README revision 260be76e8e176872d61949a5eaa1e98cafe33a88
afe3ab588a6b2992efe5a9b22ed038545ba3cdbfLennart PoetteringBIND 9
c343be283b7152554bac0c02493a4e1759c163f7Kay Sievers
b3ae710c251d0ce5cf2cef63208e325497b5e323Zbigniew Jędrzejewski-Szmek BIND version 9 is a major rewrite of nearly all aspects of the
b3ae710c251d0ce5cf2cef63208e325497b5e323Zbigniew Jędrzejewski-Szmek underlying BIND architecture. Some of the important features of
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers BIND 9 are:
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers - DNS Security
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers DNSSEC (signed zones)
afe3ab588a6b2992efe5a9b22ed038545ba3cdbfLennart Poettering TSIG (signed DNS requests)
d19e85f0d474ed1882561b458d528cbae49f640eZbigniew Jędrzejewski-Szmek
d19e85f0d474ed1882561b458d528cbae49f640eZbigniew Jędrzejewski-Szmek - IP version 6
d19e85f0d474ed1882561b458d528cbae49f640eZbigniew Jędrzejewski-Szmek Answers DNS queries on IPv6 sockets
d19e85f0d474ed1882561b458d528cbae49f640eZbigniew Jędrzejewski-Szmek IPv6 resource records (AAAA)
d19e85f0d474ed1882561b458d528cbae49f640eZbigniew Jędrzejewski-Szmek Experimental IPv6 Resolver Library
3e495a6651609d0a45b62aab5c3ed5a3b40e11abZbigniew Jędrzejewski-Szmek
3e495a6651609d0a45b62aab5c3ed5a3b40e11abZbigniew Jędrzejewski-Szmek - DNS Protocol Enhancements
3e495a6651609d0a45b62aab5c3ed5a3b40e11abZbigniew Jędrzejewski-Szmek IXFR, DDNS, Notify, EDNS0
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering Improved standards conformance
f85857df75cfedbc0d10b8ca2400188dc8f4c22eLennart Poettering
f38afcd0c7f558ca5bf0854b42f8c6954f8ad7f3Lennart Poettering - Views
bafb15bab99887d1b6b8a35136531bac6c3876a6Lennart Poettering One server process can provide multiple "views" of
81429136905a6204875174b60a179333b7f3c9e4Kay Sievers the DNS namespace, e.g. an "inside" view to certain
e7b4d43ec3d5eb0099a3978f98a46f3c15443b23Lennart Poettering clients, and an "outside" view to others.
58f55364fa00a6a4706df2c4a01c6967f432e531Lennart Poettering
58f55364fa00a6a4706df2c4a01c6967f432e531Lennart Poettering - Multiprocessor Support
83a1ff25e5228b0a5b2cc942fd4f964d10bb73b0Zbigniew Jędrzejewski-Szmek
83a1ff25e5228b0a5b2cc942fd4f964d10bb73b0Zbigniew Jędrzejewski-Szmek - Improved Portability Architecture
83a1ff25e5228b0a5b2cc942fd4f964d10bb73b0Zbigniew Jędrzejewski-Szmek
83a1ff25e5228b0a5b2cc942fd4f964d10bb73b0Zbigniew Jędrzejewski-Szmek
83a1ff25e5228b0a5b2cc942fd4f964d10bb73b0Zbigniew Jędrzejewski-Szmek BIND version 9 development has been underwritten by the following
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering organizations:
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering Sun Microsystems, Inc.
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering Hewlett Packard
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering Compaq Computer Corporation
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering IBM
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering Process Software Corporation
124f2f9b6f66db00942b5882d68aa8fa8857865eLennart Poettering Silicon Graphics, Inc.
e06fe15b1f27d9d2317b25232d6df1e0a60dfce2Lennart Poettering Network Associates, Inc.
e06fe15b1f27d9d2317b25232d6df1e0a60dfce2Lennart Poettering U.S. Defense Information Systems Agency
61192f1d6954196d5066942241a024de4712243cLennart Poettering USENIX Association
61192f1d6954196d5066942241a024de4712243cLennart Poettering Stichting NLnet - NLnet Foundation
61192f1d6954196d5066942241a024de4712243cLennart Poettering Nominum, Inc.
