named.html revision 0e1dece22e128f9dfa723316a35c4b3f06912381
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync - Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - Permission to use, copy, modify, and/or distribute this software for any
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - purpose with or without fee is hereby granted, provided that the above
c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync - copyright notice and this permission notice appear in all copies.
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync - PERFORMANCE OF THIS SOFTWARE.
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync<!-- $Id$ -->
16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync<a name="man.named"></a><div class="titlepage"></div>
7a1f6848577005f20b1b0a3a3747c37a5e57c182vboxsync<p><span class="application">named</span> — Internet domain name server</p>
36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
cb48b678483eed76053da41c3f0f2600eeeed5f4vboxsync<p><span><strong class="command">named</strong></span>
f385a14d73cb3f1315f70b4055d48df793ac7303vboxsync is a Domain Name System (DNS) server,
dfd576109cb676448a2c4574150060aa3d8626bavboxsync part of the BIND 9 distribution from ISC. For more
346af0930020342df40a1ca8d13eb185ad48067evboxsync information on the DNS, see RFCs 1033, 1034, and 1035.
ddfcbd0a2ee61ce75ecc10a6001d5d834893bf8fvboxsync When invoked without arguments, <span><strong class="command">named</strong></span>
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync read the default configuration file
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync <code class="filename">/etc/named.conf</code>, read any initial
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync data, and listen for queries.
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync Use IPv4 only even if the host machine is capable of IPv6.
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync Use IPv6 only even if the host machine is capable of IPv4.
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync Use <em class="replaceable"><code>config-file</code></em> as the
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync configuration file instead of the default,
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync ensure that reloading the configuration file continues
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync to work after the server has changed its working
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync directory due to to a possible
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync <code class="option">directory</code> option in the configuration
bb71bd7b03fc48be5aab5e9cf53193cfccd3be36vboxsync file, <em class="replaceable"><code>config-file</code></em> should be
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync an absolute pathname.
bdb01608062958ff140a733533f3d6574886c831vboxsync<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
17b7eff404131866d50161b72ce9cc739536e26evboxsync Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
9f4ab406d222cd081a1522169822c3e7c2d6a718vboxsync Debugging traces from <span><strong class="command">named</strong></span> become
8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync more verbose as the debug level increases.
3acb0beecf521594e72fc58c3c32d66246e9e915vboxsync<dt><span class="term">-D <em class="replaceable"><code>string</code></em></span></dt>
3acb0beecf521594e72fc58c3c32d66246e9e915vboxsync Specifies a string that is used to identify a instance of
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync <span><strong class="command">named</strong></span> in a process listing. The contents
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync of <em class="replaceable"><code>string</code></em> are
2230b3aa00c53767250f2874491635891e588319vboxsync not examined.
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync When applicable, specifies the hardware to use for
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync cryptographic operations, such as a secure key store used
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync for signing.
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync When BIND is built with OpenSSL PKCS#11 support, this defaults
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync to the string "pkcs11", which identifies an OpenSSL engine
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync that can drive a cryptographic accelerator or hardware service
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync module. When BIND is built with native PKCS#11 cryptography
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync (--enable-native-pkcs11), it defaults to the path of the PKCS#11
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync provider library specified via "--with-pkcs11".
cbd1ed83d0cdb2ea0224838309642a9042a25e5fvboxsync Run the server in the foreground (i.e. do not daemonize).
2230b3aa00c53767250f2874491635891e588319vboxsync Run the server in the foreground and force all logging
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync Turn on memory usage debugging flags. Possible flags are
5e501d9a99709f24f1acf642d70566cd204fc156vboxsync <em class="replaceable"><code>size</code></em>, and
7e77c8f54449be6f28ccbf32f7e651554d9f4060vboxsync These correspond to the ISC_MEM_DEBUGXXXX flags described in
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync Create <em class="replaceable"><code>#cpus</code></em> worker threads
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync to take advantage of multiple CPUs. If not specified,
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync <span><strong class="command">named</strong></span> will try to determine the
04e845ee9ef813501cd2570a4188cb852d170408vboxsync number of CPUs present and create one thread per CPU.
74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync If it is unable to determine the number of CPUs, a
2bb5e094693f5a82438792bb7946cee00db72f66vboxsync single worker thread will be created.
cd2563833557c14e1739f8e10c4922061708caf1vboxsync<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
b429482aa9ee615942c70e9beedbe171471e48b3vboxsync Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
8784d2c9b1eb384e4aefb5e344cf9191513f5dfcvboxsync specified, the default is port 53.
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync Write memory usage statistics to <code class="filename">stdout</code> on exit.
cd4f52d994a7121c3c9db83163c686fffa6089e5vboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
7625bf133b6da1bcac8b5a2bbc69696c9152ac02vboxsync This option is mainly of interest to BIND 9 developers
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync and may be removed or changed in a future release.
6361862f262bb5f90ed82f2a6e926c35bfa9cf18vboxsync<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync Allow <span><strong class="command">named</strong></span> to use up to
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync <em class="replaceable"><code>#max-socks</code></em> sockets.
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync The default value is 4096 on systems built with default
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync configuration options, and 21000 on systems built with
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync "configure --with-tuning=large".
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync This option should be unnecessary for the vast majority
1e55c91541549682278f13c784f4ecc57bd9a2b3vboxsync The use of this option could even be harmful because the
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync specified value may exceed the limitation of the
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync underlying system API.
