Bv9ARM.ch03.html revision 30c0c7470d5bfabd8f43c563f4eca636d06cc484
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<!--
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
71cef386fae61275b03e203825680b39fedaa8c6Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein -
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - purpose with or without fee is hereby granted, provided that the above
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - copyright notice and this permission notice appear in all copies.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein -
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - PERFORMANCE OF THIS SOFTWARE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein-->
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<!-- $Id$ -->
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<html>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<head>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<title>Chapter�3.�Name Server Configuration</title>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="prev" href="Bv9ARM.ch02.html" title="Chapter�2.�BIND Resource Requirements">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="next" href="Bv9ARM.ch04.html" title="Chapter�4.�Advanced DNS Features">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</head>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="navheader">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<table width="100%" summary="Navigation header">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<tr><th colspan="3" align="center">Chapter�3.�Name Server Configuration</th></tr>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<tr>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<td width="20%" align="left">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a accesskey="p" href="Bv9ARM.ch02.html">Prev</a>�</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<th width="60%" align="center">�</th>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch04.html">Next</a>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</tr>
0b89eee6167201843c9a46b7e7c63cb1e4e09ba3Tinderbox User</table>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<hr>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="chapter" lang="en">
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<div class="titlepage"><div><div><h2 class="title">
a1ff871f78b7d907d6fc3a382beea2a640fe8423Tinderbox User<a name="Bv9ARM.ch03"></a>Chapter�3.�Name Server Configuration</h2></div></div></div>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User<div class="toc">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p><b>Table of Contents</b></p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User<dl>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User<dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dd><dl>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567995">A Caching-only Name Server</a></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568011">An Authoritative-only Name Server</a></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</dl></dd>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568034">Load Balancing</a></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568388">Name Server Operations</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dd><dl>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568393">Tools for Use With the Name Server Daemon</a></span></dt>
f9ce6280cec79deb16ff6d9807aa493ff23e10d9Tinderbox User<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2569462">Signals</a></span></dt>
0b89eee6167201843c9a46b7e7c63cb1e4e09ba3Tinderbox User</dl></dd>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User</dl>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User</div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt In this chapter we provide some suggested configurations along
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User with guidelines for their use. We suggest reasonable values for
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User certain option settings.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User </p>
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<div class="sect1" lang="en">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<div class="titlepage"><div><div><h2 class="title" style="clear: both">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<a name="sample_configuration"></a>Sample Configurations</h2></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="sect2" lang="en">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="id2567995"></a>A Caching-only Name Server</h3></div></div></div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The following sample configuration is appropriate for a caching-only
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User name server for use by clients internal to a corporation. All
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt queries
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User from outside clients are refused using the <span><strong class="command">allow-query</strong></span>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt option. Alternatively, the same effect could be achieved using
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt suitable
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt firewall rules.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<pre class="programlisting">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User// Two corporate subnets we wish to allow queries from.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Useracl corpnets { 192.168.4.0/24; 192.168.7.0/24; };
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Huntoptions {
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User // Working directory
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User directory "/etc/namedb";
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User allow-query { corpnets; };
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User};
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User// Provide a reverse mapping for the loopback
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User// address 127.0.0.1
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox Userzone "0.0.127.in-addr.arpa" {
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User type master;
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User file "localhost.rev";
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User notify no;
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User};
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User</pre>
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User</div>
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User<div class="sect2" lang="en">
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User<div class="titlepage"><div><div><h3 class="title">
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<a name="id2568011"></a>An Authoritative-only Name Server</h3></div></div></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<p>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User This sample configuration is for an authoritative-only server
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User that is the master server for "<code class="filename">example.com</code>"
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User and a slave for the subdomain "<code class="filename">eng.example.com</code>".
