README revision 00b1381f1384a8a3df80e467b2ef7a7692d0d567
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley BIND version 9 is a major rewrite of nearly all aspects of the
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson underlying BIND architecture. Some of the important features of
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - DNS Security
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson DNSSEC (signed zones)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson TSIG (signed DNS requests)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - IP version 6
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Answers DNS queries on IPv6 sockets
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson IPv6 resource records (A6, DNAME, etc.)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Bitstring Labels
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Experimental IPv6 Resolver Library
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - DNS Protocol Enhancements
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson IXFR, DDNS, Notify, EDNS0
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Improved standards conformance
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson One server process can provide multiple "views" of
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson the DNS namespace, e.g. an "inside" view to certain
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson clients, and an "outside" view to others.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - Multiprocessor Support
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - Improved Portability Architecture
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley BIND version 9 development has been underwritten by the following
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley organizations:
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Sun Microsystems, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Hewlett Packard
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Compaq Computer Corporation
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Process Software Corporation
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Silicon Graphics, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Network Associates, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson U.S. Defense Information Systems Agency
70680fa51b0147c726b939b72b2420249429756aBob Halley USENIX Association
70680fa51b0147c726b939b72b2420249429756aBob Halley Stichting NLnet - NLnet Foundation
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson This is a snapshot of the development source tree that
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson will become BIND 9.2. Bind 9.2 will have a number of
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson new features over 9.1, including:
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson - The size of the cache can now be limited using the
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson "max-cache-size" option.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson - The server can now automatically convert RFC1886-style
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson recursive lookup requests into RFC2874-style lookups,
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson when enabled using the new option "allow-v6-synthesis".
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson This allows stub resolvers that support AAAA records
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson but not A6 record chains or binary labels to perform
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson lookups in domains that make use of these IPv6 DNS
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson - Performance has been improved.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson - The man pages now use the more portable "man" macros
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson rather than the "mandoc" macros, and are installed
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson by "make install".
18b393da86f452303036b5fe6feb6c1e5f6b2c02Andreas Gustafsson - The "rndc status" command is now implemented.
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson An IPv6 capable stub resolver based on the BIND 8 resolver
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson code base and fully backwards compatible with existing BIND 8
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson based resolvers is being developed and will be integrated into
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson the BIND 9 distribution when completed.
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson This distribution already includes a new lightweight stub
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson resolver library and associated resolver daemon that fully
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson support forward and reverse lookups of both IPv4 and IPv6
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson addresses. This library is still considered experimental and
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson is not a complete replacement for the BIND 8 resolver library.
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson Applications that use the BIND 8 res_* functions to perform
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson DNS lookups or dynamic updates still need to be linked against
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson the BIND 8 libraries. For DNS lookups, they can also use the
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson new "getrrsetbyname()" API.
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson BIND 9.2 is capable of acting as an authoritative server
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson for DNSSEC secured zones. This functionality is believed to
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson be stable and complete except for lacking support for wildcard
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson records in secure zones.
4d5f44e7933f4cb691e8f4cf3b4b5f61c27e2b1cAndreas Gustafsson When acting as a caching server, BIND 9.2 can be configured
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson to perform DNSSEC secure resolution on behalf of its clients.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson This part of the DNSSEC implementation is still considered
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson experimental. For detailed information about the state of the
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson DNSSEC implementation, see the file doc/misc/dnssec.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson There are a few known bugs:
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson On some systems, IPv6 and IPv4 sockets interact in
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson unexpected ways. For details, see doc/misc/ipv6.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson To reduce the impact of these problems, the server
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson no longer listens for requests on IPv6 addresses
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson by default. If you need to accept DNS queries over
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson IPv6, you must specify "listen-on-v6 { any; };"
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson in the named.conf options statement.
73edea95c744a2a9052852d0a63b449599062b30Brian Wellington FreeBSD prior to 4.2 (and 4.2 if running as non-root)
73edea95c744a2a9052852d0a63b449599062b30Brian Wellington and OpenBSD prior to 2.8 log messages like
73edea95c744a2a9052852d0a63b449599062b30Brian Wellington "fcntl(8, F_SETFL, 4): Inappropriate ioctl for device".
73edea95c744a2a9052852d0a63b449599062b30Brian Wellington This is due to a bug in "/dev/random" and impacts the
73edea95c744a2a9052852d0a63b449599062b30Brian Wellington server's DNSSEC support.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson --with-libtool does not work on AIX.
e5256e34b4a26a26088b2dc5ca621b42c0750256Andreas Gustafsson For a detailed list of user-visible changes from
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence previous releases, see the CHANGES file.
0befd994cc856e56aca2fc30940e61f627d06105Mark AndrewsInteroperability
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews Zone transfers may fail due to named-xfer not
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews understanding the "transfer-format many-answers;". All such
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews version of BIND 4 have known security flaws and we do not
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews recommend that you run such versions. If you can't upgrade
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews the server you can set "transfer-format one-answer;" for this
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews Microsoft Windows 2000 DNS:
357b0957d15880c04ddaddabea0e86edb55350c1Brian Wellington Zone transfers sometimes fail to Windows 2000 DNS
357b0957d15880c04ddaddabea0e86edb55350c1Brian Wellington servers due to a bug in the Windows 2000 DNS server where DNS
357b0957d15880c04ddaddabea0e86edb55350c1Brian Wellington messages larger than 16K are not handled properly. There will
357b0957d15880c04ddaddabea0e86edb55350c1Brian Wellington be a hot fix available from Microsoft to address this issue. In
357b0957d15880c04ddaddabea0e86edb55350c1Brian Wellington the meantime set "transfer-format one-answer;" for this server.
