README revision 1c9afb96b58f450f8861007e5135dee1447e680f
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber BIND version 9 is a major rewrite of nearly all aspects of the
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber underlying BIND architecture. Some of the important features of
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber - DNS Security
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber DNSSEC (signed zones)
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber TSIG (signed DNS requests)
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber - IP version 6
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber Answers DNS queries on IPv6 sockets
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber IPv6 resource records (A6, DNAME, etc.)
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber Bitstring Labels
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber Experimental IPv6 Resolver Library
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber - DNS Protocol Enhancements
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber IXFR, DDNS, Notify, EDNS0
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber Improved standards conformance
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber One server process can provide multiple "views" of
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber the DNS namespace, e.g. an "inside" view to certain
61ba7fe64ad8f06b6a836bd5d3eddb15dc7c194aDaniel Lezcano clients, and an "outside" view to others.
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber - Multiprocessor Support
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber - Improved Portability Architecture
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber BIND version 9 development has been underwritten by the following
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber organizations:
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber Sun Microsystems, Inc.
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber Hewlett Packard
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber Compaq Computer Corporation
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater Process Software Corporation
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater Silicon Graphics, Inc.
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater Network Associates, Inc.
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano U.S. Defense Information Systems Agency
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen USENIX Association
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen Stichting NLnet - NLnet Foundation
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen Nominum, Inc.
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight EngenBIND 9.2.0rc1
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen BIND 9.2.0rc1 is a release candidate for BIND 9.2.0.
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen BIND 9.2.0 has a number of new features over 9.1,
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen - The size of the cache can now be limited using the
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater "max-cache-size" option.
9be53773792fc9e8bd173edc3b7ac7e144875387Serge Hallyn - The server can now automatically convert RFC1886-style
724e753cb0055b84f896522e8c5ec45ad996c195Michel Normand recursive lookup requests into RFC2874-style lookups,
563f2f2ccd2891661836c96f92f047a735355c1bDaniel Lezcano when enabled using the new option "allow-v6-synthesis".
0ae4f887a40947d6a85e17927224b982bcd35047Greg Kurz This allows stub resolvers that support AAAA records
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano but not A6 record chains or binary labels to perform
b0a33c1eb65d2c87e886c740a0dadd8ad5f8d87ddlezcano lookups in domains that make use of these IPv6 DNS
925aaa312480da5584b2e5e8f963ce1d85b97232legoater - Performance has been improved.
b2718c72a7f6ffed1fe359f49dba92f067207afadlezcano - The man pages now use the more portable "man" macros
576f946d784dbe7bf9008565647bde81ed064dc2dlezcano rather than the "mandoc" macros, and are installed
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano by "make install".
3c22086fe242c1cbb51e1df4add3052d3618c2caCedric Le Goater - The named.conf parser has been completely rewritten.
5bb3ba8acd29d11c92845b06a1f0852b642f02c7Daniel Lezcano It now supports "include" directives in more
13954cce6335d9a642ebd9859c60a2f01c4513ecDaniel Lezcano places such as inside "view" statememnts, and it no
df83bf6f97e5ddbe50a31aaa75078014d52c0288Daniel Lezcano longer has any reserved words.
35d2c3e71d5e7ada9878e9cb8f6039f0b02b3458Daniel Lezcano - The "rndc status" command is now implemented.
e073270504f2f5c5df90bfcc4917d2d20b73d1e7Christian Seiler - rndc can now be configured automatically.
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano - A BIND 8 compatible stub resolver library is now
1c8e4ee0a08638e35732a0ddd0052ecde49fbecbStéphane Graber - OpenSSL has been removed from the distribution. This
13832f48ed30e150f5f6cebab7b78b2c99cbcb05dlezcano means that to use DNSSEC, OpenSSL must be installed and
b3357a6f5b90f1e342c270de66491afc412c1cf7Daniel Lezcano the --with-openssl option must be supplied to configure.
c8dee0f165d19271bb0a83069dcbb65fbc02e73fSerge Hallyn This does not apply to the use of TSIG, which does not
b0a33c1eb65d2c87e886c740a0dadd8ad5f8d87ddlezcano require OpenSSL.
563f2f2ccd2891661836c96f92f047a735355c1bDaniel Lezcano - The source distribution now builds on Windows NT/2000.
