README revision feb067b25a8e33db62e2a7bf2e83bbb7f6eee845
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley BIND version 9 is a major rewrite of nearly all aspects of the
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson underlying BIND architecture. Some of the important features of
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - DNS Security
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson DNSSEC (signed zones)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson TSIG (signed DNS requests)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - IP version 6
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Answers DNS queries on IPv6 sockets
fd9b6f253eac9dae2e1ad19d49aaa922d5d4f274Mark Andrews IPv6 resource records (AAAA)
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Experimental IPv6 Resolver Library
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - DNS Protocol Enhancements
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson IXFR, DDNS, Notify, EDNS0
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Improved standards conformance
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson One server process can provide multiple "views" of
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson the DNS namespace, e.g. an "inside" view to certain
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson clients, and an "outside" view to others.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - Multiprocessor Support
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson - Improved Portability Architecture
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley BIND version 9 development has been underwritten by the following
b90dd6c0a9df584619d3c47be7c9417f55d5ccf6Bob Halley organizations:
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Sun Microsystems, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Hewlett Packard
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Compaq Computer Corporation
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Process Software Corporation
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Silicon Graphics, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson Network Associates, Inc.
16803617e47c83272013e45ba8eb83a3b11983edAndreas Gustafsson U.S. Defense Information Systems Agency
70680fa51b0147c726b939b72b2420249429756aBob Halley USENIX Association
70680fa51b0147c726b939b72b2420249429756aBob Halley Stichting NLnet - NLnet Foundation
276a77c22af98c78403883b16a82646a0d5b29abPaul Vixie Nominum, Inc.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt For a summary of functional enhancements in previous
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt releases, see the HISTORY file.
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt For a detailed list of user-visible changes from
b497531c76ea5f9aeed0c1707b6156c104c633ddEvan Hunt previous releases, see the CHANGES file.
62714accee7c8d96e02f40d58751422972e2ed41Evan Hunt For up-to-date release notes and errata, see
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt BIND 9.9.0 includes a number of changes from BIND 9.8 and earlier
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt releases. New features include:
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - Inline signing, allowing automatic DNSSEC signing of
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt master zones without modification of the zonefile, or
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt "bump in the wire" signing in slaves.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - NXDOMAIN redirection.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - New 'rndc flushtree' command clears all data under a given
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt name from the DNS cache.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - New 'rndc sync' command dumps pending changes in a dynamic
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt zone to disk without a freeze/thaw cycle.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - New 'rndc signing' command displays or clears signing status
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt records in 'auto-dnssec' zones.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - NSEC3 parameters for 'auto-dnssec' zones can now be set prior
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt to signing, eliminating the need to initially sign with NSEC.
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Startup time improvements on large authoritative servers.
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Slave zones are now saved in raw format by default.
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Several improvements to response policy zones (RPZ).
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt - Improved hardware scalability by using multiple threads
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt to listen for queries and using finer-grained client locking
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - The 'also-notify' option now takes the same syntax as
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt 'masters', so it can used named masterlists and TSIG keys.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - 'dnssec-signzone -D' writes an output file containing only DNSSEC
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt data, which can be included by the primary zone file.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - 'dnssec-signzone -R' forces removal of signatures that are
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt not expired but were created by a key which no longer exists.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - 'dnssec-signzone -X' allows a separate expiration date to
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt be specified for DNSKEY signatures from other signatures.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - New '-L' option to dnssec-keygen, dnssec-settime, and
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt dnssec-keyfromlabel sets the default TTL for the key.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - dnssec-dsfromkey now supports reading from standard input,
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt to make it easier to convert DNSKEY to DS.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - RFC 1918 reverse zones have been added to the empty-zones
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt table per RFC 6303.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt - Dynamic updates can now optionally set the zone's SOA serial
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt number to the current UNIX time.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - DLZ modules can now retrieve the source IP address of
cb143a725f0c4aa805f8fc66494023448455c773Evan Hunt the querying client.
96b1a311fc960d146193532bbbebcfcaa7ea7926Evan Hunt - 'request-ixfr' option can now be set at the per-zone level.
923ba8158a9a065719bcf9a80bfc40e7569df8a4Evan Hunt - 'dig +rrcomments' turns on comments about DNSKEY records,
923ba8158a9a065719bcf9a80bfc40e7569df8a4Evan Hunt indicating their key ID, algorithm and function
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt - Simplified nsupdate syntax and added readline support
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt BIND 9.8.0 includes a number of changes from BIND 9.7 and earlier
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt releases. New features include:
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Built-in trust anchor for the root zone, which can be
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt switched on via "dnssec-validation auto;"
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for DNS64.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for response policy zones (RPZ).
