named.docbook revision 5cd4555ad444fd391002ae32450572054369fd42
3eb95d6629bb326ae90e5eec693b7e628951751brbb<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz [<!ENTITY mdash "—">]>
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
a1e8b54f269a8f2388590174174509546e886e60stoddard - Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
a1e8b54f269a8f2388590174174509546e886e60stoddard - Permission to use, copy, modify, and distribute this software for any
3eb95d6629bb326ae90e5eec693b7e628951751brbb - purpose with or without fee is hereby granted, provided that the above
109d280c3fcf810e573fc1af5e141ad525c45811bjh - copyright notice and this permission notice appear in all copies.
109d280c3fcf810e573fc1af5e141ad525c45811bjh - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
61d2cd001754548e90364aa3a7e76863616544b0minfrin - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
61d2cd001754548e90364aa3a7e76863616544b0minfrin - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
61d2cd001754548e90364aa3a7e76863616544b0minfrin - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
61d2cd001754548e90364aa3a7e76863616544b0minfrin - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
61d2cd001754548e90364aa3a7e76863616544b0minfrin - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron - PERFORMANCE OF THIS SOFTWARE.
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron<!-- $Id: named.docbook,v 1.14 2007/01/29 22:16:02 sra Exp $ -->
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm <refentryinfo>
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm </refentryinfo>
0506359f47150991eaaae37ca07f94117a9aa63dtrawick <refentrytitle><application>named</application></refentrytitle>
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick <refnamediv>
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick <refpurpose>Internet domain name server</refpurpose>
219472ea2d5f1563509321d8b8a91b116792bf7adougm </refnamediv>
c048b545f06921f53ceb830b30f99aed7b369d95dougm <copyright>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm </copyright>
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker <copyright>
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron </copyright>
a45de374fb215f294eb1369d4406ac79d6596ee1brianp <refsynopsisdiv>
a45de374fb215f294eb1369d4406ac79d6596ee1brianp <cmdsynopsis>
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick <arg><option>-c <replaceable class="parameter">config-file</replaceable></option></arg>
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick <arg><option>-d <replaceable class="parameter">debug-level</replaceable></option></arg>
a1be7357e2c08b9dfe52c277063d212d65b15feejim <arg><option>-n <replaceable class="parameter">#cpus</replaceable></option></arg>
a1be7357e2c08b9dfe52c277063d212d65b15feejim <arg><option>-p <replaceable class="parameter">port</replaceable></option></arg>
a1be7357e2c08b9dfe52c277063d212d65b15feejim <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
a1be7357e2c08b9dfe52c277063d212d65b15feejim <arg><option>-u <replaceable class="parameter">user</replaceable></option></arg>
6682df9b639663c50f447e5690dd62cce7b1c086trawick <arg><option>-x <replaceable class="parameter">cache-file</replaceable></option></arg>
6682df9b639663c50f447e5690dd62cce7b1c086trawick </cmdsynopsis>
51c0f0fe0a49a180389009442a83f74b1916f96atrawick </refsynopsisdiv>
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick is a Domain Name System (DNS) server,
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick part of the BIND 9 distribution from ISC. For more
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick information on the DNS, see RFCs 1033, 1034, and 1035.
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz When invoked without arguments, <command>named</command>
60b83cd8f9427809082340cfd7581091990962f5jwoolley read the default configuration file
60b83cd8f9427809082340cfd7581091990962f5jwoolley <filename>/etc/named.conf</filename>, read any initial
60b83cd8f9427809082340cfd7581091990962f5jwoolley data, and listen for queries.
e93624301705e3dc68992e3b488a764389eb8b98trawick </refsect1>
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb <variablelist>
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb <varlistentry>
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb <listitem>
4aaf7088758ca56823e585969320f2405a7cc5fcdougm Use IPv4 only even if the host machine is capable of IPv6.
4aaf7088758ca56823e585969320f2405a7cc5fcdougm <option>-4</option> and <option>-6</option> are mutually
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp </listitem>
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx </varlistentry>
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx <varlistentry>
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim <listitem>
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim Use IPv6 only even if the host machine is capable of IPv4.
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim <option>-4</option> and <option>-6</option> are mutually
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley </listitem>
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley </varlistentry>
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley <varlistentry>
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp <term>-c <replaceable class="parameter">config-file</replaceable></term>
82630c4a04be47f39298d3284b2c596244fb509bbrianp Use <replaceable class="parameter">config-file</replaceable> as the
82630c4a04be47f39298d3284b2c596244fb509bbrianp configuration file instead of the default,
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive ensure that reloading the configuration file continues
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive to work after the server has changed its working
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm directory due to to a possible
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm <option>directory</option> option in the configuration
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm file, <replaceable class="parameter">config-file</replaceable> should be
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard an absolute pathname.
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard </listitem>
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard </varlistentry>
17895aa4b66b8af02d8788b15cb92e1f6a8ecafcwrowe <varlistentry>
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick <term>-d <replaceable class="parameter">debug-level</replaceable></term>
7a64b871b8b5e5a427b570e90f0e38e88266c783jim Set the daemon's debug level to <replaceable class="parameter">debug-level</replaceable>.
7a64b871b8b5e5a427b570e90f0e38e88266c783jim more verbose as the debug level increases.
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz </varlistentry>
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz <varlistentry>
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp Run the server in the foreground (i.e. do not daemonize).