6ce02c2a3a2aa888c3e074ae235d94808a165f9aLennart Poettering
6ce02c2a3a2aa888c3e074ae235d94808a165f9aLennart Poettering
66fa453fa176d2379d321afb1d20c549bbcb2715Lennart PoetteringBIND 9.3.0
66fa453fa176d2379d321afb1d20c549bbcb2715Lennart Poettering
449a22a58f0fa55d9d0fd2eb597272446e032acdLennart Poettering BIND 9.3.0 has a number of new features over 9.2,
449a22a58f0fa55d9d0fd2eb597272446e032acdLennart Poettering including:
449a22a58f0fa55d9d0fd2eb597272446e032acdLennart Poettering
449a22a58f0fa55d9d0fd2eb597272446e032acdLennart Poettering DNSSEC is now DS based (RFC 3658).
3d1137ac2b196cee345ac70fcdac675af142c8dcLennart Poettering See also RFC 3845, doc/draft/draft-ietf-dnsext-dnssec-*.
3d1137ac2b196cee345ac70fcdac675af142c8dcLennart Poettering
3d1137ac2b196cee345ac70fcdac675af142c8dcLennart Poettering DNSSEC lookaside validation.
3d1137ac2b196cee345ac70fcdac675af142c8dcLennart Poettering
60d17b74d714fa15d68639062dc2932d7b096229Lennart Poettering check-names is now implemented.
60d17b74d714fa15d68639062dc2932d7b096229Lennart Poettering rrset-order in more complete.
60d17b74d714fa15d68639062dc2932d7b096229Lennart Poettering
60d17b74d714fa15d68639062dc2932d7b096229Lennart Poettering IPv4/IPv6 transition support, dual-stack-servers.
60d17b74d714fa15d68639062dc2932d7b096229Lennart Poettering
2f653bded321fc2271edcda43d54fcc3e6c20dc9Lennart Poettering IXFR deltas can now be generated when loading master files,
2f653bded321fc2271edcda43d54fcc3e6c20dc9Lennart Poettering ixfr-from-differences.
2f653bded321fc2271edcda43d54fcc3e6c20dc9Lennart Poettering
2f653bded321fc2271edcda43d54fcc3e6c20dc9Lennart Poettering It is now possible to specify the size of a journal, max-journal-size.
2f653bded321fc2271edcda43d54fcc3e6c20dc9Lennart Poettering
2f653bded321fc2271edcda43d54fcc3e6c20dc9Lennart Poettering It is now possible to define a named set of master servers to be
ac749874bbb66c0e7eff15ca35d1616d29b6f3c1Lennart Poettering used in masters clause, masters.
ac749874bbb66c0e7eff15ca35d1616d29b6f3c1Lennart Poettering
ac749874bbb66c0e7eff15ca35d1616d29b6f3c1Lennart Poettering The advertised EDNS UDP size can now be set, edns-udp-size.
ac749874bbb66c0e7eff15ca35d1616d29b6f3c1Lennart Poettering
7d417f0f357c59cc1846aa832161e69a2328f699Lennart Poettering allow-v6-synthesis has been obsoleted.
7d417f0f357c59cc1846aa832161e69a2328f699Lennart Poettering
7d417f0f357c59cc1846aa832161e69a2328f699Lennart Poettering NOTE:
7d417f0f357c59cc1846aa832161e69a2328f699Lennart Poettering * Zones containing MD and MF will now be rejected.
7d417f0f357c59cc1846aa832161e69a2328f699Lennart Poettering * dig, nslookup name. now report "Not Implemented" as
7d417f0f357c59cc1846aa832161e69a2328f699Lennart Poettering NOTIMP rather than NOTIMPL. This will have impact on scripts
e342b74468870f2e4f3e15f7277a0adea42183caZbigniew Jędrzejewski-Szmek that are looking for NOTIMPL.
e342b74468870f2e4f3e15f7277a0adea42183caZbigniew Jędrzejewski-Szmek
e342b74468870f2e4f3e15f7277a0adea42183caZbigniew Jędrzejewski-Szmek libbind: corresponds to that from BIND 8.4.5.
036a4773ffa1152e4cabd27473450b8cc01e019bLennart Poettering
036a4773ffa1152e4cabd27473450b8cc01e019bLennart PoetteringBIND 9.2.0
036a4773ffa1152e4cabd27473450b8cc01e019bLennart Poettering
036a4773ffa1152e4cabd27473450b8cc01e019bLennart Poettering BIND 9.2.0 has a number of new features over 9.1,
a88abde72169ddc2df77df3fa5bed30725022253Lennart Poettering including:
a88abde72169ddc2df77df3fa5bed30725022253Lennart Poettering
a88abde72169ddc2df77df3fa5bed30725022253Lennart Poettering - The size of the cache can now be limited using the
a88abde72169ddc2df77df3fa5bed30725022253Lennart Poettering "max-cache-size" option.
f93b36affa5ac5710cd84bfb8ff0dafabe99fbf1Lennart Poettering
f93b36affa5ac5710cd84bfb8ff0dafabe99fbf1Lennart Poettering - The server can now automatically convert RFC1886-style
20760dcf5df7e253c21a51886cdb02dee612730bLennart Poettering recursive lookup requests into RFC2874-style lookups,
20760dcf5df7e253c21a51886cdb02dee612730bLennart Poettering when enabled using the new option "allow-v6-synthesis".
