README revision 519f8475ff8218e3981ae2b249eb1403da7c52f6
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix BIND version 9 is a major rewrite of nearly all aspects of the
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix underlying BIND architecture. Some of the important features of
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix BIND 9 are:
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - DNS Security
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix DNSSEC (signed zones)
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix TSIG (signed DNS requests)
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - IP version 6
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Answers DNS queries on IPv6 sockets
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix IPv6 resource records (A6, DNAME, etc.)
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Bitstring Labels
173b40b9fe58992580c16917b2d9bc6bca066b24Krzysztof Kosiński Experimental IPv6 Resolver Library
173b40b9fe58992580c16917b2d9bc6bca066b24Krzysztof Kosiński - DNS Protocol Enhancements
173b40b9fe58992580c16917b2d9bc6bca066b24Krzysztof Kosiński IXFR, DDNS, Notify, EDNS0
173b40b9fe58992580c16917b2d9bc6bca066b24Krzysztof Kosiński Improved standards conformance
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix One server process can provide multiple "views" of
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix the DNS namespace, e.g. an "inside" view to certain
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix clients, and an "outside" view to others.
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak - Multiprocessor Support
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - Improved Portability Architecture
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix BIND version 9 development has been underwritten by the following
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix organizations:
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Sun Microsystems, Inc.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Hewlett Packard
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Compaq Computer Corporation
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Process Software Corporation
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Silicon Graphics, Inc.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Network Associates, Inc.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix U.S. Defense Information Systems Agency
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix USENIX Association
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Stichting NLnet - NLnet Foundation
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilixBIND 9.2.0a2
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix BIND 9.2.0a2 is an alpha release of BIND 9.2.0.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix It includes a number of new features over 9.1, including:
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - The size of the cache can now be limited using the
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix "max-cache-size" option.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - The server can now automatically convert RFC1886-style
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix recursive lookup requests into RFC2874-style lookups,
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix when enabled using the new option "allow-v6-synthesis".
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix This allows stub resolvers that support AAAA records
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix but not A6 record chains or binary labels to perform
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix lookups in domains that make use of these IPv6 DNS
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - Performance has been improved.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - The man pages now use the more portable "man" macros
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix rather than the "mandoc" macros, and are installed
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix by "make install".
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix - The named.conf parser has been completely rewritten.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix It now supports "include" directives in more
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix places such as inside "view" statememnts, and it no
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix longer has any reserved words.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches - The "rndc status" command is now implemented.
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak - rndc can now be configured automatically.
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches - A BIND 8 compatible stub resolver library is now included
e9b6af083e34e2397a8ddbe9781920733d09d151Ted Gould in lib/bind. It is not built by default, and may not build
e9b6af083e34e2397a8ddbe9781920733d09d151Ted Gould on all supported platforms yet.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix This distribution also includes a new lightweight stub
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak resolver library and associated resolver daemon that fully
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix support forward and reverse lookups of both IPv4 and IPv6
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix addresses. This library is considered experimental and
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix is not a complete replacement for the BIND 8 resolver library.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Applications that use the BIND 8 res_* functions to perform
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix DNS lookups or dynamic updates still need to be linked against
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix the BIND 8 libraries. For DNS lookups, they can also use the
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix new "getrrsetbyname()" API.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix BIND 9.2 is capable of acting as an authoritative server
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix for DNSSEC secured zones. This functionality is believed to
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix be stable and complete except for lacking support for wildcard
5a468077540ddecad3973e941b5dc36acf05a973Diederik van Lierop records in secure zones.
5a468077540ddecad3973e941b5dc36acf05a973Diederik van Lierop When acting as a caching server, BIND 9.2 can be configured
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix to perform DNSSEC secure resolution on behalf of its clients.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix This part of the DNSSEC implementation is still considered
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix experimental. For detailed information about the state of the
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix DNSSEC implementation, see the file doc/misc/dnssec.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix There are a few known bugs:
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix On some systems, IPv6 and IPv4 sockets interact in
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix unexpected ways. For details, see doc/misc/ipv6.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix To reduce the impact of these problems, the server
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix no longer listens for requests on IPv6 addresses
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix by default. If you need to accept DNS queries over
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix IPv6, you must specify "listen-on-v6 { any; };"
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix in the named.conf options statement.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix FreeBSD prior to 4.2 (and 4.2 if running as non-root)
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix and OpenBSD prior to 2.8 log messages like
e9b6af083e34e2397a8ddbe9781920733d09d151Ted Gould "fcntl(8, F_SETFL, 4): Inappropriate ioctl for device".
e9b6af083e34e2397a8ddbe9781920733d09d151Ted Gould This is due to a bug in "/dev/random" and impacts the
e9b6af083e34e2397a8ddbe9781920733d09d151Ted Gould server's DNSSEC support.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches --with-libtool does not work on AIX.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches A bug in the Windows 2000 DNS server can cause zone transfers
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix from a BIND 9 server to a W2K server to fail. For details,
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches see the "Zone Transfers" section in doc/misc/migration.