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin </listitem>
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin </varlistentry>
c148bc6b4eea544af816783400362f741c5f5fc2trawick <varlistentry>
9d432e23f6025b78322cbee43e8e89262a108e5eaaron Run the server in the foreground and force all logging
9d432e23f6025b78322cbee43e8e89262a108e5eaaron </listitem>
9d432e23f6025b78322cbee43e8e89262a108e5eaaron </varlistentry>
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick <varlistentry>
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick <term>-n <replaceable class="parameter">#cpus</replaceable></term>
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin Create <replaceable class="parameter">#cpus</replaceable> worker threads
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin to take advantage of multiple CPUs. If not specified,
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim number of CPUs present and create one thread per CPU.
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim If it is unable to determine the number of CPUs, a
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim single worker thread will be created.
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick </listitem>
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick </varlistentry>
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp <varlistentry>
2864362ca8266097928e84f101010bdf814ffa08stoddard <term>-p <replaceable class="parameter">port</replaceable></term>
2864362ca8266097928e84f101010bdf814ffa08stoddard Listen for queries on port <replaceable class="parameter">port</replaceable>. If not
2864362ca8266097928e84f101010bdf814ffa08stoddard specified, the default is port 53.
893c106ae59d8e96d921524b123ae26dea8ad37fgstein </listitem>
893c106ae59d8e96d921524b123ae26dea8ad37fgstein </varlistentry>
893c106ae59d8e96d921524b123ae26dea8ad37fgstein <varlistentry>
3aa6444bcee4e9fc32ec8860d832ff83a15784efianh <listitem>
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp Write memory usage statistics to <filename>stdout</filename> on exit.
b9fe73991e7c592a634242a7e11f924689f58e1fgstein This option is mainly of interest to BIND 9 developers
b9fe73991e7c592a634242a7e11f924689f58e1fgstein and may be removed or changed in a future release.
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick </listitem>
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick </varlistentry>
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp <varlistentry>
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp <term>-t <replaceable class="parameter">directory</replaceable></term>
d7856f850b9b51165f23ae381a891bda894e1373ianh to <replaceable class="parameter">directory</replaceable> after
d7856f850b9b51165f23ae381a891bda894e1373ianh processing the command line arguments, but before
d7856f850b9b51165f23ae381a891bda894e1373ianh reading the configuration file.
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick This option should be used in conjunction with the
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick running as root doesn't enhance security on most
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm defined allows a process with root privileges to
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm escape a chroot jail.
88ecd979f1112454432371f55a1420240fae3743trawick </listitem>
88ecd979f1112454432371f55a1420240fae3743trawick </varlistentry>
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick <varlistentry>
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick <term>-u <replaceable class="parameter">user</replaceable></term>
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick to <replaceable class="parameter">user</replaceable> after completing
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick privileged operations, such as creating sockets that
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick listen on privileged ports.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard On Linux, <command>named</command> uses the kernel's
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard capability mechanism to drop all root privileges
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard except the ability to <function>bind()</function> to
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard privileged port and set process resource limits.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard Unfortunately, this means that the <option>-u</option>
3a9c3ec5357b36fc34766cb8166168311af3562frbb on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz later, since previous kernels did not allow privileges
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz to be retained after <function>setuid()</function>.
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz </varlistentry>
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin <varlistentry>
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin Report the version number and exit.
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin </listitem>
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin </varlistentry>
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin <varlistentry>
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin <term>-x <replaceable class="parameter">cache-file</replaceable></term>
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin Load data from <replaceable class="parameter">cache-file</replaceable> into the
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin cache of the default view.
92d311b27a6182c2eed67317990c8c168584ee75trawick This option must not be used. It is only of interest
92d311b27a6182c2eed67317990c8c168584ee75trawick to BIND 9 developers and may be removed or changed in a
92d311b27a6182c2eed67317990c8c168584ee75trawick future release.
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron </listitem>
6f0dd808a674b7c09a625b36f320030f4e339f8faaron </varlistentry>
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron </variablelist>
59511de77b389ced52253d055fc470ecfedfcd99aaron </refsect1>
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz In routine operation, signals should not be used to control
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz the nameserver; <command>rndc</command> should be used
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron <variablelist>
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron <varlistentry>
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron Force a reload of the server.
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh </listitem>
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh </varlistentry>
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm <varlistentry>
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm Shut down the server.
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe </listitem>
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm </varlistentry>
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe </variablelist>
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron The result of sending any other signals to the server is undefined.
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron </refsect1>
9379749d811388a7d0e3410940ddd6743a33d330jim The <command>named</command> configuration file is too complex
9379749d811388a7d0e3410940ddd6743a33d330jim to describe in detail here. A complete description is provided
9379749d811388a7d0e3410940ddd6743a33d330jim <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron <variablelist>
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron <varlistentry>
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley The default configuration file.
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley </listitem>
83ca150ef902e9692972aa923e893bc6406d20f1ianh </varlistentry>
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick <varlistentry>
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp The default process-id file.
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe </listitem>
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe </varlistentry>
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe </variablelist>
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe </refsect1>
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron <citerefentry>
29c30db45f6a469017e16b606611e460cc1a1f2caaron </citerefentry>,
29c30db45f6a469017e16b606611e460cc1a1f2caaron <citerefentry>
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh </citerefentry>,
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh <citerefentry>
a322a82f79b790fb7ddcd7df4459d20725450fa7trawick </citerefentry>,
21644b4d1b09d0531911a8c9a891819a261480f8minfrin <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
21644b4d1b09d0531911a8c9a891819a261480f8minfrin </refsect1>
21644b4d1b09d0531911a8c9a891819a261480f8minfrin <para><corpauthor>Internet Systems Consortium</corpauthor>
21644b4d1b09d0531911a8c9a891819a261480f8minfrin </refsect1>
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron - Local variables:
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron - mode: sgml