20760dcf5df7e253c21a51886cdb02dee612730bLennart Poettering This allows stub resolvers that support AAAA records
20760dcf5df7e253c21a51886cdb02dee612730bLennart Poettering but not A6 record chains or binary labels to perform
20760dcf5df7e253c21a51886cdb02dee612730bLennart Poettering lookups in domains that make use of these IPv6 DNS
df22b0bbfde403b3fa71f3c2f1e2ca38af946388Lennart Poettering features.
df22b0bbfde403b3fa71f3c2f1e2ca38af946388Lennart Poettering
df22b0bbfde403b3fa71f3c2f1e2ca38af946388Lennart Poettering - Performance has been improved.
df22b0bbfde403b3fa71f3c2f1e2ca38af946388Lennart Poettering
b9be39bfb4ed8e43a7c445831131e44be998eb32Lennart Poettering - The man pages now use the more portable "man" macros
b9be39bfb4ed8e43a7c445831131e44be998eb32Lennart Poettering rather than the "mandoc" macros, and are installed
b9be39bfb4ed8e43a7c445831131e44be998eb32Lennart Poettering by "make install".
b9be39bfb4ed8e43a7c445831131e44be998eb32Lennart Poettering
c05482281c32bd408808b14c5fb03e706e65602dLennart Poettering - The named.conf parser has been completely rewritten.
c05482281c32bd408808b14c5fb03e706e65602dLennart Poettering It now supports "include" directives in more
c05482281c32bd408808b14c5fb03e706e65602dLennart Poettering places such as inside "view" statements, and it no
e0ec8950935ce587935e299c22232fbf4a2664c9Lennart Poettering longer has any reserved words.
e0ec8950935ce587935e299c22232fbf4a2664c9Lennart Poettering
73cb77549536deab85d8d1261b5381e87d80ab23Lennart Poettering - The "rndc status" command is now implemented.
73cb77549536deab85d8d1261b5381e87d80ab23Lennart Poettering
73cb77549536deab85d8d1261b5381e87d80ab23Lennart Poettering - rndc can now be configured automatically.
84bef24dd3ad050bab8ecdcd130d0d9794005fa0Lennart Poettering
84bef24dd3ad050bab8ecdcd130d0d9794005fa0Lennart Poettering - A BIND 8 compatible stub resolver library is now
84bef24dd3ad050bab8ecdcd130d0d9794005fa0Lennart Poettering included in lib/bind.
477e75ef9ea6bb2e7e8cc76278c442942110f227Lennart Poettering
477e75ef9ea6bb2e7e8cc76278c442942110f227Lennart Poettering - OpenSSL has been removed from the distribution. This
477e75ef9ea6bb2e7e8cc76278c442942110f227Lennart Poettering means that to use DNSSEC, OpenSSL must be installed and
477e75ef9ea6bb2e7e8cc76278c442942110f227Lennart Poettering the --with-openssl option must be supplied to configure.
477e75ef9ea6bb2e7e8cc76278c442942110f227Lennart Poettering This does not apply to the use of TSIG, which does not
477e75ef9ea6bb2e7e8cc76278c442942110f227Lennart Poettering require OpenSSL.
7dfb0404b3b6882d582a571f61a52b2f56961675Lennart Poettering
7dfb0404b3b6882d582a571f61a52b2f56961675Lennart Poettering - The source distribution now builds on Windows NT/2000.
7dfb0404b3b6882d582a571f61a52b2f56961675Lennart Poettering See win32utils/readme1.txt and win32utils/win32-build.txt
7dfb0404b3b6882d582a571f61a52b2f56961675Lennart Poettering for details.
7dfb0404b3b6882d582a571f61a52b2f56961675Lennart Poettering
2bc39683c0cada86c9dc39e5f3d0ea475cf12e57Lennart Poettering This distribution also includes a new lightweight stub
2bc39683c0cada86c9dc39e5f3d0ea475cf12e57Lennart Poettering resolver library and associated resolver daemon that fully
2bc39683c0cada86c9dc39e5f3d0ea475cf12e57Lennart Poettering support forward and reverse lookups of both IPv4 and IPv6
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering addresses. This library is considered experimental and
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering is not a complete replacement for the BIND 8 resolver library.
