Bv9ARM.ch03.html revision 727f5b8846457a33d06f515a10a7e1aa849ddf18
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<HTML
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson><HEAD
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User><TITLE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>Name Server Configuration</TITLE
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User><META
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox UserNAME="GENERATOR"
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox UserCONTENT="Modular DocBook HTML Stylesheet Version 1.61
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson"><LINK
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark AndrewsREL="HOME"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinTITLE="BIND 9 Administrator Reference Manual"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinHREF="Bv9ARM.html"><LINK
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinREL="PREVIOUS"
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserTITLE="BIND Resource Requirements"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinHREF="Bv9ARM.ch02.html"><LINK
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserREL="NEXT"
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserTITLE="Advanced DNS Features"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserHREF="Bv9ARM.ch04.html"></HEAD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><BODY
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="chapter"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserBGCOLOR="#FFFFFF"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserTEXT="#000000"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserLINK="#0000FF"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserVLINK="#840084"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALINK="#0000FF"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DIV
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="NAVHEADER"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TABLE
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="100%"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserBORDER="0"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCELLPADDING="0"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCELLSPACING="0"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TH
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCOLSPAN="3"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="center"
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User>BIND 9 Administrator Reference Manual</TH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="10%"
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox UserALIGN="left"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="bottom"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinHREF="Bv9ARM.ch02.html"
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User>Prev</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="80%"
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox UserALIGN="center"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="bottom"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox UserWIDTH="10%"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="right"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="bottom"
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User><A
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserHREF="Bv9ARM.ch04.html"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>Next</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TR
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User></TABLE
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews><HR
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox UserALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="100%"></DIV
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><DIV
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="chapter"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><H1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinNAME="ch03"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>Chapter 3. Name Server Configuration</A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></H1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DIV
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas GustafssonCLASS="TOC"
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson><DL
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson><DT
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson><B
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson>Table of Contents</B
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson></DT
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson><DT
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson>3.1. <A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinHREF="Bv9ARM.ch03.html#sample_configuration"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>Sample Configurations</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></DT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>3.2. <A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserHREF="Bv9ARM.ch03.html#AEN266"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>Load Balancing</A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></DT
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User><DT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>3.3. <A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserHREF="Bv9ARM.ch03.html#AEN343"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>Name Server Operations</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></DT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></DL
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></DIV
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>In this section we provide some suggested configurations along
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinwith guidelines for their use. We also address the topic of reasonable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinoption setting.</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DIV
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect1"
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson><H1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect1"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinNAME="sample_configuration"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>3.1. Sample Configurations</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></H1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DIV
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="sect2"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><H2
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect2"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinNAME="AEN255"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>3.1.1. A Caching-only Name Server</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></H2
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>The following sample configuration is appropriate for a caching-only
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafssonname server for use by clients internal to a corporation. All queries
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinfrom outside clients are refused using the <B
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserCLASS="command"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>allow-query</B
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Useroption. Alternatively, the same effect could be achieved using suitable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinfirewall rules.</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><PRE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="programlisting"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>&#13;// Two corporate subnets we wish to allow queries from.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinacl corpnets { 192.168.4.0/24; 192.168.7.0/24; };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinoptions {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directory "/etc/namedb"; // Working directory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query { corpnets; };
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User};
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User// Provide a reverse mapping for the loopback address 127.0.0.1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinzone "0.0.127.in-addr.arpa" {
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User type master;
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User file "localhost.rev";
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein notify no;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein};
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</PRE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></DIV
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DIV
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect2"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><H2
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect2"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserNAME="AEN260"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>3.1.2. An Authoritative-only Name Server</A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></H2
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>This sample configuration is for an authoritative-only server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinthat is the master server for "<TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="filename"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>example.com</TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinand a slave for the subdomain "<TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="filename"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>eng.example.com</TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>".</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><PRE
