README revision 8496c276b0549519e82076383db08b3e5e0e9347
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley BIND version 9 is a major rewrite of nearly all aspects of the
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson underlying BIND architecture. Some of the important features of
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - DNS Security
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson DNSSEC (signed zones)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson TSIG (signed DNS requests)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - IP version 6
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Answers DNS queries on IPv6 sockets
fd9b6f253eac9dae2e1ad19d49aaa922d5d4f274Mark Andrews IPv6 resource records (AAAA)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Experimental IPv6 Resolver Library
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - DNS Protocol Enhancements
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson IXFR, DDNS, Notify, EDNS0
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Improved standards conformance
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson One server process can provide multiple "views" of
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson the DNS namespace, e.g. an "inside" view to certain
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson clients, and an "outside" view to others.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - Multiprocessor Support
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - Improved Portability Architecture
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley BIND version 9 development has been underwritten by the following
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley organizations:
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Sun Microsystems, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Hewlett Packard
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Compaq Computer Corporation
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Process Software Corporation
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Silicon Graphics, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Network Associates, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson U.S. Defense Information Systems Agency
70680fa51b0147c726b939b72b2420249429756aBob Halley USENIX Association
70680fa51b0147c726b939b72b2420249429756aBob Halley Stichting NLnet - NLnet Foundation
276a77c22af98c78403883b16a82646a0d5b29abPaul Vixie Nominum, Inc.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt For a summary of functional enhancements in previous
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt releases, see the HISTORY file.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt For a detailed list of user-visible changes from
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt previous releases, see the CHANGES file.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt BIND 9.9.0 includes a number of changes from BIND 9.8 and earlier
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt releases. New features include:
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - Inline signing, allowing automatic DNSSEC signing of
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt master zones without modification of the zonefile, or
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt "bump in the wire" signing in slaves.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - NXDOMAIN redirection.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - New 'rndc flushtree' command clears all data under a given
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt name from the DNS cache.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - New 'rndc sync' command dumps pending changes in a dynamic
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt zone to disk without a freeze/thaw cycle.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - New 'rndc signing' command displays or clears signing status
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt records in 'auto-dnssec' zones.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - NSEC3 parameters for 'auto-dnssec' zones can now be set prior
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt to signing, eliminating the need to initially sign with NSEC.
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Startup time improvements on large authoritative servers.
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Slave zones are now saved in raw format by default.
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Several improvements to response policy zones (RPZ).
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Improved hardware scalability by using multiple threads
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt to listen for queries and using finer-grained client locking
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - The 'also-notify' option now takes the same syntax as
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt 'masters', so it can used named masterlists and TSIG keys.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - 'dnssec-signzone -D' writes an output file containing only DNSSEC
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt data, which can be included by the primary zone file.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - 'dnssec-signzone -R' forces removal of signatures that are
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt not expired but were created by a key which no longer exists.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - 'dnssec-signzone -X' allows a separate expiration date to
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt be specified for DNSKEY signatures from other signatures.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - New '-L' option to dnssec-keygen, dnssec-settime, and
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt dnssec-keyfromlabel sets the default TTL for the key.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - dnssec-dsfromkey now supports reading from standard input,
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt to make it easier to convert DNSKEY to DS.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - RFC 1918 reverse zones have been added to the empty-zones
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt table per RFC 6303.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - Dynamic updates can now optionally set the zone's SOA serial
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt number to the current UNIX time.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - DLZ modules can now retrieve the source IP address of
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt the querying client.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - 'request-ixfr' option can now be set at the per-zone level.
923ba8158a9a065719bcf9a80bfc40e7569df8a4Evan Hunt - 'dig +rrcomments' turns on comments about DNSKEY records,
923ba8158a9a065719bcf9a80bfc40e7569df8a4Evan Hunt indicating their key ID, algorithm and function
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt BIND 9.8.0 includes a number of changes from BIND 9.7 and earlier
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt releases. New features include:
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Built-in trust anchor for the root zone, which can be
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt switched on via "dnssec-validation auto;"
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for DNS64.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for response policy zones (RPZ).
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for writable DLZ zones.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Improved ease of configuration of GSS/TSIG for
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt interoperability with Active Directory
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for GOST signing algorithm for DNSSEC.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Removed RTT Banding from server selection algorithm.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - New "static-stub" zone type.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Allow configuration of resolver timeouts via
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt "resolver-query-timeout" option.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - The DLZ "dlopen" driver is now built by default.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Added a new include file with function typedefs
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt for the DLZ "dlopen" driver.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Made "--with-gssapi" default.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - More verbose error reporting from DLZ LDAP.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt BIND 9.7.0 includes a number of changes from BIND 9.6 and earlier
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt releases. Most are intended to simplify DNSSEC configuration.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt New features include:
af104911b781444e0b2d3da9df553897e511303aEvan Hunt - Fully automatic signing of zones by "named".