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering Applications that use the BIND 8 res_* functions to perform
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering DNS lookups or dynamic updates still need to be linked against
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering the BIND 8 libraries. For DNS lookups, they can also use the
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering new "getrrsetbyname()" API.
2bc39683c0cada86c9dc39e5f3d0ea475cf12e57Lennart Poettering
2bc39683c0cada86c9dc39e5f3d0ea475cf12e57Lennart Poettering BIND 9.2 is capable of acting as an authoritative server
687f6a0ba77872299b9fb1f2f04d31c977088a63Lennart Poettering for DNSSEC secured zones. This functionality is believed to
31a11e8f30449a81867e8fd081e3e76cf6664bb4Lennart Poettering be stable and complete except for lacking support for
31a11e8f30449a81867e8fd081e3e76cf6664bb4Lennart Poettering verifications involving wildcard records in secure zones.
dbdee28bfadd6d8bd93cb34c85ce1fc325dd8120Lennart Poettering
dbdee28bfadd6d8bd93cb34c85ce1fc325dd8120Lennart Poettering When acting as a caching server, BIND 9.2 can be configured
17fe56148c44dfa5583a8643c1918fd6eccf2aeeLennart Poettering to perform DNSSEC secure resolution on behalf of its clients.
17fe56148c44dfa5583a8643c1918fd6eccf2aeeLennart Poettering This part of the DNSSEC implementation is still considered
17fe56148c44dfa5583a8643c1918fd6eccf2aeeLennart Poettering experimental. For detailed information about the state of the
17fe56148c44dfa5583a8643c1918fd6eccf2aeeLennart Poettering DNSSEC implementation, see the file doc/misc/dnssec.
7687f85ea6bab434324bb985e2898bf6373891bfLennart Poettering
7687f85ea6bab434324bb985e2898bf6373891bfLennart Poettering There are a few known bugs:
7687f85ea6bab434324bb985e2898bf6373891bfLennart Poettering
7687f85ea6bab434324bb985e2898bf6373891bfLennart Poettering On some systems, IPv6 and IPv4 sockets interact in
c14db9b32ab90738973071d31f259d1a457d7b4aLennart Poettering unexpected ways. For details, see doc/misc/ipv6.
c14db9b32ab90738973071d31f259d1a457d7b4aLennart Poettering To reduce the impact of these problems, the server
fa607802f332e06f4044c3eb38dbea41076c803dLennart Poettering no longer listens for requests on IPv6 addresses
fa607802f332e06f4044c3eb38dbea41076c803dLennart Poettering by default. If you need to accept DNS queries over
fa607802f332e06f4044c3eb38dbea41076c803dLennart Poettering IPv6, you must specify "listen-on-v6 { any; };"
a47e6701bfc45519a4e038daa52e9236e932f59aLennart Poettering in the named.conf options statement.
92ff080be100aff15f292e2631921131c610afe7Lennart Poettering
b80c66ba9836456de5260e4a1b696ba25561f613Lennart Poettering FreeBSD prior to 4.2 (and 4.2 if running as non-root)
bd69054b0987b40a0df87d40772893f6f8a078daLennart Poettering and OpenBSD prior to 2.8 log messages like
bd69054b0987b40a0df87d40772893f6f8a078daLennart Poettering "fcntl(8, F_SETFL, 4): Inappropriate ioctl for device".
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering This is due to a bug in "/dev/random" and impacts the
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering server's DNSSEC support.
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering OS X 10.1.4 (Darwin 5.4), OS X 10.1.5 (Darwin 5.5) and
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering OS X 10.2 (Darwin 6.0) reports errors like
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering "fcntl(3, F_SETFL, 4): Operation not supported by device".
de146bb2aac13361ade3050d37696499ac4ca9aeLennart Poettering This is due to a bug in "/dev/random" and impacts the
de146bb2aac13361ade3050d37696499ac4ca9aeLennart Poettering server's DNSSEC support.
de146bb2aac13361ade3050d37696499ac4ca9aeLennart Poettering
de146bb2aac13361ade3050d37696499ac4ca9aeLennart Poettering --with-libtool does not work on AIX.
