Bv9ARM.ch03.html revision 33682c92e96b39c395cdb2c3feb8eb5914e7d5a8
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Nameserver Configuration</TITLE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="GENERATOR"
841179549b6433e782c164a562eb3422f603533dAndreas GustafssonCONTENT="Modular DocBook HTML Stylesheet Version 1.61
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonTITLE="BIND 9 Administrator Reference Manual"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceREL="PREVIOUS"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTITLE="BIND Resource Requirements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTITLE="Advanced Concepts"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="chapter"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceBGCOLOR="#FFFFFF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTEXT="#000000"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceLINK="#0000FF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVLINK="#840084"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALINK="#0000FF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="NAVHEADER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLSPACING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>BIND 9 Administrator Reference Manual</TH
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="chapter"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Chapter 3. Nameserver Configuration</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Table of Contents</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch03.html#sample_configuration"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Sample Configurations</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Load Balancing</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Nameserver Operations</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>In this section we provide some suggested configurations along
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith guidelines for their use. We also address the topic of reasonable
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoption setting.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="sample_configuration"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.1. Sample Configurations</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.1.1. A Caching-only Nameserver</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following sample configuration is appropriate for a caching-only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucename server for use by clients internal to a corporation. All queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom outside clients are refused.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> // Two corporate subnets we wish to allow queries from.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceacl "corpnets" { 192.168.4.0/24; 192.168.7.0/24; };
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson directory "/etc/namedb"; // Working directory
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson pid-file "named.pid"; // Put pid file in working dir
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query { "corpnets"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// Root server hints
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone "." { type hint; file "root.hint"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// Provide a reverse mapping for the loopback address 127.0.0.1
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type master;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.1.2. An Authoritative-only Nameserver</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This sample configuration is for an authoritative-only server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat is the master server for "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand a slave for the subdomain "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> options {
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson directory "/etc/namedb"; // Working directory
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson pid-file "named.pid"; // Put pid file in working dir
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson allow-query { any; }; // This is the default
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson recursion no; // Do not provide recursive service
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// Root server hints
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone "." { type hint; file "root.hint"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// Provide a reverse mapping for the loopback address 127.0.0.1
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type master;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// We are the master server for example.com
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type master;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // IP addresses of slave servers allowed to transfer example.com
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-transfer {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 192.168.4.14;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 192.168.5.53;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// We are a slave server for eng.example.com
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // IP address of eng.example.com master server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce masters { 192.168.4.12; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.2. Load Balancing</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Primitive load balancing can be achieved in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> using multiple
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceA records for one name.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example, if you have three WWW servers with network addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefollowing means that clients will connect to each machine one third
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the time:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Resource Record (RR) Data</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.1</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.2</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.3</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When a resolver queries for these records, <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will rotate
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce them and respond to the query with the records in a different
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce order. In the example above, clients will randomly receive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce will use the first record returned and discard the rest.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For more detail on ordering responses, check the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> substatement in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer> statement, see
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#rrset_ordering"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>RRset Ordering</I
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer This substatement is not supported in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9, and only the ordering scheme described above is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce available.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="notify"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.3. Notify</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Notify is a mechanism that allows master nameservers to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify their slave servers of changes to a zone's data. In
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce response to a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> from a master server, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce slave will check to see that its version of the zone is the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce current version and, if not, initiate a transfer.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Notify is fully documented in RFC 1996. See also the description