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - Simplified configuration of DNSSEC Lookaside Validation (DLV).
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - Simplified configuration of Dynamic DNS, using the "ddns-confgen"
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt command line tool or the "local" update-policy option. (As a side
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt effect, this also makes it easier to configure automatic zone
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt re-signing.)
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt - New named option "attach-cache" that allows multiple views to
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt share a single cache.
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt - DNS rebinding attack prevention.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - New default values for dnssec-keygen parameters.
523598fafa87b0b1abb5a3a2913522e5e0716f6dEvan Hunt - Support for RFC 5011 automated trust anchor maintenance
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - Smart signing: simplified tools for zone signing and key
d699672160ba01589227ac046a28e20d55336facEvan Hunt maintenance.
d699672160ba01589227ac046a28e20d55336facEvan Hunt - The "statistics-channels" option is now available on Windows.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - A new DNSSEC-aware libdns API for use by non-BIND9 applications
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - On some platforms, named and other binaries can now print out
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt a stack backtrace on assertion failure, to aid in debugging.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - A "tools only" installation mode on Windows, which only installs
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt dig, host, nslookup and nsupdate.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - Improved PKCS#11 support, including Keyper support and explicit
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt OpenSSL engine selection.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt Known issues in this release:
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - In rare cases, DNSSEC validation can leak memory. When this
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt happens, it will cause an assertion failure when named exits,
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt but is otherwise harmless. A fix exists, but was too late for
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt this release; it will be included in BIND 9.7.1.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt Compatibility notes:
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - If you had built BIND 9.6 with any of ALLOW_NSEC3PARAM_UPDATE,
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt ALLOW_SECURE_TO_INSECURE or ALLOW_INSECURE_TO_SECURE defined, then
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt you should ensure that all changes that are in progress have
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt completed prior to upgrading to BIND 9.7. BIND 9.7 implements
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt those features in a way which is not backwards compatible.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - Prior releases had a bug which caused HMAC-SHA* keys with long
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt secrets to be used incorrectly. Fixing this bug means that older
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt versions of BIND 9 may fail to interoperate with this version
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt when using TSIG keys. If this occurs, the new "isc-hmac-fixup"
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt tool will convert a key with a long secret into a form that works
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt correctly with all versions of BIND 9. See the "isc-hmac-fixup"
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt man page for additional details.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - Revoking a DNSSEC key with "dnssec-revoke" changes its key ID.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt It is possible for the new key ID to collide with that of a
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt different key. Newly generated keys will not have this problem,
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt as "dnssec-keygen" looks for potential collisions before
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt generating keys, but exercise caution if using key revokation
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt with keys that were generated by older versions of BIND 9. See
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt the Administrator's Reference Manual, section 4.10 ("Dynamic
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt Trust Anchor Management") for more details.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt - A bug was fixed in which a key's scheduled inactivity date was
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt stored incorectly. Users who participated in the 9.7.0 BETA test
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt and had DNSSEC keys with scheduled inactivity dates will need to
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt reset those keys' dates using "dnssec-settime -I".
8db66dc4eb654a2e295eaeab3aaf96e24c9ae7b7Bob Halley BIND 9 currently requires a UNIX system with an ANSI C compiler,
76860484adfbadeecfeb3a7132ede916ee2102ffBrian Wellington basic POSIX support, and a 64 bit integer type.