0befd994cc856e56aca2fc30940e61f627d06105Mark Andrews [As of May 4 2001 the hotfix was still being prepared]
8db66dc4eb654a2e295eaeab3aaf96e24c9ae7b7Bob Halley BIND 9 currently requires a UNIX system with an ANSI C compiler,
76860484adfbadeecfeb3a7132ede916ee2102ffBrian Wellington basic POSIX support, and a 64 bit integer type.
501da430e2f16f496f8e8d1b57ab77f78428c682David Lawrence We've had successful builds and tests on the following systems:
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley COMPAQ Tru64 UNIX 4.0D
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson COMPAQ Tru64 UNIX 5 (with IPv6 EAK)
2ecf7f63a01ca8a96d76f7d2d4de0fa37f3e3fabOlafur Gudmundsson FreeBSD 3.4-STABLE, 3.5, 4.0, 4.1
b3d8bec59201fd0edbe38f909bda5014d7776b89Brian Wellington Red Hat Linux 6.0, 6.1, 6.2, 7.0
997e3113b7c91ec94e6274d31735f122e6e8209cAndreas Gustafsson Solaris 2.6, 7, 8
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Additionally, we have unverified reports of success building
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson previous versions of BIND 9 from users of the following systems:
145faf872da76642be0456cb8e6305b186833667Brian Wellington Slackware Linux 7.x
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson OpenBSD 2.6, 2.8, -current
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence UnixWare 7.1.1
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley To build, just
8eb5937a7e4cb8b5d7fcc1be17d34fdd014bbbb1Andreas Gustafsson Do not use a parallel "make".
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Several environment variables that can be set before running
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson configure will affect compilation:
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson The C compiler to use. configure tries to figure
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson out the right one for supported systems.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson C compiler flags. Defaults to include -g and/or -O2
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson as supported by the compiler.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson System header file directories. Can be used to specify
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson where add-on thread or IPv6 support is, for example.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Defaults to empty string.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Any additional preprocessor symbols you want defined.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Defaults to empty string.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson To build shared libraries, specify "--with-libtool" on the
69930116e30137705d3b87d05cbfbc5712386fdeAndreas Gustafsson configure command line.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson On some platforms, BIND 9 can be built with multithreading
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson support, allowing it to take advantage of multiple CPUs.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson You can specify whether to build a multithreaded BIND 9
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson by specifying "--enable-threads" or "--disable-threads"
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson on the configure command line. The default is operating
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson system dependent.
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson If your operating system has integrated support for IPv6, it
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson will be used automatically. If you have installed KAME IPv6
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson separately, use "--with-kame[=PATH]" to specify its location.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley "make install" will install "named" and the various BIND 9 libraries.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley By default, installation is into /usr/local, but this can be changed
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley with the "--prefix" option when running "configure".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson You may specify the option "--sysconfdir" to set the directory
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson where configuration files like "named.conf" go by default,
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson and "--localstatedir" to set the default parent directory
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson of "run/named.pid". For backwards compatibility with BIND 8,
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson --sysconfdir defaults to "/etc" and --localstatedir defaults to
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson "/var" if no --prefix option is given. If there is a --prefix
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson option, sysconfdir defaults to "$prefix/etc" and localstatedir
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson defaults to "$prefix/var".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson To see additional configure options, run "configure --help".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson Note that the help message does not reflect the BIND 8
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson compatibility defaults for sysconfdir and localstatedir.
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley If you're planning on making changes to the BIND 9 source, you
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley should also "make depend". If you're using Emacs, you might find
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley "make tags" helpful.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Building with gcc is not supported, unless gcc is the vendor's usual
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley compiler (e.g. the various BSD systems, Linux).
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson A limited test suite can be run with "make test". Many of
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson the tests require you to configure a set of virtual IP addresses
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson on your system, and some require Perl; see bin/tests/system/README
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson The BIND 9 Administrator Reference Manual is included with the
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson source distribution in DocBook XML and HTML format, in the
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson Some of the programs in the BIND 9 distribution have man pages
ff1e17749c7bf976f7127467c1816abeb3f4b998Brian Wellington in their directories. In particular, the command line
ff1e17749c7bf976f7127467c1816abeb3f4b998Brian Wellington options of "named" are documented in /bin/named/named.8.
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson There is now also a set of man pages for the lwres library.
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson If you are upgrading from BIND 8, please read the migration
672a41b5fef7722803645c1f0ca132972f0f940aAndreas Gustafsson notes in doc/misc/migration. If you are upgrading from
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas GustafssonBug Reports and Mailing Lists
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Bugs reports should be sent to
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley bind9-bugs@isc.org
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley To join the BIND 9 Users mailing list, send mail to
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley bind9-users-request@isc.org
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley If you're planning on making changes to the BIND 9 source
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley code, you might want to join the BIND 9 Workers mailing list.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Send mail to
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley bind9-workers-request@isc.org