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering
c3a0d00d6dd6f5997d673e133ef6f9f856550b0aLennart Poettering A bug in the Windows 2000 DNS server can cause zone transfers
82e6c50c473f4be8df77c7a510577f1975eedddbLennart Poettering from a BIND 9 server to a W2K server to fail. For details,
82e6c50c473f4be8df77c7a510577f1975eedddbLennart Poettering see the "Zone Transfers" section in doc/misc/migration.
d2f81fb00cc3c49e21b31000ba7d37b81a260257Lennart Poettering
d2f81fb00cc3c49e21b31000ba7d37b81a260257Lennart Poettering For a detailed list of user-visible changes from
98cd2651988619bf606f0b27825440c4638a7e0bLennart Poettering previous releases, see the CHANGES file.
b7307642391c8ebb9724c99e6b33239e2c0ff944Lennart Poettering
b7307642391c8ebb9724c99e6b33239e2c0ff944Lennart Poettering
2a441c8afe7c81f74cc2ceccdf9a71301cd39d4dLennart PoetteringBuilding
2a441c8afe7c81f74cc2ceccdf9a71301cd39d4dLennart Poettering
2a441c8afe7c81f74cc2ceccdf9a71301cd39d4dLennart Poettering BIND 9 currently requires a UNIX system with an ANSI C compiler,
2a441c8afe7c81f74cc2ceccdf9a71301cd39d4dLennart Poettering basic POSIX support, and a 64 bit integer type.
2a441c8afe7c81f74cc2ceccdf9a71301cd39d4dLennart Poettering
40ff4a4abd76d71408e598ed02d7860b8465fa9aLennart Poettering We've had successful builds and tests on the following systems:
40ff4a4abd76d71408e598ed02d7860b8465fa9aLennart Poettering
40ff4a4abd76d71408e598ed02d7860b8465fa9aLennart Poettering COMPAQ Tru64 UNIX 5.1B
40ff4a4abd76d71408e598ed02d7860b8465fa9aLennart Poettering FreeBSD 4.10, 5.2.1
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering HP-UX 11.11
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering NetBSD 1.5
f131770b1465fbf423881f16ba85523a05f846feVeres Lajos Slackware Linux 8.1
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering Solaris 8, 9, 9 (x86)
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering Windows NT/2000/XP/2003
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering Additionally, we have unverified reports of success building
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering previous versions of BIND 9 from users of the following systems:
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering AIX 5L
0a86c1a9d8066267b878dfeddc5e0087dda6a37bLennart Poettering SuSE Linux 7.0
e3286870fdf20c3c93e944b24fd9af53620f7dbaLennart Poettering Slackware Linux 7.x, 8.0
e3286870fdf20c3c93e944b24fd9af53620f7dbaLennart Poettering Red Hat Linux 7.1
e3286870fdf20c3c93e944b24fd9af53620f7dbaLennart Poettering Debian GNU/Linux 2.2 and 3.0
e3286870fdf20c3c93e944b24fd9af53620f7dbaLennart Poettering Mandrake 8.1
8514b67754c5ff7fa628929b3d27131010c21842Lennart Poettering OpenBSD 2.6, 2.8, 2.9
8514b67754c5ff7fa628929b3d27131010c21842Lennart Poettering UnixWare 7.1.1
6c78f43c7b0e54e695af49917fda79b584f46830Lennart Poettering HP-UX 10.20
6c78f43c7b0e54e695af49917fda79b584f46830Lennart Poettering BSD/OS 4.2
7b0fce617c48eda32b2d4e04b5f0e4376e8c0106Lennart Poettering Mac OS X 10.1
7b0fce617c48eda32b2d4e04b5f0e4376e8c0106Lennart Poettering
7b0fce617c48eda32b2d4e04b5f0e4376e8c0106Lennart Poettering To build, just
7b0fce617c48eda32b2d4e04b5f0e4376e8c0106Lennart Poettering
7b0fce617c48eda32b2d4e04b5f0e4376e8c0106Lennart Poettering ./configure
b568ef14a75dffb7182e0acbdec743b31df2a597Lennart Poettering make
c2d5b3c94d0c082ef29597fb230f8b88b124bab8Lennart Poettering
264b8070715d2d19344c4991ace21147d998f56dLennart Poettering Do not use a parallel "make".
264b8070715d2d19344c4991ace21147d998f56dLennart Poettering
7e27f3121e5a10629302b5221eb21345f832724aLennart Poettering Several environment variables that can be set before running
7e27f3121e5a10629302b5221eb21345f832724aLennart Poettering configure will affect compilation:
f81e67f79fa856aa2ecffad4d014772ce981745cLennart Poettering
f81e67f79fa856aa2ecffad4d014772ce981745cLennart Poettering CC
d48b7bd271b1e70924c8485d2f95c2f5a1ae77cbLennart Poettering The C compiler to use. configure tries to figure
d48b7bd271b1e70924c8485d2f95c2f5a1ae77cbLennart Poettering out the right one for supported systems.