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for writable DLZ zones.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Improved ease of configuration of GSS/TSIG for
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt interoperability with Active Directory
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Support for GOST signing algorithm for DNSSEC.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Removed RTT Banding from server selection algorithm.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - New "static-stub" zone type.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Allow configuration of resolver timeouts via
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt "resolver-query-timeout" option.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - The DLZ "dlopen" driver is now built by default.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Added a new include file with function typedefs
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt for the DLZ "dlopen" driver.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - Made "--with-gssapi" default.
5f6b9acfe985004f70384f0cd72991396acf5103Evan Hunt - More verbose error reporting from DLZ LDAP.
8db66dc4eb654a2e295eaeab3aaf96e24c9ae7b7Bob Halley BIND 9 currently requires a UNIX system with an ANSI C compiler,
76860484adfbadeecfeb3a7132ede916ee2102ffBrian Wellington basic POSIX support, and a 64 bit integer type.
501da430e2f16f496f8e8d1b57ab77f78428c682David Lawrence We've had successful builds and tests on the following systems:
3b71206de9478a75ba735391498959bc54d542a2Mark Andrews COMPAQ Tru64 UNIX 5.1B
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Fedora Core 6
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews FreeBSD 4.10, 5.2.1, 6.2
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Mac OS X 10.5
df6663c9006e68e70edcc2af5e324e7217e2434bJeremy Reed NetBSD 3.x, 4.0-beta, 5.0-beta
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey OpenBSD 3.3 and up
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Solaris 8, 9, 9 (x86), 10
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Ubuntu 7.04, 7.10
ce249202297281e4b5aad3c310008ed16f810096Evan Hunt Windows XP/2003/2008
ce249202297281e4b5aad3c310008ed16f810096Evan Hunt NOTE: As of BIND 9.5.1, 9.4.3, and 9.3.6, older versions of
ce249202297281e4b5aad3c310008ed16f810096Evan Hunt Windows, including Windows NT and Windows 2000, are no longer
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey We have recent reports from the user community that a supported
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey version of BIND will build and run on the following systems:
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey CentOS 4, 4.5, 5
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Darwin 9.0.0d1/ARM
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt Debian 4, 5, 6
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt Fedora Core 5, 7, 8
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt FreeBSD 6, 7, 8
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey HP-UX 11.23 PA
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt MacOS X 10.5, 10.6, 10.7
8496c276b0549519e82076383db08b3e5e0e9347Evan Hunt Red Hat Enterprise Linux 4, 5, 6
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey SCO OpenServer 5.0.6
0bdc099a35e8446d0c5a9b54f3d6459d59455980Jonathan Casey Slackware 9, 10
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley To build, just
8eb5937a7e4cb8b5d7fcc1be17d34fdd014bbbb1Andreas Gustafsson Do not use a parallel "make".
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Several environment variables that can be set before running
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson configure will affect compilation:
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson The C compiler to use. configure tries to figure
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson out the right one for supported systems.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson C compiler flags. Defaults to include -g and/or -O2
c5e2e93f62e83ff6e3d85ea05ab5a9f468300a32Mark Andrews as supported by the compiler. Please include '-g'
c5e2e93f62e83ff6e3d85ea05ab5a9f468300a32Mark Andrews if you need to set CFLAGS.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson System header file directories. Can be used to specify
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson where add-on thread or IPv6 support is, for example.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Defaults to empty string.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Any additional preprocessor symbols you want defined.
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson Defaults to empty string.
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews Possible settings:
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews Change the default syslog facility of named/lwresd.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews -DISC_FACILITY=LOG_LOCAL0
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews Enable DNSSEC signature chasing support in dig.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews -DDIG_SIGCHASE=1 (sets -DDIG_SIGCHASE_TD=1 and
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews -DDIG_SIGCHASE_BU=1)
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews Disable dropping queries from particular well known ports.
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews -DNS_CLIENT_DROPPORT=0
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews Sibling glue checking in named-checkzone is enabled by default.
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews To disable the default check set. -DCHECK_SIBLING=0
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews named-checkzone checks out-of-zone addresses by default.
831fb092e870ed921d0d6fd67b551d9d03857a55Mark Andrews To disable this default set. -DCHECK_LOCAL=0
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews To create the default pid files in ${localstatedir}/run rather
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews than ${localstatedir}/run/{named,lwresd}/ set.