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of the zone option <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. For more information about
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#boolean_options"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>Section 6.2.14.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.4. Nameserver Operations</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.4.1. Tools for Use With the Nameserver Daemon</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>There are several indispensable diagnostic, administrative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand monitoring tools available to the system administrator for controlling
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand debugging the nameserver daemon. We describe several in this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonNAME="diagnostic_tools"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.4.1.1. Diagnostic Tools</A
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The domain information groper (<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea command line tool that can be used to gather information from
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe Domain Name System servers. Dig has two modes: simple interactive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemode for a single query, and batch mode which executes a query for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceeach in a list of several query lines. All query options are accessible
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom the command line.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-type</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-class</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-option</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dig-option</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The usual simple use of dig will take the form</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dig @server domain query-type query-class</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For more information and a list of available commands and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions, see the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> man page.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprovides a simple <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> lookup using a command-line interface for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelooking up Internet hostnames. By default, the utility converts
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebetween host names and Internet addresses, but its functionality
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecan be extended with the use of options.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> [-aCdlrTwv] [-c <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For more information and a list of available commands and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions, see the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> man page.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is a program used to query Internet
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedomain nameservers. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has two modes: interactive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand non-interactive. Interactive mode allows the user to query nameservers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor information about various hosts and domains or to print a list
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof hosts in a domain. Non-interactive mode is used to print just
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe name and requested information for a host or domain.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> [-option...] [<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>host-to-find</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> | - [server]]</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Interactive mode is entered when no arguments are given (the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefault nameserver will be used) or when the first argument is a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehyphen (`-') and the second argument is the host name or Internet address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof a nameserver.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Non-interactive mode is used when the name or Internet address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the host to be looked up is given as the first argument. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptional second argument specifies the host name or address of a nameserver.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Due to its arcane user interface and frequently inconsistent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebehavior, we do not recommend the use of <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> instead.</P
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonNAME="admin_tools"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson>3.4.1.2. Administrative Tools</A
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson>Administrative tools play an integral part in the management
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafssonof a server.</P
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="variablelist"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas GustafssonNAME="named-checkconf"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas Gustafsson>named-checkconf</B
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="command"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas Gustafsson>named-checkconf</B
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson checks the syntax of a <TT
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="filename"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas Gustafsson>named-checkconf</B
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas GustafssonCLASS="replaceable"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas GustafssonNAME="named-checkzone"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas Gustafsson>named-checkzone</B
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="command"
cebe3ec7c5ba5003acc05142d4368af2a3a261e9Andreas Gustafsson>named-checkzone</B
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson> program checks a master file for
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson syntax and consistency.</P
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson> [-dq] [-c <TT
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The remote name daemon control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>) program allows the system
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce administrator to control the operation of a nameserver.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce If you run <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> without any options
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce it will display a usage message as follows:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> is one of the following:</P
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Reload configuration file and zones.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Reload the given zone.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Schedule zone maintenance for the given zone.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
9dafd058e3cfdd8218247811cea792588ec19052Andreas Gustafsson>Reload the configuration file and load new zones,
9dafd058e3cfdd8218247811cea792588ec19052Andreas Gustafsson but do not reload existing zone files even if they have changed.
9dafd058e3cfdd8218247811cea792588ec19052Andreas Gustafsson This is faster than a full <B
9dafd058e3cfdd8218247811cea792588ec19052Andreas GustafssonCLASS="command"
9dafd058e3cfdd8218247811cea792588ec19052Andreas Gustafsson is a large number of zones because it avoids the need to examine the
9dafd058e3cfdd8218247811cea792588ec19052Andreas Gustafsson modification times of the zones files.
