc/fips.h
 /usr/local/include/isc/formatcheck.h
 /usr/local/include/isc/fuzz.h
-/usr/local/include/isc/glob.h
+/usr/local/include/isc/getaddresses.h
 /usr/local/include/isc/hash.h
+/usr/local/include/isc/hashmap.h
 /usr/local/include/isc/heap.h
 /usr/local/include/isc/hex.h
+/usr/local/include/isc/histo.h
 /usr/local/include/isc/hmac.h
 /usr/local/include/isc/ht.h
 /usr/local/include/isc/httpd.h
 /usr/local/include/isc/interfaceiter.h
 /usr/local/include/isc/iterated_hash.h
+/usr/local/include/isc/job.h
 /usr/local/include/isc/lang.h
 /usr/local/include/isc/lex.h
 /usr/local/include/isc/list.h
 /usr/local/include/isc/log.h
+/usr/local/include/isc/loop.h
 /usr/local/include/isc/magic.h
 /usr/local/include/isc/managers.h
 /usr/local/include/isc/md.h
@@ -171,17 +171,17 @@
 /usr/local/include/isc/mutexblock.h
 /usr/local/include/isc/net.h
 /usr/local/include/isc/netaddr.h
-/usr/local/include/isc/netdb.h
 /usr/local/include/isc/netmgr.h
 /usr/local/include/isc/netscope.h
 /usr/local/include/isc/nonce.h
-/usr/local/include/isc/offset.h
 /usr/local/include/isc/once.h
 /usr/local/include/isc/os.h
+/usr/local/include/isc/overflow.h
 /usr/local/include/isc/parseint.h
-/usr/local/include/isc/pool.h
+/usr/local/include/isc/pause.h
 /usr/local/include/isc/portset.h
-/usr/local/include/isc/print.h
+/usr/local/include/isc/proxy2.h
+/usr/local/include/isc/queue.h
 /usr/local/include/isc/quota.h
 /usr/local/include/isc/radix.h
 /usr/local/include/isc/random.h
@@ -189,38 +189,39 @@
 /usr/local/include/isc/refcount.h
 /usr/local/include/isc/regex.h
 /usr/local/include/isc/region.h
-/usr/local/include/isc/resource.h
 /usr/local/include/isc/result.h
 /usr/local/include/isc/rwlock.h
 /usr/local/include/isc/safe.h
 /usr/local/include/isc/serial.h
+/usr/local/include/isc/signal.h
 /usr/local/include/isc/siphash.h
 /usr/local/include/isc/sockaddr.h
-/usr/local/include/isc/stat.h
+/usr/local/include/isc/spinlock.h
 /usr/local/include/isc/stats.h
-/usr/local/include/isc/stdatomic.h
 /usr/local/include/isc/stdio.h
 /usr/local/include/isc/stdtime.h
 /usr/local/include/isc/strerr.h
 /usr/local/include/isc/string.h
 /usr/local/include/isc/symtab.h
 /usr/local/include/isc/syslog.h
-/usr/local/include/isc/task.h
-/usr/local/include/isc/taskpool.h
 /usr/local/include/isc/thread.h
+/usr/local/include/isc/tid.h
 /usr/local/include/isc/time.h
 /usr/local/include/isc/timer.h
 /usr/local/include/isc/tls.h
 /usr/local/include/isc/tm.h
 /usr/local/include/isc/types.h
+/usr/local/include/isc/urcu.h
 /usr/local/include/isc/url.h
 /usr/local/include/isc/utf8.h
 /usr/local/include/isc/util.h
+/usr/local/include/isc/uv.h
+/usr/local/include/isc/work.h
+/usr/local/include/isc/xml.h
 /usr/local/include/isccc/alist.h
 /usr/local/include/isccc/base64.h
 /usr/local/include/isccc/cc.h
 /usr/local/include/isccc/ccmsg.h
-/usr/local/include/isccc/events.h
 /usr/local/include/isccc/sexpr.h
 /usr/local/include/isccc/symtab.h
 /usr/local/include/isccc/symtype.h
@@ -228,13 +229,13 @@