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews -DNS_RUN_PID_DIR=0
35726c47452007a538c2a9215b5f24b0317d9f91Tatuya JINMEI 神明達哉 Enable workaround for Solaris kernel bug about /dev/poll
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 -DISC_SOCKET_USE_POLLWATCH=1
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 The watch timeout is also configurable, e.g.,
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 -DISC_SOCKET_POLLWATCH_TIMEOUT=20
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews Linker flags. Defaults to empty string.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews The following need to be set when cross compiling.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews The native C compiler.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_CFLAGS (optional)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_CPPFLAGS (optional)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews Possible Settings:
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews -DNEED_OPTARG=1 (optarg is not declared in <unistd.h>)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_LDFLAGS (optional)
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews BUILD_LIBS (optional)
3b8932de20e12b07f9d874d5538d30e1fac9a9f4Andreas Gustafsson To build shared libraries, specify "--with-libtool" on the
69930116e30137705d3b87d05cbfbc5712386fdeAndreas Gustafsson configure command line.
29c9e88c6ce6c88d9a3e3a9629dbb0df29168ebfAndreas Gustafsson For the server to support DNSSEC, you need to build it
29c9e88c6ce6c88d9a3e3a9629dbb0df29168ebfAndreas Gustafsson with crypto support. You must have OpenSSL 0.9.5a
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson or newer installed and specify "--with-openssl" on the
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson configure command line. If OpenSSL is installed under
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson a nonstandard prefix, you can tell configure where to
f72a461c766a4cedc705e1ed0d6d2bb999a393f1Andreas Gustafsson look for it using "--with-openssl=/prefix".
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt To support the HTTP statistics channel, the server must
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt be linked with at least one of the following: libxml2
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt (http://xmlsoft.org) or json-c (https://github.com/json-c).
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt If these are installed at a nonstandard prefix, use
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt "--with-libxml2=/prefix" or "--with-libjson=/prefix".
e2a24b6e79572bd578d67b976208e19caf62e0f7Mark Andrews On some platforms it is necessary to explictly request large
e2a24b6e79572bd578d67b976208e19caf62e0f7Mark Andrews file support to handle files bigger than 2GB. This can be
e2a24b6e79572bd578d67b976208e19caf62e0f7Mark Andrews done by "--enable-largefile" on the configure command line.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson On some platforms, BIND 9 can be built with multithreading
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson support, allowing it to take advantage of multiple CPUs.
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson You can specify whether to build a multithreaded BIND 9
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson by specifying "--enable-threads" or "--disable-threads"
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson on the configure command line. The default is operating
8c4f1fa179f8f2fc56a9fa9294682a080e8756eeAndreas Gustafsson system dependent.
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt Support for the "fixed" rrset-order option can be enabled
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt or disabled by specifying "--enable-fixed-rrset" or
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt "--disable-fixed-rrset" on the configure command line.
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt The default is "disabled", to reduce memory footprint.
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson If your operating system has integrated support for IPv6, it
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson will be used automatically. If you have installed KAME IPv6
e21262ae8af5d12f64a2242e26338f36901ba4ccAndreas Gustafsson separately, use "--with-kame[=PATH]" to specify its location.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley "make install" will install "named" and the various BIND 9 libraries.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley By default, installation is into /usr/local, but this can be changed
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley with the "--prefix" option when running "configure".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson You may specify the option "--sysconfdir" to set the directory
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson where configuration files like "named.conf" go by default,
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson and "--localstatedir" to set the default parent directory
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson of "run/named.pid". For backwards compatibility with BIND 8,
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson --sysconfdir defaults to "/etc" and --localstatedir defaults to
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson "/var" if no --prefix option is given. If there is a --prefix
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson option, sysconfdir defaults to "$prefix/etc" and localstatedir
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson defaults to "$prefix/var".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson To see additional configure options, run "configure --help".
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson Note that the help message does not reflect the BIND 8
00b1381f1384a8a3df80e467b2ef7a7692d0d567Andreas Gustafsson compatibility defaults for sysconfdir and localstatedir.
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley If you're planning on making changes to the BIND 9 source, you
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley should also "make depend". If you're using Emacs, you might find
5f5bb44065a3e7f506e4afd4d81c89da2931bf1bBob Halley "make tags" helpful.
b3ebf6f2756b0f4061fdf84c098bad175ea3ab65Mark Andrews If you need to re-run configure please run "make distclean" first.
b3ebf6f2756b0f4061fdf84c098bad175ea3ab65Mark Andrews This will ensure that all the option changes take.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Building with gcc is not supported, unless gcc is the vendor's usual
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley compiler (e.g. the various BSD systems, Linux).