501da430e2f16f496f8e8d1b57ab77f78428c682David Lawrence We've had successful builds and tests on the following systems:
3b71206de9478a75ba735391498959bc54d542a2Mark Andrews COMPAQ Tru64 UNIX 5.1B
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Fedora Core 6
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews FreeBSD 4.10, 5.2.1, 6.2
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Mac OS X 10.5
df6663c9006e68e70edcc2af5e324e7217e2434bJeremy Reed NetBSD 3.x, 4.0-beta, 5.0-beta
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey OpenBSD 3.3 and up
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Solaris 8, 9, 9 (x86), 10
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Ubuntu 7.04, 7.10
ce249202297281e4b5aad3c310008ed16f810096Evan Hunt Windows XP/2003/2008
ce249202297281e4b5aad3c310008ed16f810096Evan Hunt NOTE: As of BIND 9.5.1, 9.4.3, and 9.3.6, older versions of
ce249202297281e4b5aad3c310008ed16f810096Evan Hunt Windows, including Windows NT and Windows 2000, are no longer
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey We have recent reports from the user community that a supported
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey version of BIND will build and run on the following systems:
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey CentOS 4, 4.5, 5
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Darwin 9.0.0d1/ARM
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt Debian 4, 5, 6
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt Fedora Core 5, 7, 8
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt FreeBSD 6, 7, 8
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey HP-UX 11.23 PA
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt MacOS X 10.5, 10.6, 10.7
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt Red Hat Enterprise Linux 4, 5, 6
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey SCO OpenServer 5.0.6
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Slackware 9, 10
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley To build, just
8eb5937a7e4cb8b5d7fcc1be17d34fdd014bbbb1Andreas Gustafsson Do not use a parallel "make".
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Several environment variables that can be set before running
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson configure will affect compilation:
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson The C compiler to use. configure tries to figure
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson out the right one for supported systems.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson C compiler flags. Defaults to include -g and/or -O2
ff69418be422164cad3be4a14a7ca56e668251edMark Andrews as supported by the compiler.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson System header file directories. Can be used to specify
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson where add-on thread or IPv6 support is, for example.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Defaults to empty string.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Any additional preprocessor symbols you want defined.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Defaults to empty string.
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews Possible settings:
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews Change the default syslog facility of named/lwresd.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews -DISC_FACILITY=LOG_LOCAL0
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews Enable DNSSEC signature chasing support in dig.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews -DDIG_SIGCHASE=1 (sets -DDIG_SIGCHASE_TD=1 and
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews -DDIG_SIGCHASE_BU=1)
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews Disable dropping queries from particular well known ports.
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews -DNS_CLIENT_DROPPORT=0
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews Sibling glue checking in named-checkzone is enabled by default.
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews To disable the default check set. -DCHECK_SIBLING=0
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews named-checkzone checks out-of-zone addresses by default.
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews To disable this default set. -DCHECK_LOCAL=0
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews To create the default pid files in ${localstatedir}/run rather
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews than ${localstatedir}/run/{named,lwresd}/ set.
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews -DNS_RUN_PID_DIR=0
35726c47452007a538c2a9215b5f24b0317d9f91Tatuya JINMEI 神明達哉 Enable workaround for Solaris kernel bug about /dev/poll
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 -DISC_SOCKET_USE_POLLWATCH=1
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 The watch timeout is also configurable, e.g.,
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 -DISC_SOCKET_POLLWATCH_TIMEOUT=20
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews Linker flags. Defaults to empty string.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews The following need to be set when cross compiling.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews The native C compiler.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_CFLAGS (optional)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_CPPFLAGS (optional)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews Possible Settings:
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews -DNEED_OPTARG=1 (optarg is not declared in <unistd.h>)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_LDFLAGS (optional)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_LIBS (optional)
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson To build shared libraries, specify "--with-libtool" on the
69930116e30137705d3b87d05cbfbc5712386fdeAndreas Gustafsson configure command line.
29c9e88c6ce6c88d9a3e3a9629dbb0df29168ebfAndreas Gustafsson For the server to support DNSSEC, you need to build it
29c9e88c6ce6c88d9a3e3a9629dbb0df29168ebfAndreas Gustafsson with crypto support. You must have OpenSSL 0.9.5a
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson or newer installed and specify "--with-openssl" on the
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson configure command line. If OpenSSL is installed under
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson a nonstandard prefix, you can tell configure where to
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson look for it using "--with-openssl=/prefix".
e2a24b6e79572bd578d67b976208e19caf62e0f7Mark Andrews On some platforms it is necessary to explictly request large
e2a24b6e79572bd578d67b976208e19caf62e0f7Mark Andrews file support to handle files bigger than 2GB. This can be
e2a24b6e79572bd578d67b976208e19caf62e0f7Mark Andrews done by "--enable-largefile" on the configure command line.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson On some platforms, BIND 9 can be built with multithreading
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson support, allowing it to take advantage of multiple CPUs.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson You can specify whether to build a multithreaded BIND 9
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson by specifying "--enable-threads" or "--disable-threads"
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson on the configure command line. The default is operating
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson system dependent.