 /usr/local/include/isccc/util.h
 /usr/local/include/isccfg/aclconf.h
 /usr/local/include/isccfg/cfg.h
+/usr/local/include/isccfg/check.h
 /usr/local/include/isccfg/duration.h
 /usr/local/include/isccfg/grammar.h
 /usr/local/include/isccfg/kaspconf.h
 /usr/local/include/isccfg/log.h
 /usr/local/include/isccfg/namedconf.h
 /usr/local/include/ns/client.h
-/usr/local/include/ns/events.h
 /usr/local/include/ns/hooks.h
 /usr/local/include/ns/interfacemgr.h
 /usr/local/include/ns/listenlist.h
@@ -251,25 +252,19 @@
 /usr/local/lib/bind/filter-a.so
 /usr/local/lib/bind/filter-aaaa.la
 /usr/local/lib/bind/filter-aaaa.so
-/usr/local/lib/libbind9-9.18.21.so
-/usr/local/lib/libbind9.la
-/usr/local/lib/libbind9.so
-/usr/local/lib/libdns-9.18.21.so
+/usr/local/lib/libdns-9.20.0.so
 /usr/local/lib/libdns.la
 /usr/local/lib/libdns.so
-/usr/local/lib/libirs-9.18.21.so
-/usr/local/lib/libirs.la
-/usr/local/lib/libirs.so
-/usr/local/lib/libisc-9.18.21.so
+/usr/local/lib/libisc-9.20.0.so
 /usr/local/lib/libisc.la
 /usr/local/lib/libisc.so
-/usr/local/lib/libisccc-9.18.21.so
+/usr/local/lib/libisccc-9.20.0.so
 /usr/local/lib/libisccc.la
 /usr/local/lib/libisccc.so
-/usr/local/lib/libisccfg-9.18.21.so
+/usr/local/lib/libisccfg-9.20.0.so
 /usr/local/lib/libisccfg.la
 /usr/local/lib/libisccfg.so
-/usr/local/lib/libns-9.18.21.so
+/usr/local/lib/libns-9.20.0.so
 /usr/local/lib/libns.la
 /usr/local/lib/libns.so
 /usr/local/sbin/ddns-confgen
@@ -285,6 +280,7 @@
 /usr/local/share/man/man1/dnssec-importkey.1.zst
 /usr/local/share/man/man1/dnssec-keyfromlabel.1.zst
 /usr/local/share/man/man1/dnssec-keygen.1.zst
+/usr/local/share/man/man1/dnssec-ksr.1.zst
 /usr/local/share/man/man1/dnssec-revoke.1.zst
 /usr/local/share/man/man1/dnssec-settime.1.zst
 /usr/local/share/man/man1/dnssec-signzone.1.zst
diff --git a/manifest/x86_64/b/bind.filelist b/manifest/x86_64/b/bind.filelist
index f4581aef1b..44ab5bfb3f 100644
--- a/manifest/x86_64/b/bind.filelist
+++ b/manifest/x86_64/b/bind.filelist
@@ -6,6 +6,7 @@
 /usr/local/bin/dnssec-importkey
 /usr/local/bin/dnssec-keyfromlabel
 /usr/local/bin/dnssec-keygen
+/usr/local/bin/dnssec-ksr
 /usr/local/bin/dnssec-revoke
 /usr/local/bin/dnssec-settime
 /usr/local/bin/dnssec-signzone
@@ -20,9 +21,6 @@
 /usr/local/bin/nsec3hash
 /usr/local/bin/nslookup
 /usr/local/bin/nsupdate
-/usr/local/etc/bind.keys
-/usr/local/include/bind9/check.h
-/usr/local/include/bind9/getaddresses.h
 /usr/local/include/dns/acl.h
 /usr/local/include/dns/adb.h
 /usr/local/include/dns/badcache.h
@@ -52,7 +50,6 @@
 /usr/local/include/dns/edns.h
 /usr/local/include/dns/enumclass.h
 /usr/local/include/dns/enumtype.h
-/usr/local/include/dns/events.h
 /usr/local/include/dns/fixedname.h
 /usr/local/include/dns/forward.h
 /usr/local/include/dns/geoip.h
@@ -63,15 +60,16 @@
 /usr/local/include/dns/keydata.h
 /usr/local/include/dns/keyflags.h
 /usr/local/include/dns/keymgr.h
+/usr/local/include/dns/keystore.h
 /usr/local/include/dns/keytable.h