565c2d76a30d29ecce76ca595cf79dd1e528399eStéphane Graber See win32utils/readme1.txt and win32utils/win32-build.txt
95ee490bbdb97ab2b4f1dfa63a0a26e0dd1c2f17Stéphane Graber This distribution also includes a new lightweight stub
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen resolver library and associated resolver daemon that fully
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen support forward and reverse lookups of both IPv4 and IPv6
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano addresses. This library is considered experimental and
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn is not a complete replacement for the BIND 8 resolver library.
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn Applications that use the BIND 8 res_* functions to perform
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn DNS lookups or dynamic updates still need to be linked against
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn the BIND 8 libraries. For DNS lookups, they can also use the
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber new "getrrsetbyname()" API.
4ba0d9af63fbf7e9acfa068a1fe36b3d287b9c6bStéphane Graber BIND 9.2 is capable of acting as an authoritative server
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber for DNSSEC secured zones. This functionality is believed to
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber be stable and complete except for lacking support for wildcard
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber records in secure zones.
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber When acting as a caching server, BIND 9.2 can be configured
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber to perform DNSSEC secure resolution on behalf of its clients.
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber This part of the DNSSEC implementation is still considered
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber experimental. For detailed information about the state of the
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber DNSSEC implementation, see the file doc/misc/dnssec.
9c7c90377cdc655b7d853a43dd93de439a4c1677Daniel Lezcano There are a few known bugs:
1c41ddcb4af633ac906f1d7c9ef1dc7d121d7850Greg Kurz On some systems, IPv6 and IPv4 sockets interact in
2a59a68183e55e38beedb6442938e31eb7d4749cSerge Hallyn unexpected ways. For details, see doc/misc/ipv6.
72d0e1cb2facaa4b8ba2f15e311d6bb9491badb7Stéphane Graber To reduce the impact of these problems, the server
5e1e7aaf1e244405b813c0f9e20db2fc9e7f4d10Serge Hallyn no longer listens for requests on IPv6 addresses
0a18b5458b6d0fcad9a82b96f99035254af50c7aSerge Hallyn by default. If you need to accept DNS queries over
070a4b8e68a6bf9a96c24ded47974388c83f1d57Serge Hallyn IPv6, you must specify "listen-on-v6 { any; };"
070a4b8e68a6bf9a96c24ded47974388c83f1d57Serge Hallyn in the named.conf options statement.
6e16552de7cef98827c7a699464008e2cd9e2c32Christian Seiler FreeBSD prior to 4.2 (and 4.2 if running as non-root)
b9f94fc1e8afdf814ee72cb01a5d298dfa4a7d75Daniel Lezcano and OpenBSD prior to 2.8 log messages like
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn "fcntl(8, F_SETFL, 4): Inappropriate ioctl for device".
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn This is due to a bug in "/dev/random" and impacts the
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn server's DNSSEC support.
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn --with-libtool does not work on AIX.
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn A bug in the Windows 2000 DNS server can cause zone transfers
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn from a BIND 9 server to a W2K server to fail. For details,
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen see the "Zone Transfers" section in doc/misc/migration.
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen For a detailed list of user-visible changes from
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen previous releases, see the CHANGES file.
8f2c3a702aae3545b631a2b4c6db99f87528553aSerge Hallyn BIND 9 currently requires a UNIX system with an ANSI C compiler,
12dcc8928f33fa0d45357d30bca532f9a35327a5Jiri Slaby basic POSIX support, and a 64 bit integer type.
8f2c3a702aae3545b631a2b4c6db99f87528553aSerge Hallyn We've had successful builds and tests on the following systems:
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater COMPAQ Tru64 UNIX 4.0D
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater COMPAQ Tru64 UNIX 5 (with IPv6 EAK)
67c4fe9b2dc41b843dbac1b3b38ea96e4d2b6a07Stéphane Graber FreeBSD 3.4-STABLE, 3.5, 4.0, 4.1
20d2e91bd3495f4368396cd13a0507d716703286Stéphane Graber Red Hat Linux 6.0, 6.1, 6.2, 7.0
20d2e91bd3495f4368396cd13a0507d716703286Stéphane Graber Solaris 2.6, 7, 8
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn Additionally, we have unverified reports of success building
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn previous versions of BIND 9 from users of the following systems: