what are you using instead of bind9?

[Lee <ler762@gmail.com>]

bind9 version 9.10.3-P4-Debian doesn't like my rpz configuration (that
works on 9.11.5-P1)

Before I get into figuring out how to install a backport, it looks
like bind9 isn't the preferred answer anymore - see
https://qa.debian.org/popcon-graph.php?packages=bind9&show_installed=on&want_legend=on&want_ticks=on&from_date=2010-01-01&to_date=2019-01-01&hlght_date=&date_fmt=%25Y-%25m&beenhere=1

What are people using these days to
1. have dnssec enabled lookups
2. filter external dns answers

Thanks,
Lee