 /usr/local/include/dns/keyvalues.h
 /usr/local/include/dns/librpz.h
 /usr/local/include/dns/log.h
-/usr/local/include/dns/lookup.h
 /usr/local/include/dns/master.h
 /usr/local/include/dns/masterdump.h
 /usr/local/include/dns/message.h
 /usr/local/include/dns/name.h
+/usr/local/include/dns/nametree.h
 /usr/local/include/dns/ncache.h
 /usr/local/include/dns/nsec.h
 /usr/local/include/dns/nsec3.h
@@ -80,6 +78,7 @@
 /usr/local/include/dns/order.h
 /usr/local/include/dns/peer.h
 /usr/local/include/dns/private.h
+/usr/local/include/dns/qp.h
 /usr/local/include/dns/rbt.h
 /usr/local/include/dns/rcode.h
 /usr/local/include/dns/rdata.h
@@ -90,6 +89,7 @@
 /usr/local/include/dns/rdataslab.h
 /usr/local/include/dns/rdatastruct.h
 /usr/local/include/dns/rdatatype.h
+/usr/local/include/dns/remote.h
 /usr/local/include/dns/request.h
 /usr/local/include/dns/resolver.h
 /usr/local/include/dns/result.h
@@ -97,7 +97,6 @@
 /usr/local/include/dns/rpz.h
 /usr/local/include/dns/rriterator.h
 /usr/local/include/dns/rrl.h
-/usr/local/include/dns/sdb.h
 /usr/local/include/dns/sdlz.h
 /usr/local/include/dns/secalg.h
 /usr/local/include/dns/secproto.h
@@ -106,8 +105,8 @@
 /usr/local/include/dns/stats.h
 /usr/local/include/dns/time.h
 /usr/local/include/dns/tkey.h
+/usr/local/include/dns/trace.h
 /usr/local/include/dns/transport.h
-/usr/local/include/dns/tsec.h
 /usr/local/include/dns/tsig.h
 /usr/local/include/dns/ttl.h
 /usr/local/include/dns/types.h
@@ -122,11 +121,9 @@
 /usr/local/include/dst/dst.h
 /usr/local/include/dst/gssapi.h
 /usr/local/include/irs/resconf.h
-/usr/local/include/isc/aes.h
-/usr/local/include/isc/align.h
-/usr/local/include/isc/app.h
+/usr/local/include/isc/ascii.h
 /usr/local/include/isc/assertions.h
-/usr/local/include/isc/astack.h
+/usr/local/include/isc/async.h
 /usr/local/include/isc/atomic.h
 /usr/local/include/isc/attributes.h
 /usr/local/include/isc/backtrace.h
@@ -134,34 +131,37 @@
 /usr/local/include/isc/base32.h
 /usr/local/include/isc/base64.h
 /usr/local/include/isc/buffer.h
-/usr/local/include/isc/cmocka.h
 /usr/local/include/isc/commandline.h
 /usr/local/include/isc/condition.h
 /usr/local/include/isc/counter.h
 /usr/local/include/isc/crc64.h
-/usr/local/include/isc/deprecated.h
 /usr/local/include/isc/dir.h
+/usr/local/include/isc/dnsstream.h
 /usr/local/include/isc/endian.h
+/usr/local/include/isc/entropy.h
 /usr/local/include/isc/errno.h
 /usr/local/include/isc/error.h
-/usr/local/include/isc/event.h
-/usr/local/include/isc/eventclass.h
 /usr/local/include/isc/file.h
+/usr/local/include/isc/fips.h
 /usr/local/include/isc/formatcheck.h
 /usr/local/include/isc/fuzz.h
-/usr/local/include/isc/glob.h
+/usr/local/include/isc/getaddresses.h
 /usr/local/include/isc/hash.h
+/usr/local/include/isc/hashmap.h
 /usr/local/include/isc/heap.h
 /usr/local/include/isc/hex.h
+/usr/local/include/isc/histo.h
 /usr/local/include/isc/hmac.h
 /usr/local/include/isc/ht.h
 /usr/local/include/isc/httpd.h
 /usr/local/include/isc/interfaceiter.h