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="programlisting"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>&#13;options {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directory "/etc/namedb"; // Working directory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query { any; }; // This is the default
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein recursion no; // Do not provide recursive service
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein};
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein// Provide a reverse mapping for the loopback address 127.0.0.1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinzone "0.0.127.in-addr.arpa" {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein type master;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file "localhost.rev";
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein notify no;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein};
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein// We are the master server for example.com
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinzone "example.com" {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein type master;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file "example.com.db";
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein // IP addresses of slave servers allowed to transfer example.com
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User allow-transfer {
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User 192.168.4.14;
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User 192.168.5.53;
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein};
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein// We are a slave server for eng.example.com
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinzone "eng.example.com" {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein type slave;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file "eng.example.com.bk";
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein // IP address of eng.example.com master server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein masters { 192.168.4.12; };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein};
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</PRE
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></DIV
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></DIV
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><DIV
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect1"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><H1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="sect1"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserNAME="AEN266"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>3.2. Load Balancing</A
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></H1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>A primitive form of load balancing can be achieved in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Userthe <SPAN
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="acronym"
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson>DNS</SPAN
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User> by using multiple A records for one name.</P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>For example, if you have three WWW servers with network addresses
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafssonof 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinfollowing means that clients will connect to each machine one third
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Userof the time:</P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><DIV
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="informaltable"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinNAME="AEN271"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TABLE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCELLPADDING="3"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinBORDER="1"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="CALSTABLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TBODY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TR
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="84"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>Name</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="48"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>TTL</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="72"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>CLASS</P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="72"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>TYPE</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="195"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>Resource Record (RR) Data</P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="84"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="literal"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>www</TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="48"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>600</TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="72"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>IN</TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="72"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCLASS="literal"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein>A</TT
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="195"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>10.0.0.1</TT
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User></P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TR
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="84"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></P
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWIDTH="48"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserVALIGN="MIDDLE"
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User><P
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>600</TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="72"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
ddccd5811feff696ba460dabfb666ce61040f545Andreas GustafssonVALIGN="MIDDLE"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson>IN</TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
ddccd5811feff696ba460dabfb666ce61040f545Andreas GustafssonWIDTH="72"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserVALIGN="MIDDLE"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User>A</TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></P
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="195"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
ddccd5811feff696ba460dabfb666ce61040f545Andreas GustafssonVALIGN="MIDDLE"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserCLASS="literal"
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson>10.0.0.2</TT
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TR
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson><TR
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="84"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
ddccd5811feff696ba460dabfb666ce61040f545Andreas GustafssonVALIGN="MIDDLE"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User><P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></P
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User></TD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><TD
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserWIDTH="48"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox UserALIGN="LEFT"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinVALIGN="MIDDLE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein><P
><TT
CLASS="literal"
>600</TT
></P
></TD
><TD
WIDTH="72"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
><TT
CLASS="literal"
>IN</TT
></P
></TD
><TD
WIDTH="72"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
><TT
CLASS="literal"
>A</TT
></P
></TD
><TD
WIDTH="195"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
><TT
CLASS="literal"
>10.0.0.3</TT
></P
></TD
></TR
></TBODY
></TABLE
><P
></P
></DIV
><P
>When a resolver queries for these records, <SPAN
CLASS="acronym"
>BIND</SPAN
> will rotate
them and respond to the query with the records in a different
order. In the example above, clients will randomly receive
records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients
will use the first record returned and discard the rest.</P
><P
>For more detail on ordering responses, check the
<B
CLASS="command"
>rrset-order</B
> substatement in the
<B
CLASS="command"
>options</B
> statement, see
<A
HREF="Bv9ARM.ch06.html#rrset_ordering"
><I
>RRset Ordering</I
></A
>.
This substatement is not supported in
<SPAN
CLASS="acronym"
>BIND</SPAN
> 9, and only the ordering scheme described above is
available.</P
></DIV
><DIV
CLASS="sect1"
><H1
CLASS="sect1"
><A
NAME="AEN343"
>3.3. Name Server Operations</A
></H1
><DIV
CLASS="sect2"
><H2
CLASS="sect2"
><A
NAME="AEN345"
>3.3.1. Tools for Use With the Name Server Daemon</A
></H2
><P
>There are several indispensable diagnostic, administrative
and monitoring tools available to the system administrator for controlling
and debugging the name server daemon. We describe several in this
section </P
><DIV
CLASS="sect3"
><H3
CLASS="sect3"
><A
NAME="diagnostic_tools"
>3.3.1.1. Diagnostic Tools</A
></H3
><P
>The <B
CLASS="command"
>dig</B
>, <B
CLASS="command"
>host</B
>, and
<B
CLASS="command"
>nslookup</B
> programs are all command line tools
for manually querying name servers. They differ in style and
output format.
