5260N/A<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"

5260N/A "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"

5260N/A [<!ENTITY mdash "&#8212;">]>

5260N/A

5260N/A<refentry>

5260N/A <refentryinfo>

5260N/A <date>June 30, 2000</date>

5260N/A </refentryinfo>

5260N/A

5260N/A <refmeta>

5260N/A <refentrytitle><application>lwresd</application></refentrytitle>

5260N/A <manvolnum>8</manvolnum>

5260N/A <refmiscinfo>BIND9</refmiscinfo>

5260N/A </refmeta>

5260N/A

5260N/A <refnamediv>

5260N/A <refname><application>lwresd</application></refname>

5260N/A <refpurpose>lightweight resolver daemon</refpurpose>

5260N/A </refnamediv>

5260N/A

5260N/A <docinfo>

5260N/A <copyright>

5260N/A <year>2004</year>

5260N/A <year>2005</year>

5260N/A <year>2007</year>

5260N/A <holder>Internet Systems Consortium, Inc. ("ISC")</holder>

5260N/A </copyright>

5260N/A <copyright>

5260N/A <year>2000</year>

5260N/A <year>2001</year>

5260N/A <holder>Internet Software Consortium.</holder>

5260N/A </copyright>

5260N/A </docinfo>

5260N/A

5260N/A <refsynopsisdiv>

5260N/A <cmdsynopsis>

5260N/A <command>lwresd</command>

5271N/A <arg><option>-c <replaceable class="parameter">config-file</replaceable></option></arg>

5271N/A <arg><option>-C <replaceable class="parameter">config-file</replaceable></option></arg>

5271N/A <arg><option>-d <replaceable class="parameter">debug-level</replaceable></option></arg>

5271N/A <arg><option>-f</option></arg>

5271N/A <arg><option>-g</option></arg>

5271N/A <arg><option>-i <replaceable class="parameter">pid-file</replaceable></option></arg>

5271N/A <arg><option>-m <replaceable class="parameter">flag</replaceable></option></arg>

5271N/A <arg><option>-n <replaceable class="parameter">#cpus</replaceable></option></arg>

5271N/A <arg><option>-P <replaceable class="parameter">port</replaceable></option></arg>

5271N/A <arg><option>-p <replaceable class="parameter">port</replaceable></option></arg>

5271N/A <arg><option>-s</option></arg>

5271N/A <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>

5260N/A <arg><option>-u <replaceable class="parameter">user</replaceable></option></arg>

5260N/A <arg><option>-v</option></arg>

5260N/A <arg><option>-4</option></arg>

5260N/A <arg><option>-6</option></arg>

5260N/A </cmdsynopsis>

5260N/A </refsynopsisdiv>

5260N/A

5260N/A <refsect1>

5260N/A <title>DESCRIPTION</title>

5260N/A

5260N/A <para><command>lwresd</command>

5260N/A is the daemon providing name lookup

5260N/A services to clients that use the BIND 9 lightweight resolver

5260N/A library. It is essentially a stripped-down, caching-only name

5260N/A server that answers queries using the BIND 9 lightweight

5260N/A resolver protocol rather than the DNS protocol.

5260N/A </para>

5260N/A

5260N/A <para><command>lwresd</command>

5260N/A listens for resolver queries on a

5260N/A UDP port on the IPv4 loopback interface, 127.0.0.1. This

5260N/A means that <command>lwresd</command> can only be used by

5260N/A processes running on the local machine. By default UDP port

5260N/A number 921 is used for lightweight resolver requests and

5260N/A responses.

5260N/A </para>

5260N/A <para>

5260N/A Incoming lightweight resolver requests are decoded by the

5260N/A server which then resolves them using the DNS protocol. When

the DNS lookup completes, <command>lwresd</command> encodes

the answers in the lightweight resolver format and returns

them to the client that made the request.

</para>

<para>

If <filename>/etc/resolv.conf</filename> contains any

<option>nameserver</option> entries, <command>lwresd</command>

sends recursive DNS queries to those servers. This is similar

to the use of forwarders in a caching name server. If no

<option>nameserver</option> entries are present, or if

forwarding fails, <command>lwresd</command> resolves the

queries autonomously starting at the root name servers, using

a built-in list of root server hints.

</para>

</refsect1>

<refsect1>

<title>OPTIONS</title>

<variablelist>

<varlistentry>

<term>-4</term>

<listitem>

<para>

Use IPv4 only even if the host machine is capable of IPv6.

<option>-4</option> and <option>-6</option> are mutually

exclusive.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-6</term>

<listitem>

<para>

Use IPv6 only even if the host machine is capable of IPv4.

<option>-4</option> and <option>-6</option> are mutually

exclusive.