 /usr/local/include/isc/iterated_hash.h
+/usr/local/include/isc/job.h
 /usr/local/include/isc/lang.h
 /usr/local/include/isc/lex.h
 /usr/local/include/isc/list.h
 /usr/local/include/isc/log.h
+/usr/local/include/isc/loop.h
 /usr/local/include/isc/magic.h
 /usr/local/include/isc/managers.h
 /usr/local/include/isc/md.h
@@ -171,17 +171,17 @@
 /usr/local/include/isc/mutexblock.h
 /usr/local/include/isc/net.h
 /usr/local/include/isc/netaddr.h
-/usr/local/include/isc/netdb.h
 /usr/local/include/isc/netmgr.h
 /usr/local/include/isc/netscope.h
 /usr/local/include/isc/nonce.h
-/usr/local/include/isc/offset.h
 /usr/local/include/isc/once.h
 /usr/local/include/isc/os.h
+/usr/local/include/isc/overflow.h
 /usr/local/include/isc/parseint.h
-/usr/local/include/isc/pool.h
+/usr/local/include/isc/pause.h
 /usr/local/include/isc/portset.h
-/usr/local/include/isc/print.h
+/usr/local/include/isc/proxy2.h
+/usr/local/include/isc/queue.h
 /usr/local/include/isc/quota.h
 /usr/local/include/isc/radix.h
 /usr/local/include/isc/random.h
@@ -189,38 +189,39 @@
 /usr/local/include/isc/refcount.h
 /usr/local/include/isc/regex.h
 /usr/local/include/isc/region.h
-/usr/local/include/isc/resource.h
 /usr/local/include/isc/result.h
 /usr/local/include/isc/rwlock.h
 /usr/local/include/isc/safe.h
 /usr/local/include/isc/serial.h
+/usr/local/include/isc/signal.h
 /usr/local/include/isc/siphash.h
 /usr/local/include/isc/sockaddr.h
-/usr/local/include/isc/stat.h
+/usr/local/include/isc/spinlock.h
 /usr/local/include/isc/stats.h
-/usr/local/include/isc/stdatomic.h
 /usr/local/include/isc/stdio.h
 /usr/local/include/isc/stdtime.h
 /usr/local/include/isc/strerr.h
 /usr/local/include/isc/string.h
 /usr/local/include/isc/symtab.h
 /usr/local/include/isc/syslog.h
-/usr/local/include/isc/task.h
-/usr/local/include/isc/taskpool.h
 /usr/local/include/isc/thread.h
+/usr/local/include/isc/tid.h
 /usr/local/include/isc/time.h
 /usr/local/include/isc/timer.h
 /usr/local/include/isc/tls.h
 /usr/local/include/isc/tm.h
 /usr/local/include/isc/types.h
+/usr/local/include/isc/urcu.h
 /usr/local/include/isc/url.h
 /usr/local/include/isc/utf8.h
 /usr/local/include/isc/util.h
+/usr/local/include/isc/uv.h
+/usr/local/include/isc/work.h
+/usr/local/include/isc/xml.h
 /usr/local/include/isccc/alist.h
 /usr/local/include/isccc/base64.h
 /usr/local/include/isccc/cc.h
 /usr/local/include/isccc/ccmsg.h
-/usr/local/include/isccc/events.h
 /usr/local/include/isccc/sexpr.h
 /usr/local/include/isccc/symtab.h
 /usr/local/include/isccc/symtype.h
@@ -228,13 +229,13 @@
 /usr/local/include/isccc/util.h
 /usr/local/include/isccfg/aclconf.h
 /usr/local/include/isccfg/cfg.h
+/usr/local/include/isccfg/check.h
 /usr/local/include/isccfg/duration.h
 /usr/local/include/isccfg/grammar.h
 /usr/local/include/isccfg/kaspconf.h
 /usr/local/include/isccfg/log.h
 /usr/local/include/isccfg/namedconf.h
 /usr/local/include/ns/client.h
-/usr/local/include/ns/events.h
 /usr/local/include/ns/hooks.h