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync It is therefore set only when the default configuration
08640b1dc58f26140fca6525ced3dbdef4ce45f7vboxsync causes exhaustion of file descriptors and the
770da3dbb247278c98d1b21d2e11a0a7769131a4vboxsync operational environment is known to support the
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync specified number of sockets.
e7c9724683b63932fb6a6e19e2f4fd016224fffbvboxsync Note also that the actual maximum number is normally a little
e7c9724683b63932fb6a6e19e2f4fd016224fffbvboxsync fewer than the specified value because
e7c9724683b63932fb6a6e19e2f4fd016224fffbvboxsync <span><strong class="command">named</strong></span> reserves some file descriptors
16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync for its internal use.
2bb5e094693f5a82438792bb7946cee00db72f66vboxsync<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
41f11838cf4a7f490889239ae52b83c27830c52bvboxsync to <em class="replaceable"><code>directory</code></em> after
41f11838cf4a7f490889239ae52b83c27830c52bvboxsync processing the command line arguments, but before
495d29c29d5aeaf966ec9e7148631e751c1862d1vboxsync reading the configuration file.
495d29c29d5aeaf966ec9e7148631e751c1862d1vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync This option should be used in conjunction with the
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync <code class="option">-u</code> option, as chrooting a process
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync running as root doesn't enhance security on most
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync systems; the way <code class="function">chroot(2)</code> is
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync defined allows a process with root privileges to
341c5004a837c62a8a12ec854b0f75cf7ffc15eavboxsync escape a chroot jail.
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync Use <em class="replaceable"><code>#listeners</code></em>
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync worker threads to listen for incoming UDP packets on each
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync address. If not specified, <span><strong class="command">named</strong></span> will
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync calculate a default value based on the number of detected
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync detected CPUs divided by 2 for values higher than 4.
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync If <code class="option">-n</code> has been set to a higher value than
2bb5e094693f5a82438792bb7946cee00db72f66vboxsync the number of detected CPUs, then <code class="option">-U</code> may
0de1998ac52682bb5322df476e45f237265ea9b7vboxsync be increased as high as that value, but no higher.
495d29c29d5aeaf966ec9e7148631e751c1862d1vboxsync<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
2bb5e094693f5a82438792bb7946cee00db72f66vboxsync to <em class="replaceable"><code>user</code></em> after completing
2bb5e094693f5a82438792bb7946cee00db72f66vboxsync privileged operations, such as creating sockets that
ca04977659aed9435519a9aa8fdda2caba315fabvboxsync listen on privileged ports.
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
236f71c54929e835b07c91ace8d7009beb6bf4bdvboxsync On Linux, <span><strong class="command">named</strong></span> uses the kernel's
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync capability mechanism to drop all root privileges
085bc29163eb87e345acaae02789e4c233d51f3bvboxsync except the ability to <code class="function">bind(2)</code> to
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync privileged port and set process resource limits.
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync Unfortunately, this means that the <code class="option">-u</code>
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync option only works when <span><strong class="command">named</strong></span> is
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync later, since previous kernels did not allow privileges
a862207daec7a8b36daec6f728951872af6a2aafvboxsync to be retained after <code class="function">setuid(2)</code>.
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync Report the version number and exit.
dc61e6a1868aeec0d6b981e824b5cd8bf32e6b42vboxsync Report the version number and build options, and exit.
dc61e6a1868aeec0d6b981e824b5cd8bf32e6b42vboxsync<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
dc61e6a1868aeec0d6b981e824b5cd8bf32e6b42vboxsync Load data from <em class="replaceable"><code>cache-file</code></em> into the
dc61e6a1868aeec0d6b981e824b5cd8bf32e6b42vboxsync cache of the default view.
dc61e6a1868aeec0d6b981e824b5cd8bf32e6b42vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
7539bbe31965fb221641d81203a86c38d03f72ebvboxsync This option must not be used. It is only of interest
be61b9f590c4cb7eb2062291c568ccdc5940541cvboxsync to BIND 9 developers and may be removed or changed in a
be61b9f590c4cb7eb2062291c568ccdc5940541cvboxsync future release.
bd24e6a368acebef0335e8a5a2f6b37900fd508cvboxsync In routine operation, signals should not be used to control
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync the nameserver; <span><strong class="command">rndc</strong></span> should be used
3ccee5c41caa6fc3f805f12d4bf92174aca739e3vboxsync Force a reload of the server.
13e92d2849569726167f09e34811844eb29fd75bvboxsync Shut down the server.
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync The result of sending any other signals to the server is undefined.
63cc87b8ddb67107ec4f896f79090536923b099dvboxsync The <span><strong class="command">named</strong></span> configuration file is too complex
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync to describe in detail here. A complete description is provided
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
cab65d7f7f5418e157d6e02eb812d1cb43bce2f5vboxsync (file creation mode mask) from the parent process. If files
c1b89dd750d3950375556a9cc062c3871e93eefavboxsync created by <span><strong class="command">named</strong></span>, such as journal files,
3ccee5c41caa6fc3f805f12d4bf92174aca739e3vboxsync need to have custom permissions, the <code class="function">umask</code>
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync should be set explicitly in the script used to start the
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync <span><strong class="command">named</strong></span> process.
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync The default configuration file.
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
d9d070cfd2c99624fe6974842b7ad4a30d5b71e7vboxsync The default process-id file.
de3518a42830a03b8ae77186324815046435ab64vboxsync <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
de3518a42830a03b8ae77186324815046435ab64vboxsync <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
3548df1f655c528a721906730b14b3fdccdf77afvboxsync <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
de3518a42830a03b8ae77186324815046435ab64vboxsync <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
de3518a42830a03b8ae77186324815046435ab64vboxsync <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
de3518a42830a03b8ae77186324815046435ab64vboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
cb48b678483eed76053da41c3f0f2600eeeed5f4vboxsync<p><span class="corpauthor">Internet Systems Consortium</span>