25e14499c4c5b02229d05a5bc26c3693ade5f987Lennart Poettering
25e14499c4c5b02229d05a5bc26c3693ade5f987Lennart Poettering CFLAGS
758c4d7a391c0e024737053c815bf3924653b8c5Lennart Poettering C compiler flags. Defaults to include -g and/or -O2
758c4d7a391c0e024737053c815bf3924653b8c5Lennart Poettering as supported by the compiler.
821cc13ddae40fb7608458b44aaa7a3fd33d56d9Lennart Poettering
821cc13ddae40fb7608458b44aaa7a3fd33d56d9Lennart Poettering STD_CINCLUDES
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering System header file directories. Can be used to specify
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering where add-on thread or IPv6 support is, for example.
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering Defaults to empty string.
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering STD_CDEFINES
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering Any additional preprocessor symbols you want defined.
8483d73ff158ee0d51ccbba09a470cc6ae9b071aLennart Poettering Defaults to empty string.
25e773eeb4f853804e1bf0dbd9a184f23e9b2a97Kay Sievers
b857e042d621ffb98a652f33850b431fafbece43Lennart Poettering Possible settings:
6dab5bb18151c80fc39bd51f03dcff40b920de3eLennart Poettering Change the default syslog facility of named/lwresd.
6dab5bb18151c80fc39bd51f03dcff40b920de3eLennart Poettering -DISC_FACILITY=LOG_LOCAL0
384a4be2b00cb95ce215dd343cc9aa77adc9b1ecLennart Poettering Enable DNSSEC signature chasing support in dig.
384a4be2b00cb95ce215dd343cc9aa77adc9b1ecLennart Poettering -DDIG_SIGCHASE=1 (sets -DDIG_SIGCHASE_TD=1 and
706d97503df83d141d241b645d2c920d691b3d62Lennart Poettering -DDIG_SIGCHASE_BU=1)
706d97503df83d141d241b645d2c920d691b3d62Lennart Poettering
3bcde97e8502c48b53f7420e2433ca68e601662dLennart Poettering LDFLAGS
3bcde97e8502c48b53f7420e2433ca68e601662dLennart Poettering Linker flags. Defaults to empty string.
533bb267f13e2f7b4d7b78de30e821dc81c82335Lennart Poettering
533bb267f13e2f7b4d7b78de30e821dc81c82335Lennart Poettering To build shared libraries, specify "--with-libtool" on the
279f036675536d55c901562b49f9df146af1a0e3Lennart Poettering configure command line.
533bb267f13e2f7b4d7b78de30e821dc81c82335Lennart Poettering
b42de08aa4c97636e42c28c7bce08f0d7c2a719aZbigniew Jędrzejewski-Szmek For the server to support DNSSEC, you need to build it
b42de08aa4c97636e42c28c7bce08f0d7c2a719aZbigniew Jędrzejewski-Szmek with crypto support. You must have OpenSSL 0.9.5a
b42de08aa4c97636e42c28c7bce08f0d7c2a719aZbigniew Jędrzejewski-Szmek or newer installed and specify "--with-openssl" on the
b42de08aa4c97636e42c28c7bce08f0d7c2a719aZbigniew Jędrzejewski-Szmek configure command line. If OpenSSL is installed under
202aea456dfb279cd34da7bfd1880f6ac0fd849fLennart Poettering a nonstandard prefix, you can tell configure where to
42aeb14a4a0fa7d43da96a8ed0fb0e180a2dd5c8Lennart Poettering look for it using "--with-openssl=/prefix".
42aeb14a4a0fa7d43da96a8ed0fb0e180a2dd5c8Lennart Poettering
42aeb14a4a0fa7d43da96a8ed0fb0e180a2dd5c8Lennart Poettering To build libbind (the BIND 8 resolver library), specify
42aeb14a4a0fa7d43da96a8ed0fb0e180a2dd5c8Lennart Poettering "--enable-libbind" on the configure command line.
14a32924c9b46817c92ae11c1147a59dcb62012bLennart Poettering
14a32924c9b46817c92ae11c1147a59dcb62012bLennart Poettering On some platforms, BIND 9 can be built with multithreading
14a32924c9b46817c92ae11c1147a59dcb62012bLennart Poettering support, allowing it to take advantage of multiple CPUs.
14a32924c9b46817c92ae11c1147a59dcb62012bLennart Poettering You can specify whether to build a multithreaded BIND 9
563b1bdc09efe0cf94dd3f514f30376ca854c1ceLennart Poettering by specifying "--enable-threads" or "--disable-threads"
563b1bdc09efe0cf94dd3f514f30376ca854c1ceLennart Poettering on the configure command line. The default is operating
5dcf983854c2e8314dbee239180255490ec8ae1cLennart Poettering system dependent.