</para>

</listitem>

</varlistentry>

<!-- this is in source but not mentioned? does this matter? -->

<varlistentry>

<term>-c <replaceable class="parameter">config-file</replaceable></term>

<listitem>

<para>

Use <replaceable class="parameter">config-file</replaceable> as the

configuration file instead of the default,

<filename>/etc/lwresd.conf</filename>.

<!-- Should this be an absolute path name? -->

<term>-c</term> can not be used with <term>-C</term>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-C <replaceable class="parameter">config-file</replaceable></term>

<listitem>

<para>

Use <replaceable class="parameter">config-file</replaceable> as the

configuration file instead of the default,

<filename>/etc/resolv.conf</filename>.

<term>-C</term> can not be used with <term>-c</term>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-d <replaceable class="parameter">debug-level</replaceable></term>

<listitem>

<para>

Set the daemon's debug level to <replaceable class="parameter">debug-level</replaceable>.

Debugging traces from <command>lwresd</command> become

more verbose as the debug level increases.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-f</term>

<listitem>

<para>

Run the server in the foreground (i.e. do not daemonize).

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-g</term>

<listitem>

<para>

Run the server in the foreground and force all logging

to <filename>stderr</filename>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-i <replaceable class="parameter">pid-file</replaceable></term>

<listitem>

<para>

Use <replaceable class="parameter">pid-file</replaceable> as the

PID file instead of the default,

<filename>/var/run/lwresd.pid</filename>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-m <replaceable class="parameter">flag</replaceable></term>

<listitem>

<para>

Turn on memory usage debugging flags. Possible flags are

<replaceable class="parameter">usage</replaceable>,

<replaceable class="parameter">trace</replaceable>,

<replaceable class="parameter">record</replaceable>,

<replaceable class="parameter">size</replaceable>, and

<replaceable class="parameter">mctx</replaceable>.

These correspond to the ISC_MEM_DEBUGXXXX flags described in

<filename>&lt;isc/mem.h&gt;</filename>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-n <replaceable class="parameter">#cpus</replaceable></term>

<listitem>

<para>

Create <replaceable class="parameter">#cpus</replaceable> worker threads

to take advantage of multiple CPUs. If not specified,

<command>lwresd</command> will try to determine the

number of CPUs present and create one thread per CPU.

If it is unable to determine the number of CPUs, a

single worker thread will be created.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-P <replaceable class="parameter">port</replaceable></term>

<listitem>

<para>

Listen for lightweight resolver queries on port

<replaceable class="parameter">port</replaceable>. If

not specified, the default is port 921.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-p <replaceable class="parameter">port</replaceable></term>

<listitem>

<para>

Send DNS lookups to port <replaceable class="parameter">port</replaceable>. If not

specified, the default is port 53. This provides a

way of testing the lightweight resolver daemon with a

name server that listens for queries on a non-standard

port number.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-s</term>

<listitem>

<para>

Write memory usage statistics to <filename>stdout</filename>

on exit.

</para>

<note>

<para>

This option is mainly of interest to BIND 9 developers

and may be removed or changed in a future release.

</para>

</note>

</listitem>

</varlistentry>

<varlistentry>

<term>-t <replaceable class="parameter">directory</replaceable></term>

<listitem>

<para>Chroot

to <replaceable class="parameter">directory</replaceable> after

processing the command line arguments, but before

reading the configuration file.

</para>

<warning>

<para>

This option should be used in conjunction with the

<option>-u</option> option, as chrooting a process

running as root doesn't enhance security on most

systems; the way <function>chroot(2)</function> is

defined allows a process with root privileges to

escape a chroot jail.

</para>

</warning>

</listitem>

</varlistentry>

<varlistentry>

<term>-u <replaceable class="parameter">user</replaceable></term>

<listitem>

<para>Setuid

to <replaceable class="parameter">user</replaceable> after completing

privileged operations, such as creating sockets that

listen on privileged ports.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-v</term>

<listitem>

<para>

Report the version number and exit.

</para>

</listitem>

</varlistentry>

</variablelist>

</refsect1>

<refsect1>

<title>FILES</title>

<variablelist>

<varlistentry>

<term><filename>/etc/resolv.conf</filename></term>

<listitem>

<para>

The default configuration file.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term><filename>/var/run/lwresd.pid</filename></term>

<listitem>

<para>

The default process-id file.

</para>

</listitem>

</varlistentry>

</variablelist>

</refsect1>

<refsect1>

<title>SEE ALSO</title>

<para><citerefentry>

<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>lwres</refentrytitle><manvolnum>3</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>resolver</refentrytitle><manvolnum>5</manvolnum>

</citerefentry>.

</para>

</refsect1>

<refsect1>

<title>AUTHOR</title>

<para><corpauthor>Internet Systems Consortium</corpauthor>

</para>

</refsect1>

</refentry><!--