</P
><P
></P
><DIV
CLASS="variablelist"
><DL
><DT
><B
CLASS="command"
>dig</B
></DT
><DD
><P
>The domain information groper (<B
CLASS="command"
>dig</B
>)
is the most versatile and complete of these lookup tools.
It has two modes: simple interactive
mode for a single query, and batch mode which executes a query for
each in a list of several query lines. All query options are accessible
from the command line.</P
><P
><B
CLASS="command"
>dig</B
> [@<TT
CLASS="replaceable"
><I
>server</I
></TT
>] <TT
CLASS="replaceable"
><I
>domain</I
></TT
> [<TT
CLASS="replaceable"
><I
>query-type</I
></TT
>] [<TT
CLASS="replaceable"
><I
>query-class</I
></TT
>] [+<TT
CLASS="replaceable"
><I
>query-option</I
></TT
>] [-<TT
CLASS="replaceable"
><I
>dig-option</I
></TT
>] [%<TT
CLASS="replaceable"
><I
>comment</I
></TT
>]</P
><P
>The usual simple use of dig will take the form</P
><P
><B
CLASS="command"
>dig @server domain query-type query-class</B
></P
><P
>For more information and a list of available commands and
options, see the <B
CLASS="command"
>dig</B
> man page.</P
></DD
><DT
><B
CLASS="command"
>host</B
></DT
><DD
><P
>The <B
CLASS="command"
>host</B
> utility emphasizes simplicity
and ease of use. By default, it converts
between host names and Internet addresses, but its functionality
can be extended with the use of options.</P
><P
><B
CLASS="command"
>host</B
> [-aCdlrTwv] [-c <TT
CLASS="replaceable"
><I
>class</I
></TT
>] [-N <TT
CLASS="replaceable"
><I
>ndots</I
></TT
>] [-t <TT
CLASS="replaceable"
><I
>type</I
></TT
>] [-W <TT
CLASS="replaceable"
><I
>timeout</I
></TT
>] [-R <TT
CLASS="replaceable"
><I
>retries</I
></TT
>] <TT
CLASS="replaceable"
><I
>hostname</I
></TT
> [<TT
CLASS="replaceable"
><I
>server</I
></TT
>]</P
><P
>For more information and a list of available commands and
options, see the <B
CLASS="command"
>host</B
> man page.</P
></DD
><DT
><B
CLASS="command"
>nslookup</B
></DT
><DD
><P
><B
CLASS="command"
>nslookup</B
> has two modes: interactive
and non-interactive. Interactive mode allows the user to query name servers
for information about various hosts and domains or to print a list
of hosts in a domain. Non-interactive mode is used to print just
the name and requested information for a host or domain.</P
><P
><B
CLASS="command"
>nslookup</B
> [-option...] [<TT
CLASS="replaceable"
><I
>host-to-find</I
></TT
> | - [server]]</P
><P
>Interactive mode is entered when no arguments are given (the
default name server will be used) or when the first argument is a
hyphen (`-') and the second argument is the host name or Internet address
of a name server.</P
><P
>Non-interactive mode is used when the name or Internet address
of the host to be looked up is given as the first argument. The
optional second argument specifies the host name or address of a name server.</P
><P
>Due to its arcane user interface and frequently inconsistent
behavior, we do not recommend the use of <B
CLASS="command"
>nslookup</B
>.
Use <B
CLASS="command"
>dig</B
> instead.</P
></DD
></DL
></DIV
></DIV
><DIV
CLASS="sect3"
><H3
CLASS="sect3"
><A
NAME="admin_tools"
>3.3.1.2. Administrative Tools</A
></H3
><P
>Administrative tools play an integral part in the management
of a server.</P
><P
></P
><DIV
CLASS="variablelist"
><DL
><DT
><A
NAME="named-checkconf"
><B
CLASS="command"
>named-checkconf</B
></A
></DT
><DD
><P
>The <B
CLASS="command"
>named-checkconf</B
> program
checks the syntax of a <TT
CLASS="filename"
>named.conf</TT
> file.</P
><P
><B
CLASS="command"
>named-checkconf</B
> [-t <TT
CLASS="replaceable"
><I
>directory</I
></TT
>] [<TT
CLASS="replaceable"
><I
>filename</I
></TT
>]</P
></DD
><DT
><A
NAME="named-checkzone"
><B
CLASS="command"
>named-checkzone</B
></A
></DT
><DD
><P
>The <B
CLASS="command"
>named-checkzone</B
> program checks a master file for
syntax and consistency.</P
><P
><B
CLASS="command"
>named-checkzone</B
> [-dq] [-c <TT
CLASS="replaceable"
><I
>class</I
></TT
>] <TT
CLASS="replaceable"
><I
>zone</I
></TT
> [<TT
CLASS="replaceable"
><I
>filename</I
></TT
>]</P
></DD
><DT
><A
NAME="rndc"
><B
CLASS="command"
>rndc</B
></A
></DT
><DD
><P
>The remote name daemon control
(<B
CLASS="command"
>rndc</B
>) program allows the system
administrator to control the operation of a name server.