 /usr/local/include/ns/interfacemgr.h
 /usr/local/include/ns/listenlist.h
@@ -251,25 +252,19 @@
 /usr/local/lib64/bind/filter-a.so
 /usr/local/lib64/bind/filter-aaaa.la
 /usr/local/lib64/bind/filter-aaaa.so
-/usr/local/lib64/libbind9-9.18.21.so
-/usr/local/lib64/libbind9.la
-/usr/local/lib64/libbind9.so
-/usr/local/lib64/libdns-9.18.21.so
+/usr/local/lib64/libdns-9.20.0.so
 /usr/local/lib64/libdns.la
 /usr/local/lib64/libdns.so
-/usr/local/lib64/libirs-9.18.21.so
-/usr/local/lib64/libirs.la
-/usr/local/lib64/libirs.so
-/usr/local/lib64/libisc-9.18.21.so
+/usr/local/lib64/libisc-9.20.0.so
 /usr/local/lib64/libisc.la
 /usr/local/lib64/libisc.so
-/usr/local/lib64/libisccc-9.18.21.so
+/usr/local/lib64/libisccc-9.20.0.so
 /usr/local/lib64/libisccc.la
 /usr/local/lib64/libisccc.so
-/usr/local/lib64/libisccfg-9.18.21.so
+/usr/local/lib64/libisccfg-9.20.0.so
 /usr/local/lib64/libisccfg.la
 /usr/local/lib64/libisccfg.so
-/usr/local/lib64/libns-9.18.21.so
+/usr/local/lib64/libns-9.20.0.so
 /usr/local/lib64/libns.la
 /usr/local/lib64/libns.so
 /usr/local/sbin/ddns-confgen
@@ -285,6 +280,7 @@
 /usr/local/share/man/man1/dnssec-importkey.1.zst
 /usr/local/share/man/man1/dnssec-keyfromlabel.1.zst
 /usr/local/share/man/man1/dnssec-keygen.1.zst
+/usr/local/share/man/man1/dnssec-ksr.1.zst
 /usr/local/share/man/man1/dnssec-revoke.1.zst
 /usr/local/share/man/man1/dnssec-settime.1.zst
 /usr/local/share/man/man1/dnssec-signzone.1.zst
diff --git a/packages/bind.rb b/packages/bind.rb
index b9c98cf468..33be0d2f50 100644
--- a/packages/bind.rb
+++ b/packages/bind.rb
@@ -3,18 +3,18 @@ require 'buildsystems/autotools'
 class Bind < Autotools
   description 'BIND is open source software that enables you to publish your Domain Name System (DNS) information on the Internet, and to resolve DNS queries for your users.'
   homepage 'https://www.isc.org/bind/'
-  version '9.18.21'
+  version '9.20.0'
   license 'Apache-2.0, BSD, BSD-2, GPL-2, HPND, ISC and MPL-2.0'
   compatibility 'all'
   source_url "https://ftp.isc.org/isc/bind9/#{version}/bind-#{version}.tar.xz"
-  source_sha256 'a556be22505d9ea4f9c6717aee9c549739c68498aff3ca69035787ecc648fec5'
+  source_sha256 'cc580998017b51f273964058e8cb3aa5482bc785243dea71e5556ec565a13347'
   binary_compression 'tar.zst'
 
   binary_sha256({
-    aarch64: 'b6041be3e1a2da68142d25e5322055e59776c22f3be3963bfec8f98b99ca516f',
-     armv7l: 'b6041be3e1a2da68142d25e5322055e59776c22f3be3963bfec8f98b99ca516f',
-       i686: '899bad21b6ebc0ff3928282943cde4c7c332da860cf5e652fc0ecefb532d80ae',
-     x86_64: '2ace6554897a788547b015c55e2bdf7279c02e1cb3bbfb969c1c6f6aa6a63169'
+    aarch64: '271147a451d6a6c81231a7d1e2e74480f8e24e4cf26fc01dc9d4b40c918cf980',
+     armv7l: '271147a451d6a6c81231a7d1e2e74480f8e24e4cf26fc01dc9d4b40c918cf980',
+       i686: '8c4401d053912ccd13417d97edbaa8ba3a1c5c5bd6db0653f71d216f0d251f0b',
+     x86_64: '0e0bf08ec93ad2ca55f2e0393882eec31f70185adf0a0c1a93a641d436d95425'
   })
 
   depends_on 'e2fsprogs' # R