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt Support for the "fixed" rrset-order option can be enabled
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt or disabled by specifying "--enable-fixed-rrset" or
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt "--disable-fixed-rrset" on the configure command line.
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt The default is "disabled", to reduce memory footprint.
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson If your operating system has integrated support for IPv6, it
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson will be used automatically. If you have installed KAME IPv6
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson separately, use "--with-kame[=PATH]" to specify its location.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley "make install" will install "named" and the various BIND 9 libraries.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley By default, installation is into /usr/local, but this can be changed
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley with the "--prefix" option when running "configure".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson You may specify the option "--sysconfdir" to set the directory
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson where configuration files like "named.conf" go by default,
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson and "--localstatedir" to set the default parent directory
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson of "run/named.pid". For backwards compatibility with BIND 8,
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson --sysconfdir defaults to "/etc" and --localstatedir defaults to
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson "/var" if no --prefix option is given. If there is a --prefix
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson option, sysconfdir defaults to "$prefix/etc" and localstatedir
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson defaults to "$prefix/var".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson To see additional configure options, run "configure --help".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson Note that the help message does not reflect the BIND 8
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson compatibility defaults for sysconfdir and localstatedir.
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley If you're planning on making changes to the BIND 9 source, you
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley should also "make depend". If you're using Emacs, you might find
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley "make tags" helpful.
b3ebf6f2756b0f4061fdf84c098bad175ea3ab65Mark Andrews If you need to re-run configure please run "make distclean" first.
b3ebf6f2756b0f4061fdf84c098bad175ea3ab65Mark Andrews This will ensure that all the option changes take.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Building with gcc is not supported, unless gcc is the vendor's usual
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley compiler (e.g. the various BSD systems, Linux).
260be76e8e176872d61949a5eaa1e98cafe33a88Mark Andrews Known compiler issues:
ff69418be422164cad3be4a14a7ca56e668251edMark Andrews * gcc-3.2.1 and gcc-3.1.1 is known to cause problems with solaris-x86.
4d1ade93431ef24931fcbd2ad4e27de2c4f94876Mark Andrews * gcc prior to gcc-3.2.3 ultrasparc generates incorrect code at -02.
cc4eef2a533c338310738f57898845784ce48433Mark Andrews * gcc-3.3.5 powerpc generates incorrect code at -02.
673b53417fa1f9d2ab3e0c575baff605d202a489Mark Andrews * Irix, MipsPRO 7.4.1m is known to cause problems.
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson A limited test suite can be run with "make test". Many of
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson the tests require you to configure a set of virtual IP addresses
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson on your system, and some require Perl; see bin/tests/system/README
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews SunOS 4 requires "printf" to be installed to make the shared
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews libraries. sh-utils-1.16 provides a "printf" which compiles
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson The BIND 9 Administrator Reference Manual is included with the
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson source distribution in DocBook XML and HTML format, in the
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson Some of the programs in the BIND 9 distribution have man pages
ff1e17749c7bf976f7127467c1816abeb3f4b998Brian Wellington in their directories. In particular, the command line
ff1e17749c7bf976f7127467c1816abeb3f4b998Brian Wellington options of "named" are documented in /bin/named/named.8.
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson There is now also a set of man pages for the lwres library.
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson If you are upgrading from BIND 8, please read the migration
672a41b5fef7722803645c1f0ca132972f0f940aAndreas Gustafsson notes in doc/misc/migration. If you are upgrading from
268755d80313f3c4fab6ffc7e70099310873233eAndreas Gustafsson Frequently asked questions and their answers can be found in
306b36adb61f375b697419a9775e33398eb21563Evan Hunt Additional information on various subjects can be found
306b36adb61f375b697419a9775e33398eb21563Evan Hunt in the other README files.
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas GustafssonBug Reports and Mailing Lists
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Bugs reports should be sent to
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley bind9-bugs@isc.org
8d0d941054982cff5235a9033040ac35c3f06a50Mark Andrews To join the BIND Users mailing list, send mail to
8d0d941054982cff5235a9033040ac35c3f06a50Mark Andrews bind-users-request@isc.org
469a5f80aebc46e720b073e3a2cceb70709797b6Mark Andrews archives of which can be found via
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley If you're planning on making changes to the BIND 9 source
614a25ce3c57c34c3020c247b3234c593bfb208cMark Andrews code, you might want to join the BIND Workers mailing list.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Send mail to
614a25ce3c57c34c3020c247b3234c593bfb208cMark Andrews bind-workers-request@isc.org