If you run <B
CLASS="command"
>rndc</B
> without any options
it will display a usage message as follows:</P
><P
><B
CLASS="command"
>rndc</B
> [-c <TT
CLASS="replaceable"
><I
>config</I
></TT
>] [-s <TT
CLASS="replaceable"
><I
>server</I
></TT
>] [-p <TT
CLASS="replaceable"
><I
>port</I
></TT
>] [-y <TT
CLASS="replaceable"
><I
>key</I
></TT
>] <TT
CLASS="replaceable"
><I
>command</I
></TT
> [<TT
CLASS="replaceable"
><I
>command</I
></TT
>...]</P
><P
><B
CLASS="command"
>command</B
> is one of the following:</P
><P
></P
><DIV
CLASS="variablelist"
><DL
><DT
><TT
CLASS="userinput"
><B
>reload</B
></TT
></DT
><DD
><P
>Reload configuration file and zones.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>reload <TT
CLASS="replaceable"
><I
>zone</I
></TT
>
[<SPAN
CLASS="optional"
><TT
CLASS="replaceable"
><I
>class</I
></TT
>
[<SPAN
CLASS="optional"
><TT
CLASS="replaceable"
><I
>view</I
></TT
></SPAN
>]</SPAN
>]</B
></TT
></DT
><DD
><P
>Reload the given zone.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>refresh <TT
CLASS="replaceable"
><I
>zone</I
></TT
>
[<SPAN
CLASS="optional"
><TT
CLASS="replaceable"
><I
>class</I
></TT
>
[<SPAN
CLASS="optional"
><TT
CLASS="replaceable"
><I
>view</I
></TT
></SPAN
>]</SPAN
>]</B
></TT
></DT
><DD
><P
>Schedule zone maintenance for the given zone.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>retransfer <TT
CLASS="replaceable"
><I
>zone</I
></TT
>
[<SPAN
CLASS="optional"
><TT
CLASS="replaceable"
><I
>class</I
></TT
>
[<SPAN
CLASS="optional"
><TT
CLASS="replaceable"
><I
>view</I
></TT
></SPAN
>]</SPAN
>]</B
></TT
></DT
><DD
><P
>Retransfer the given zone from the master.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>reconfig</B
></TT
></DT
><DD
><P
>Reload the configuration file and load new zones,
but do not reload existing zone files even if they have changed.
This is faster than a full <B
CLASS="command"
>reload</B
> when there
is a large number of zones because it avoids the need to examine the
modification times of the zones files.
