What is the named daemon and why is it running?

Solution 1:

/usr/sbin/named is provided by the bind9 package. bind9 is a DNS server. If this is a VPS, it's quite possible you need that package. But you can probably remove it and see what happens, and then put it back if you need it.

sudo apt-get remove bind9

The removal might want to remove other packages, including quite important ones for you. So make sure to pay attention to that before proceeding with the removal. This may also reveal why bind9 is installed--it may be a dependency of other packages that you are using.

Please note that I'm not saying you should be doing this--only that you probably can, if you want. If you do this, then even if the server stops working properly, you'll probably still be able to access the Internet to download and reinstall the package. However, it's possible that you will not be able to, or that you will not be able to re-SSH to the server if your connection gets broken. (Thanks to tgm4883 for pointing this out.)

You can substantially mitigate the risk of problems by making sure you have the necessary .deb files cached to reinstall bind9 and its dependencies:

sudo apt-get --download-only --reinstall install bind9

If you've run that recently, and not run sudo apt-get clean since, then you should be able to reinstall bind9 even if you cannot connect to the Ubuntu download servers after removing it:

sudo apt-get install bind9

You may need to run sudo apt-get update before either of the above two commands.

If you don't want to remove bind9 at all, but just see what would be removed if you did (which may reveal why it's installed), you can simulate its removal:

apt-get -s remove bind9