9dafd058e3cfdd8218247811cea792588ec19052Andreas GustafssonCLASS="userinput"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Write server statistics to the statistics file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Toggle query logging.</P
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="userinput"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Dump the server's caches to the dump file. </P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Stop the server,
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson making sure any recent changes
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson made through dynamic update or IXFR are first saved to the master files
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson of the updated zones.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Stop the server immediately. Recent changes
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson made through dynamic update or IXFR are not saved to the master files,
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson but will be rolled forward from the journal files when the server
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson is restarted.</P
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="userinput"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Increment the servers debugging level by one. </P
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="userinput"
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="replaceable"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Sets the server's debugging level to an explicit
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="userinput"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Sets the server's debugging level to 0.</P
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="userinput"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Flushes the server's cache.</P
fcb841430010baef50b1fc137fec109138bf0f78Andreas GustafssonCLASS="userinput"
fcb841430010baef50b1fc137fec109138bf0f78Andreas Gustafsson>Display status of the server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonsupports all the commands of the BIND 8 <B
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonutility except <B
fcb841430010baef50b1fc137fec109138bf0f78Andreas GustafssonCLASS="command"
fcb841430010baef50b1fc137fec109138bf0f78Andreas Gustafsson>, which was also
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonnot supported in <B
fcb841430010baef50b1fc137fec109138bf0f78Andreas GustafssonCLASS="command"
fcb841430010baef50b1fc137fec109138bf0f78Andreas Gustafsson>'s channel mode.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A configuration file is required, since all
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssoncommunication with the server is authenticated with
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssondigital signatures that rely on a shared secret, and
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonthere is no way to provide that secret other than with a
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonconfiguration file. The default location for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration file is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, but an alternate
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonlocation can be specified with the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonoption. If the configuration file is not found,
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="command"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> will also look in
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="filename"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="varname"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>sysconfdir</TT
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> was defined when
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="acronym"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> build was configured).
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="filename"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> file is generated by
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>rndc-confgen -a</B
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> as described in
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonHREF="Bv9ARM.ch06.html#controls_statement_definition_and_usage"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington>Section 6.2.4</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The format of the configuration file is similar to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, but limited to
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssononly four statements, the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
adc714a24a1ae71bfcfe8833d9f314864c3f073bAndreas GustafssonCLASS="command"
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonstatements. These statements are what associate the
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonsecret keys to the servers with which they are meant to
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonbe shared. The order of statements is not
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafssonsignificant.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson> statement has three clauses:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default-server</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default-key</B
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas GustafssonCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson>default-port</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default-server</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehost name or address argument and represents the server that will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe contacted if no <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafssonoption is provided on the command line.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default-key</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe name of key as its argument, as defined by a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default-port</B
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson> specifies the port to which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson> should connect if no
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafssonport is given on the command line or in a
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas GustafssonCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson> statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement names a key with its
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestring argument. The string is required by the server to be a valid
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedomain name, though it need not actually be hierarchical; thus,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea string like "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>" is a valid name.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson> statement has two clauses:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>algorithm</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas GustafssonWhile the configuration parser will accept any string as the argument
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto algorithm, currently only the string "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehas any meaning. The secret is a base-64 encoded string, typically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucegenerated with either <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dnssec-keygen</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement uses the key clause
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto associate a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>-defined key with a server.
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas GustafssonThe argument to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehost name or address (addresses must be double quoted). The argument
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto the key clause is the name of the key as defined by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafsson> clause can be used to
2aca7f657de7002f8144a322148fa42c0a0c1eddAndreas Gustafssonspecify the port to which <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> should connect
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the given server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A sample minimal configuration file is as follows:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> key rndc_key {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce algorithm "hmac-md5";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce secret "c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce default-server localhost;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce default-key rndc_key;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This file, if installed as <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewould allow the command:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="prompt"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc reload</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>to connect to 127.0.0.1 port 953 and cause the nameserver
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto reload, if a nameserver on the local machine were running with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefollowing controls statements:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> controls {
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>and it had an identical key statement for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc_key</TT
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>Running the <B
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>rndc-confgen</B
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafssonconveniently create a <TT
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="filename"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafssonfile for you, and also display the
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafssoncorresponding <B
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson> statement that you need to
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="filename"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>. Alternatively,
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>rndc-confgen -a</B
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="filename"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson> file and not modify
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>3.4.2. Signals</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Certain UNIX signals cause the name server to take specific
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceactions, as described in the following table. These signals can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe sent using the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> command.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Causes the server to read <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereload the database. </P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Causes the server to clean up and exit.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Causes the server to clean up and exit.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="NAVFOOTER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLSPACING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Resource Requirements</TD
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Advanced Concepts</TD