</P
></DD
><DT
><TT
CLASS="userinput"
><B
>stats</B
></TT
></DT
><DD
><P
>Write server statistics to the statistics file.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>querylog</B
></TT
></DT
><DD
><P
>Toggle query logging. Query logging can also be enabled
by explictly directing the <B
CLASS="command"
>queries</B
>
<B
CLASS="command"
>category</B
> to a <B
CLASS="command"
>channel</B
> in the
<B
CLASS="command"
>logging</B
> section of
<TT
CLASS="filename"
>named.conf</TT
>.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>dumpdb</B
></TT
></DT
><DD
><P
>Dump the server's caches to the dump file. </P
></DD
><DT
><TT
CLASS="userinput"
><B
>stop</B
></TT
></DT
><DD
><P
>Stop the server,
making sure any recent changes
made through dynamic update or IXFR are first saved to the master files
of the updated zones.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>halt</B
></TT
></DT
><DD
><P
>Stop the server immediately. Recent changes
made through dynamic update or IXFR are not saved to the master files,
but will be rolled forward from the journal files when the server
is restarted.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>trace</B
></TT
></DT
><DD
><P
>Increment the servers debugging level by one. </P
></DD
><DT
><TT
CLASS="userinput"
><B
>trace <TT
CLASS="replaceable"
><I
>level</I
></TT
></B
></TT
></DT
><DD
><P
>Sets the server's debugging level to an explicit
value.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>notrace</B
></TT
></DT
><DD
><P
>Sets the server's debugging level to 0.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>flush</B
></TT
></DT
><DD
><P
>Flushes the server's cache.</P
></DD
><DT
><TT
CLASS="userinput"
><B
>status</B
></TT
></DT
><DD
><P
>Display status of the server.</P
></DD
></DL
></DIV
><P
>In <SPAN
CLASS="acronym"
>BIND</SPAN
> 9.2, <B
CLASS="command"
>rndc</B
>
supports all the commands of the BIND 8 <B
CLASS="command"
>ndc</B
>
utility except <B
CLASS="command"
>ndc start</B
> and
<B
CLASS="command"
>ndc restart</B
>, which were also
not supported in <B
CLASS="command"
>ndc</B
>'s channel mode.</P
><P
>A configuration file is required, since all
communication with the server is authenticated with
digital signatures that rely on a shared secret, and
there is no way to provide that secret other than with a
configuration file. The default location for the
<B
CLASS="command"
>rndc</B
> configuration file is
<TT
CLASS="filename"
>/etc/rndc.conf</TT
>, but an alternate
location can be specified with the <TT
CLASS="option"
>-c</TT
>
option. If the configuration file is not found,
<B
CLASS="command"
>rndc</B
> will also look in
<TT
CLASS="filename"
>/etc/rndc.key</TT
> (or whatever
<TT
CLASS="varname"
>sysconfdir</TT
> was defined when
the <SPAN
CLASS="acronym"
>BIND</SPAN
> build was configured).
The <TT
CLASS="filename"
>rndc.key</TT
> file is generated by
running <B
CLASS="command"
>rndc-confgen -a</B
> as described in
<A
HREF="Bv9ARM.ch06.html#controls_statement_definition_and_usage"
>Section 6.2.4</A
>.</P
><P
>The format of the configuration file is similar to
that of <TT
CLASS="filename"
>named.conf</TT
>, but limited to
only four statements, the <B
CLASS="command"
>options</B
>,
<B
CLASS="command"
>key</B
>, <B
CLASS="command"
>server</B
> and
<B
CLASS="command"
>include</B
>
statements. These statements are what associate the
secret keys to the servers with which they are meant to
be shared. The order of statements is not
significant.</P
><P
>The <B
CLASS="command"
>options</B
> statement has three clauses:
<B
CLASS="command"
>default-server</B
>, <B
CLASS="command"
>default-key</B
>,
and <B
CLASS="command"
>default-port</B
>.
<B
CLASS="command"
>default-server</B
> takes a
host name or address argument and represents the server that will
be contacted if no <TT
CLASS="option"
>-s</TT
>
option is provided on the command line.
<B
CLASS="command"
>default-key</B
> takes
the name of a key as its argument, as defined by a <B
CLASS="command"
>key</B
> statement.
<B
CLASS="command"
>default-port</B
> specifies the port to which
<B
CLASS="command"
>rndc</B
> should connect if no
port is given on the command line or in a
<B
CLASS="command"
>server</B
> statement.</P
><P
>The <B
CLASS="command"
>key</B
> statement defines an key to be used
by <B
CLASS="command"
>rndc</B
> when authenticating with
<B
CLASS="command"
>named</B
>. Its syntax is identical to the
<B
CLASS="command"
>key</B
> statement in named.conf.
The keyword <TT
CLASS="userinput"
><B
>key</B
></TT
> is
followed by a key name, which must be a valid
domain name, though it need not actually be hierarchical; thus,
a string like "<TT
CLASS="userinput"
><B
>rndc_key</B
></TT
>" is a valid name.
The <B
CLASS="command"
>key</B
> statement has two clauses:
<B
CLASS="command"
>algorithm</B
> and <B
CLASS="command"
>secret</B
>.