260be76e8e176872d61949a5eaa1e98cafe33a88Mark Andrews Known compiler issues:
ff69418be422164cad3be4a14a7ca56e668251edMark Andrews * gcc-3.2.1 and gcc-3.1.1 is known to cause problems with solaris-x86.
4d1ade93431ef24931fcbd2ad4e27de2c4f94876Mark Andrews * gcc prior to gcc-3.2.3 ultrasparc generates incorrect code at -02.
cc4eef2a533c338310738f57898845784ce48433Mark Andrews * gcc-3.3.5 powerpc generates incorrect code at -02.
673b53417fa1f9d2ab3e0c575baff605d202a489Mark Andrews * Irix, MipsPRO 7.4.1m is known to cause problems.
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson A limited test suite can be run with "make test". Many of
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson the tests require you to configure a set of virtual IP addresses
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson on your system, and some require Perl; see bin/tests/system/README
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews SunOS 4 requires "printf" to be installed to make the shared
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews libraries. sh-utils-1.16 provides a "printf" which compiles
c5e2e93f62e83ff6e3d85ea05ab5a9f468300a32Mark AndrewsKnown limitations
c5e2e93f62e83ff6e3d85ea05ab5a9f468300a32Mark Andrews Linux requires kernel build 2.6.39 or later to get the
c5e2e93f62e83ff6e3d85ea05ab5a9f468300a32Mark Andrews performance benefits from using multiple sockets.
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson The BIND 9 Administrator Reference Manual is included with the
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson source distribution in DocBook XML and HTML format, in the
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson Some of the programs in the BIND 9 distribution have man pages
ff1e17749c7bf976f7127467c1816abeb3f4b998Brian Wellington in their directories. In particular, the command line
ff1e17749c7bf976f7127467c1816abeb3f4b998Brian Wellington options of "named" are documented in /bin/named/named.8.
4efe2e812cf8462ed781bfd79b644eaf17d6d2b7Andreas Gustafsson There is now also a set of man pages for the lwres library.
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas Gustafsson If you are upgrading from BIND 8, please read the migration
672a41b5fef7722803645c1f0ca132972f0f940aAndreas Gustafsson notes in doc/misc/migration. If you are upgrading from
268755d80313f3c4fab6ffc7e70099310873233eAndreas Gustafsson Frequently asked questions and their answers can be found in
306b36adb61f375b697419a9775e33398eb21563Evan Hunt Additional information on various subjects can be found
306b36adb61f375b697419a9775e33398eb21563Evan Hunt in the other README files.
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt A detailed list of all changes to BIND 9 is included in the
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt file CHANGES, with the most recent changes listed first.
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt Change notes include tags indicating the category of the
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt change that was made; these categories are:
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [func] New feature
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [bug] General bug fix
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [security] Fix for a significant security flaw
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [experimental] Used for new features when the syntax
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt or other aspects of the design are still
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt in flux and may change
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [port] Portability enhancement
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [maint] Updates to built-in data such as root
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt server addresses and keys
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [tuning] Changes to built-in configuration defaults
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt and constants to improve performanceo
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [protocol] Updates to the DNS protocol such as new
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [test] Changes to the automatic tests, not
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt affecting server functionality
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [cleanup] Minor corrections and refactoring
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt [doc] Documentation
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt In general, [func] and [experimental] tags will only appear
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt in new-feature releases (i.e., those with version numbers
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt ending in zero). Some new functionality may be backported to
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt older releases on a case-by-case basis. All other change
b375b22fb0342f549d6d3a428644292e7c812e3aEvan Hunt types may be applied to all currently-supported releases.
413d5565ba2af24f12dc54d6e6807af7f1a39867Andreas GustafssonBug Reports and Mailing Lists
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Bugs reports should be sent to
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley bind9-bugs@isc.org
8d0d941054982cff5235a9033040ac35c3f06a50Mark Andrews To join the BIND Users mailing list, send mail to
8d0d941054982cff5235a9033040ac35c3f06a50Mark Andrews bind-users-request@isc.org
469a5f80aebc46e720b073e3a2cceb70709797b6Mark Andrews archives of which can be found via
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley If you're planning on making changes to the BIND 9 source
614a25ce3c57c34c3020c247b3234c593bfb208cMark Andrews code, you might want to join the BIND Workers mailing list.
36983956d7c3d9e294903eeda29548f67ac17daeBob Halley Send mail to
614a25ce3c57c34c3020c247b3234c593bfb208cMark Andrews bind-workers-request@isc.org