Bv9ARM.ch03.html revision f37eb9482057adf62de35e634bfd574e59676950
c904f64d84db8c4eebedf210ba10893f19ba05edLennart Poettering>Nameserver Configuration</TITLE
f80781eaf9f927d7b4d5e66116e3f3a4242e6fa1Lennart PoetteringNAME="GENERATOR"
f80781eaf9f927d7b4d5e66116e3f3a4242e6fa1Lennart PoetteringCONTENT="Modular DocBook HTML Stylesheet Version 1.61
71092d70af35567dd154d3de2ce04ce62e157a7cLennart PoetteringTITLE="BIND 9 Administrator Reference Manual"
ddd88763921a1534081ed28e36f6712a85449005Lennart PoetteringTITLE="BIND Resource Requirements"
f957632b960a0a42999b38ded7089fa602b41745Kay SieversTITLE="Advanced Concepts"
9a36607584bbd1d78775353e022a51794b4e27b1Lennart PoetteringCLASS="chapter"
a40593a0d0d740efa387e35411e1e456a6c5aba7Lennart PoetteringBGCOLOR="#FFFFFF"
05aa9edde0f9f4077b8120389c93cb0134eda9c5Lennart PoetteringVLINK="#840084"
15e9fbd851c15ecaad4888932584f37dcd26111aLennart PoetteringALINK="#0000FF"
15e9fbd851c15ecaad4888932584f37dcd26111aLennart PoetteringCLASS="NAVHEADER"
05d02d8db0b3a7fd7634f7a0bd35ad96da469fb4Lennart PoetteringCELLPADDING="0"
05d02d8db0b3a7fd7634f7a0bd35ad96da469fb4Lennart PoetteringCELLSPACING="0"
2496985585f8d0febfc578b78d5fb098d545565bLennart Poettering>BIND 9 Administrator Reference Manual</TH
c4aa65e7147dc742886edf25593e10466b02fc3aLennart PoetteringVALIGN="bottom"
a558d00381291afd6a81f7df07269fe76eeae556Lennart PoetteringVALIGN="bottom"
a558d00381291afd6a81f7df07269fe76eeae556Lennart PoetteringVALIGN="bottom"
31ed59c51126fce7d958c188772a397e2a1ed010Lennart PoetteringCLASS="chapter"
62f21ec91ad8e7e24079962f4df066b0094fe68dLennart Poettering>Chapter 3. Nameserver Configuration</A
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering>Table of Contents</B
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart PoetteringHREF="Bv9ARM.ch03.html#sample_configuration"
5ba081b0fb02380cee4c2ff5bc7e05f869eb8415Lennart Poettering>Sample Configurations</A
aaf53376aaac326b700fd3f8e28bbd842f0a9ed1Lennart Poettering>Load Balancing</A
c77b7f7f82683f10e44e9ea54107d4a91feb08e3Lennart Poettering>Nameserver Operations</A
a6eb9147a820d1c08b315867373a21bd0ece2f05Lennart Poettering>In this section we provide some suggested configurations along
a6eb9147a820d1c08b315867373a21bd0ece2f05Lennart Poetteringwith guidelines for their use. We also address the topic of reasonable
b011116d1829bde044a638cbabfb070a7e0e8fa7Kay Sieversoption setting.</P
7ef5875d142f01ab4fe8d35412d48c10723ae2d4Lennart PoetteringNAME="sample_configuration"
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers>3.1. Sample Configurations</A
f957632b960a0a42999b38ded7089fa602b41745Kay SieversCLASS="sect2"
f957632b960a0a42999b38ded7089fa602b41745Kay SieversCLASS="sect2"
a2f5666d06fe8233025738047115bb9e3959df3eLennart Poettering>3.1.1. A Caching-only Nameserver</A
c821bd28c2ecce8d35248d61949fe1c0c3030b6cLennart Poettering>The following sample configuration is appropriate for a caching-only
c821bd28c2ecce8d35248d61949fe1c0c3030b6cLennart Poetteringname server for use by clients internal to a corporation. All queries
7d441ddb5ca090b5a97f58ac4b4d97b3e84fa81eLennart Poetteringfrom outside clients are refused.</P
de6c78f8795743894431a099d26ec562a8acf3dfLennart PoetteringCLASS="programlisting"
7d441ddb5ca090b5a97f58ac4b4d97b3e84fa81eLennart Poettering> // Two corporate subnets we wish to allow queries from.
14e639ae7a1dbf156273ce697d30fbc6c6594209Lennart Poetteringacl "corpnets" { 192.168.4.0/24; 192.168.7.0/24; };
ff01d048b4c1455241c894cf7982662c9d28fd34Lennart Poettering directory "/etc/namedb"; // Working directory
ff01d048b4c1455241c894cf7982662c9d28fd34Lennart Poettering pid-file "named.pid"; // Put pid file in working dir
72b9ed828bd22f3ddd74b6853c183eebf006d6d8Lennart Poettering allow-query { "corpnets"; };
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering// Root server hints
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poetteringzone "." { type hint; file "root.hint"; };
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering// Provide a reverse mapping for the loopback address 127.0.0.1
d3fc81bd6a5a046b22600ac1204df220c93d2c15Lennart Poettering>3.1.2. An Authoritative-only Nameserver</A
d3fc81bd6a5a046b22600ac1204df220c93d2c15Lennart Poettering>This sample configuration is for an authoritative-only server
7c697168102cb64c5cb65a542959684014da99c7Lennart Poetteringthat is the master server for "<TT
253ee27a0c7a410d27d490bb79ea97caed6a2b68Lennart PoetteringCLASS="filename"
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poetteringand a slave for the subdomain "<TT
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart PoetteringCLASS="filename"
88a07670cfa974a605c7c7b520b8a3135fce37f9Lennart PoetteringCLASS="programlisting"
88a07670cfa974a605c7c7b520b8a3135fce37f9Lennart Poettering> options {
916abb21d0a6653e0187b91591e492026886b0a4Lennart Poettering directory "/etc/namedb"; // Working directory
916abb21d0a6653e0187b91591e492026886b0a4Lennart Poettering pid-file "named.pid"; // Put pid file in working dir
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering allow-query { any; }; // This is the default
916abb21d0a6653e0187b91591e492026886b0a4Lennart Poettering recursion no; // Do not provide recursive service
b23de6af893c11da4286bc416455cd0926d1532eLennart Poettering// Root server hints
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poetteringzone "." { type hint; file "root.hint"; };
21bdae12e11ae20460715475d8a0c991f15464acLennart Poettering// Provide a reverse mapping for the loopback address 127.0.0.1
68c7d001f4117f0c3d0a4582e32cbb03ae5fac57Lennart Poettering// We are the master server for example.com
253ee27a0c7a410d27d490bb79ea97caed6a2b68Lennart Poettering // IP addresses of slave servers allowed to transfer example.com
5d0fcd7c8d29340ac9425c309e8ac436a9af699cLennart Poettering allow-transfer {
3d57c6ab801f4437f12948e29589e3d00c3ad9dbLennart Poettering// We are a slave server for eng.example.com
9408a2d295a312a5472345090e28e0502570494bLennart Poettering // IP address of eng.example.com master server
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering masters { 192.168.4.12; };
21bdae12e11ae20460715475d8a0c991f15464acLennart Poettering>3.2. Load Balancing</A