While the configuration parser will accept any string as the argument
to algorithm, currently only the string "<TT
CLASS="userinput"
><B
>hmac-md5</B
></TT
>"
has any meaning. The secret is a base-64 encoded string.</P
><P
>The <B
CLASS="command"
>server</B
> statement associates a key
defined using the <B
CLASS="command"
>key</B
> statement with a server.
The keyword <TT
CLASS="userinput"
><B
>server</B
></TT
> is followed by a
host name or address. The <B
CLASS="command"
>server</B
> statement
has two clauses: <B
CLASS="command"
>key</B
> and <B
CLASS="command"
>port</B
>.
The <B
CLASS="command"
>key</B
> clause specifies the name of the key
to be used when communicating with this server, and the
<B
CLASS="command"
>port</B
> clause can be used to
specify the port <B
CLASS="command"
>rndc</B
> should connect
to on the server.</P
><P
>A sample minimal configuration file is as follows:</P
><PRE
CLASS="programlisting"
>&#13;key rndc_key {
algorithm "hmac-md5";
secret "c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K";
};
options {
default-server 127.0.0.1;
default-key rndc_key;
};
</PRE
><P
>This file, if installed as <TT
CLASS="filename"
>/etc/rndc.conf</TT
>,
would allow the command:</P
><P
><TT
CLASS="prompt"
>$ </TT
><TT
CLASS="userinput"
><B
>rndc reload</B
></TT
></P
><P
>to connect to 127.0.0.1 port 953 and cause the name server
to reload, if a name server on the local machine were running with
following controls statements:</P
><PRE
CLASS="programlisting"
>&#13;controls {
inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
};
</PRE
><P
>and it had an identical key statement for
<TT
CLASS="literal"
>rndc_key</TT
>.</P
><P
>Running the <B
CLASS="command"
>rndc-confgen</B
> program will
conveniently create a <TT
CLASS="filename"
>rndc.conf</TT
>
file for you, and also display the
corresponding <B
CLASS="command"
>controls</B
> statement that you need to
add to <TT
CLASS="filename"
>named.conf</TT
>. Alternatively,
you can run <B
CLASS="command"
>rndc-confgen -a</B
> to set up
a <TT
CLASS="filename"
>rndc.key</TT
> file and not modify
<TT
CLASS="filename"
>named.conf</TT
> at all.
</P
></DD
></DL
></DIV
></DIV
></DIV
><DIV
CLASS="sect2"
><H2
CLASS="sect2"
><A
NAME="AEN655"
>3.3.2. Signals</A
></H2
><P
>Certain UNIX signals cause the name server to take specific
actions, as described in the following table. These signals can
be sent using the <B
CLASS="command"
>kill</B
> command.</P
><DIV
CLASS="informaltable"
><A
NAME="AEN659"
></A
><P
></P
><TABLE
CELLPADDING="3"
BORDER="1"
CLASS="CALSTABLE"
><TBODY
><TR
><TD
WIDTH="108"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
><B
CLASS="command"
>SIGHUP</B
></P
></TD
><TD
WIDTH="384"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
>Causes the server to read <TT
CLASS="filename"
>named.conf</TT
> and
reload the database. </P
></TD
></TR
><TR
><TD
WIDTH="108"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
><B
CLASS="command"
>SIGTERM</B
></P
></TD
><TD
WIDTH="384"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
>Causes the server to clean up and exit.</P
></TD
></TR
><TR
><TD
WIDTH="108"
ALIGN="LEFT"
VALIGN="MIDDLE"
>&#13;<P
><B
CLASS="command"
>SIGINT</B
></P
>
</TD
><TD
WIDTH="384"
ALIGN="LEFT"
VALIGN="MIDDLE"
><P
>Causes the server to clean up and exit.</P
></TD
></TR
></TBODY
></TABLE
><P
></P
></DIV
></DIV
></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
><HR
ALIGN="LEFT"
WIDTH="100%"><TABLE
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
><A
HREF="Bv9ARM.ch02.html"
>Prev</A
></TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="Bv9ARM.html"
>Home</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
HREF="Bv9ARM.ch04.html"
>Next</A
></TD
></TR
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
><SPAN
CLASS="acronym"
>BIND</SPAN
> Resource Requirements</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
>&nbsp;</TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
>Advanced DNS Features</TD
></TR
></TABLE
></DIV
></BODY
></HTML
>