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches For a detailed list of user-visible changes from
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches previous releases, see the CHANGES file.
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches BIND 9 currently requires a UNIX system with an ANSI C compiler,
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches basic POSIX support, and a 64 bit integer type.
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches We've had successful builds and tests on the following systems:
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches COMPAQ Tru64 UNIX 4.0D
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix COMPAQ Tru64 UNIX 5 (with IPv6 EAK)
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak FreeBSD 3.4-STABLE, 3.5, 4.0, 4.1
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches Red Hat Linux 6.0, 6.1, 6.2, 7.0
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches Solaris 2.6, 7, 8
173b40b9fe58992580c16917b2d9bc6bca066b24Krzysztof Kosiński Additionally, we have unverified reports of success building
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak previous versions of BIND 9 from users of the following systems:
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix SuSE Linux 7.0
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Slackware Linux 7.x
d37634d73670180f99a3e0ea583621373d90ec4fJohan Engelen OpenBSD 2.6, 2.8, -current
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix UnixWare 7.1.1
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix HP-UX 10.20
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix To build, just
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix ./configure
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Do not use a parallel "make".
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Several environment variables that can be set before running
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix configure will affect compilation:
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix The C compiler to use. configure tries to figure
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix out the right one for supported systems.
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches C compiler flags. Defaults to include -g and/or -O2
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches as supported by the compiler.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches System header file directories. Can be used to specify
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches where add-on thread or IPv6 support is, for example.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches Defaults to empty string.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches Any additional preprocessor symbols you want defined.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Defaults to empty string.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches To build shared libraries, specify "--with-libtool" on the
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches configure command line.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches On some platforms, BIND 9 can be built with multithreading
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches support, allowing it to take advantage of multiple CPUs.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches You can specify whether to build a multithreaded BIND 9
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches by specifying "--enable-threads" or "--disable-threads"
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches on the configure command line. The default is operating
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches system dependent.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches If your operating system has integrated support for IPv6, it
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches will be used automatically. If you have installed KAME IPv6
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches separately, use "--with-kame[=PATH]" to specify its location.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches "make install" will install "named" and the various BIND 9 libraries.
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches By default, installation is into /usr/local, but this can be changed
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches with the "--prefix" option when running "configure".
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches You may specify the option "--sysconfdir" to set the directory
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches where configuration files like "named.conf" go by default,
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches and "--localstatedir" to set the default parent directory
d30d92cb3986f498497418917e65f061073f81f8Felipe C. da S. Sanches of "run/named.pid". For backwards compatibility with BIND 8,
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix --sysconfdir defaults to "/etc" and --localstatedir defaults to
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix "/var" if no --prefix option is given. If there is a --prefix
d49688d4ced8c0770e4812f62c48d5183ddef91aFelipe C. da S. Sanches option, sysconfdir defaults to "$prefix/etc" and localstatedir
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix To see additional configure options, run "configure --help".
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Note that the help message does not reflect the BIND 8
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix compatibility defaults for sysconfdir and localstatedir.
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak If you're planning on making changes to the BIND 9 source, you
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix should also "make depend". If you're using Emacs, you might find
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix "make tags" helpful.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Building with gcc is not supported, unless gcc is the vendor's usual
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix compiler (e.g. the various BSD systems, Linux).
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak A limited test suite can be run with "make test". Many of
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix the tests require you to configure a set of virtual IP addresses
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix on your system, and some require Perl; see bin/tests/system/README
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix for details.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilixDocumentation
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix The BIND 9 Administrator Reference Manual is included with the
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix source distribution in DocBook XML and HTML format, in the
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Some of the programs in the BIND 9 distribution have man pages
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak in their directories. In particular, the command line
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix options of "named" are documented in /bin/named/named.8.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix There is now also a set of man pages for the lwres library.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix If you are upgrading from BIND 8, please read the migration
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak notes in doc/misc/migration. If you are upgrading from
fa594b14d095d79b24d3a1bbf9dcb24017a93030joncruzBug Reports and Mailing Lists
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Bugs reports should be sent to
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix bind9-bugs@isc.org
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix To join the BIND 9 Users mailing list, send mail to
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix bind9-users-request@isc.org
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix If you're planning on making changes to the BIND 9 source
2e10ea952a319db08edf0986dea15de42b14d92fbuliabyak code, you might want to join the BIND 9 Workers mailing list.
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix Send mail to
045dbd46344e3ca3c53f678c2d3b4087fbbcacb7cilix bind9-workers-request@isc.org