5dcf983854c2e8314dbee239180255490ec8ae1cLennart Poettering
5dcf983854c2e8314dbee239180255490ec8ae1cLennart Poettering If your operating system has integrated support for IPv6, it
6bd7941ece602ae9962a103c8d65ecda7d642391Tom Gundersen will be used automatically. If you have installed KAME IPv6
6bd7941ece602ae9962a103c8d65ecda7d642391Tom Gundersen separately, use "--with-kame[=PATH]" to specify its location.
6bd7941ece602ae9962a103c8d65ecda7d642391Tom Gundersen
b873d33ec9583c92a0c2bc6807d010720fa31595Lennart Poettering "make install" will install "named" and the various BIND 9 libraries.
d61bb44a89fde3042c7c15ea4975239f7dcb0cb0Lennart Poettering By default, installation is into /usr/local, but this can be changed
ed220efd6657822332b9563ec53c5ab9f3c33220Lennart Poettering with the "--prefix" option when running "configure".
ed220efd6657822332b9563ec53c5ab9f3c33220Lennart Poettering
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering You may specify the option "--sysconfdir" to set the directory
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering where configuration files like "named.conf" go by default,
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering and "--localstatedir" to set the default parent directory
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering of "run/named.pid". For backwards compatibility with BIND 8,
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering --sysconfdir defaults to "/etc" and --localstatedir defaults to
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering "/var" if no --prefix option is given. If there is a --prefix
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering option, sysconfdir defaults to "$prefix/etc" and localstatedir
41488fe9024a8955d19811620fd55dcc56a5b2baLennart Poettering defaults to "$prefix/var".
ca70bec9261977336c94f44d5fcf37e1c495326aLennart Poettering
ca70bec9261977336c94f44d5fcf37e1c495326aLennart Poettering To see additional configure options, run "configure --help".
ca70bec9261977336c94f44d5fcf37e1c495326aLennart Poettering Note that the help message does not reflect the BIND 8
1dbe0a6efda7b1d35957eab7e1d56a2c69d806d9Lennart Poettering compatibility defaults for sysconfdir and localstatedir.
1dbe0a6efda7b1d35957eab7e1d56a2c69d806d9Lennart Poettering
157a180e4fc827606833a6724834ba7b0246d650Tom Gundersen If you're planning on making changes to the BIND 9 source, you
157a180e4fc827606833a6724834ba7b0246d650Tom Gundersen should also "make depend". If you're using Emacs, you might find
823f4a91ebd8942a2c1ff31050dc55eaa60f6ffcLukas Nykryn "make tags" helpful.
b873d33ec9583c92a0c2bc6807d010720fa31595Lennart Poettering
9d6db739ce1eaa3eace21801fd606d523b73c8f4Lennart Poettering If you need to re-run configure please run "make distclean" first.
1dbe0a6efda7b1d35957eab7e1d56a2c69d806d9Lennart Poettering This will ensure that all the option changes take.
1dbe0a6efda7b1d35957eab7e1d56a2c69d806d9Lennart Poettering
9d6db739ce1eaa3eace21801fd606d523b73c8f4Lennart Poettering Building with gcc is not supported, unless gcc is the vendor's usual
ff3d6560bead6879a2fed1bf99bfe8273b3723f1Zbigniew Jędrzejewski-Szmek compiler (e.g. the various BSD systems, Linux).
ff3d6560bead6879a2fed1bf99bfe8273b3723f1Zbigniew Jędrzejewski-Szmek
151226ab4bf276d60d51864330a99f886b923697Zbigniew Jędrzejewski-Szmek Known compiler issues:
23c4091dc2b85d117512e89233fdeb47d1ff3d92Lennart Poettering * gcc-3.2.1 and gcc-3.1.1 is known to cause problems with solaris-x86.
23c4091dc2b85d117512e89233fdeb47d1ff3d92Lennart Poettering * gcc prior to gcc-3.2.3 ultrasparc generates incorrect code at -02.
9d6db739ce1eaa3eace21801fd606d523b73c8f4Lennart Poettering * gcc-3.3.5 powerpc generates incorrect code at -02.
0f47ed0a052c0da743404f23ac3532aaabd23655Lennart Poettering * Irix, MipsPRO 7.3.1m is known to cause problems.
9d6db739ce1eaa3eace21801fd606d523b73c8f4Lennart Poettering
bc07548926ec5ed7b13df8d3656654f238e0b9a7Lennart Poettering A limited test suite can be run with "make test". Many of
bc07548926ec5ed7b13df8d3656654f238e0b9a7Lennart Poettering the tests require you to configure a set of virtual IP addresses
b6b63571ae3eca1741d54172922961af972b8f20Lennart Poettering on your system, and some require Perl; see bin/tests/system/README
279f036675536d55c901562b49f9df146af1a0e3Lennart Poettering for details.
279f036675536d55c901562b49f9df146af1a0e3Lennart Poettering
3f77a1b19f5a8ce33566f7f6e28e94c08ea30841Kay Sievers
e2a69298819b58f008be61d314f8ab95ccaec427Lennart PoetteringDocumentation
e2a69298819b58f008be61d314f8ab95ccaec427Lennart Poettering
2834ffe78d7fd8be118429aa1449ac72641638c2Lennart Poettering The BIND 9 Administrator Reference Manual is included with the
2834ffe78d7fd8be118429aa1449ac72641638c2Lennart Poettering source distribution in DocBook XML and HTML format, in the
a940778fb1dd16479f455bab3ac6cbdbc5b06165Lennart Poettering doc/arm directory.
a940778fb1dd16479f455bab3ac6cbdbc5b06165Lennart Poettering
a01647e53727107d82382bc5c9d98c894e8f386cLennart Poettering Some of the programs in the BIND 9 distribution have man pages
3c779fa59d1825d7db2a9516669d34ded7916913Lennart Poettering in their directories. In particular, the command line
a940778fb1dd16479f455bab3ac6cbdbc5b06165Lennart Poettering options of "named" are documented in /bin/named/named.8.
a01647e53727107d82382bc5c9d98c894e8f386cLennart Poettering There is now also a set of man pages for the lwres library.
3de03738fc970496d2d3da668c72767a48ccc41bLennart Poettering
3de03738fc970496d2d3da668c72767a48ccc41bLennart Poettering If you are upgrading from BIND 8, please read the migration
2b1c3767515672dfd0f5e0a9c9d7ac3a16a6a361Lennart Poettering notes in doc/misc/migration. If you are upgrading from
2b1c3767515672dfd0f5e0a9c9d7ac3a16a6a361Lennart Poettering BIND 4, read doc/misc/migration-4to9.
37efac5ddb21fd91ed420c070ed07f375e78b3b9Lennart Poettering
37efac5ddb21fd91ed420c070ed07f375e78b3b9Lennart Poettering Frequently asked questions and their answers can be found in
7348b3adb324614132cf376f478e883bd7de28f1Lennart Poettering FAQ.
7348b3adb324614132cf376f478e883bd7de28f1Lennart Poettering
e107ed185ef08945102834234a05ec51bb438685Lennart Poettering
e107ed185ef08945102834234a05ec51bb438685Lennart PoetteringBug Reports and Mailing Lists
81429136905a6204875174b60a179333b7f3c9e4Kay Sievers
81429136905a6204875174b60a179333b7f3c9e4Kay Sievers Bugs reports should be sent to
e107ed185ef08945102834234a05ec51bb438685Lennart Poettering
f598ac3e28b729dd0b1d0a881df3e16465687a2bLennart Poettering bind9-bugs@isc.org
11fb37f16ed99c1603c9d770b60ce4953b96a58dLennart Poettering
01083ad094664e5c685060f4fb35a05ea2f212edLennart Poettering To join the BIND Users mailing list, send mail to
01083ad094664e5c685060f4fb35a05ea2f212edLennart Poettering
edb2935c5c5b95c42b8679086f60da5eafad74cbLennart Poettering bind-users-request@isc.org
edb2935c5c5b95c42b8679086f60da5eafad74cbLennart Poettering
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering archives of which can be found via
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering http://www.isc.org/ops/lists/
769918ecd30c0f7ee6e87b9aa6226d956bd2f530Lennart Poettering
6a3f892a23db71544d0439355f96c44350dafa8fLennart Poettering If you're planning on making changes to the BIND 9 source
2a781fc9bd33982c81e5ff75974a442a33d4f167Lennart Poettering code, you might want to join the BIND Workers mailing list.
2a781fc9bd33982c81e5ff75974a442a33d4f167Lennart Poettering Send mail to
6a3f892a23db71544d0439355f96c44350dafa8fLennart Poettering
6a3f892a23db71544d0439355f96c44350dafa8fLennart Poettering bind-workers-request@isc.org
650264033f2f98f6319513958d94d59078654af8Lennart Poettering
650264033f2f98f6319513958d94d59078654af8Lennart Poettering
650264033f2f98f6319513958d94d59078654af8Lennart Poettering