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User </p>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<pre class="programlisting">
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox Useroptions {
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User // Working directory
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User directory "/etc/namedb";
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User // Do not allow access to cache
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User allow-query-cache { none; };
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User // This is the default
a1ff871f78b7d907d6fc3a382beea2a640fe8423Tinderbox User allow-query { any; };
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User // Do not provide recursive service
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User recursion no;
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User};
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User// Provide a reverse mapping for the loopback
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User// address 127.0.0.1
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox Userzone "0.0.127.in-addr.arpa" {
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User type master;
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User file "localhost.rev";
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User notify no;
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User};
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User// We are the master server for example.com
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Userzone "example.com" {
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User type master;
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User file "example.com.db";
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User // IP addresses of slave servers allowed to
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User // transfer example.com
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User allow-transfer {
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User 192.168.4.14;
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User 192.168.5.53;
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User };
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User};
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User// We are a slave server for eng.example.com
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox Userzone "eng.example.com" {
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User type slave;
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User file "eng.example.com.bk";
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User // IP address of eng.example.com master server
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User masters { 192.168.4.12; };
a1ff871f78b7d907d6fc3a382beea2a640fe8423Tinderbox User};
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User</pre>
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User</div>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User</div>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User<div class="sect1" lang="en">
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User<div class="titlepage"><div><div><h2 class="title" style="clear: both">
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User<a name="id2568034"></a>Load Balancing</h2></div></div></div>
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User<p>
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User A primitive form of load balancing can be achieved in
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User the <acronym class="acronym">DNS</acronym> by using multiple records
363b21045b718d06d414784c96193dc9a233e8c5Tinderbox User (such as multiple A records) for one name.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<p>
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User For example, if you have three WWW servers with network addresses
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User following means that clients will connect to each machine one third
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User of the time:
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User </p>
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User<div class="informaltable"><table border="1">
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User<colgroup>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<col>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<col>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<col>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<col>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<col>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User</colgroup>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<tbody>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<tr>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<td>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <p>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User Name
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User </p>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User </td>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<td>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <p>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User TTL
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User </p>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User </td>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<td>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User <p>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User CLASS
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User </p>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User </td>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<td>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <p>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User TYPE
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User </p>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User </td>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User <p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User Resource Record (RR) Data
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User </p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User </td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User</tr>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User<tr>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User<td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User <p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User <code class="literal">www</code>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User </p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User </td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User<td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User <p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User <code class="literal">600</code>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User </p>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User </td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User<td>
d253648fe3331622cebea02d60aaecca3082d78dTinderbox User <p>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User <code class="literal">IN</code>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User </p>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User </td>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User<td>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User <p>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User <code class="literal">A</code>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User </p>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User </td>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User<td>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User <p>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User <code class="literal">10.0.0.1</code>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User </p>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User </td>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User</tr>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User<tr>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User<td>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User <p></p>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User </td>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User<td>
3ca1a32241189d1e02e59f6b56399eb9b40f2aafTinderbox User <p>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User <code class="literal">600</code>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User </p>
dfae459e8c4f794f8a239e74aa9d5e11cce6ea5bTinderbox User </td>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User<td>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User <p>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User <code class="literal">IN</code>
bfb7b680bf88c1fdd9949197b71c512c532280a4Tinderbox User </p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </td>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User<td>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User <p>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User <code class="literal">A</code>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User </p>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User </td>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User<td>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User <p>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User <code class="literal">10.0.0.2</code>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User </p>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User </td>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User</tr>
f14ce68ee54a5a4587fbde4ffacb117946df2d73Tinderbox User<tr>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User<td>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User <p></p>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User </td>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User<td>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User <p>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User <code class="literal">600</code>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User </p>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User </td>
0d6a6642b2be93cffa651c54a9b8810dd2d31392Tinderbox User<td>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User <p>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User <code class="literal">IN</code>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User </p>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User </td>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User<td>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User <p>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User <code class="literal">A</code>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User </p>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User </td>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User<td>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <p>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User <code class="literal">10.0.0.3</code>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User </p>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User </td>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User</tr>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User</tbody>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User</table></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<p>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User When a resolver queries for these records, <acronym class="acronym">BIND</acronym> will rotate
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User them and respond to the query with the records in a different
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User order. In the example above, clients will randomly receive
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User will use the first record returned and discard the rest.
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User </p>
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User<p>
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User For more detail on ordering responses, check the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">rrset-order</strong></span> sub-statement in the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">options</strong></span> statement, see
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <a href="Bv9ARM.ch06.html#rrset_ordering">RRset Ordering</a>.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User</div>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User<div class="sect1" lang="en">
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<div class="titlepage"><div><div><h2 class="title" style="clear: both">
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<a name="id2568388"></a>Name Server Operations</h2></div></div></div>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<div class="sect2" lang="en">
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<div class="titlepage"><div><div><h3 class="title">
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<a name="id2568393"></a>Tools for Use With the Name Server Daemon</h3></div></div></div>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User<p>
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User This section describes several indispensable diagnostic,
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User administrative and monitoring tools available to the system
111d5ef471ecec90671f480afd8f93e550a80917Tinderbox User administrator for controlling and debugging the name server
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User daemon.
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User </p>
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User<div class="sect3" lang="en">
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User<div class="titlepage"><div><div><h4 class="title">
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User<a name="diagnostic_tools"></a>Diagnostic Tools</h4></div></div></div>
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User<p>
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User The <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span>, and
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User <span><strong class="command">nslookup</strong></span> programs are all command
a0fb6a0980359165a4459723f52d5d7b5725f9c6Tinderbox User line tools
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User for manually querying name servers. They differ in style and
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User output format.
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User </p>
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User<div class="variablelist"><dl>
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User<dt><span class="term"><a name="dig"></a><span><strong class="command">dig</strong></span></span></dt>
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User<dd>
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User<p>
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User The domain information groper (<span><strong class="command">dig</strong></span>)
8c7245514646663b25d8b186186ebede41903fa3Tinderbox User is the most versatile and complete of these lookup tools.
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User It has two modes: simple interactive
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User mode for a single query, and batch mode which executes a
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User query for
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User each in a list of several query lines. All query options are
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User accessible
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User from the command line.
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User </p>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User<div class="cmdsynopsis"><p><code class="command">dig</code> [@<em class="replaceable"><code>server</code></em>] <em class="replaceable"><code>domain</code></em> [<em class="replaceable"><code>query-type</code></em>] [<em class="replaceable"><code>query-class</code></em>] [+<em class="replaceable"><code>query-option</code></em>] [-<em class="replaceable"><code>dig-option</code></em>] [%<em class="replaceable"><code>comment</code></em>]</p></div>
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User<p>
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User The usual simple use of <span><strong class="command">dig</strong></span> will take the form
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User </p>
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User<p>
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User <span><strong class="command">dig @server domain query-type query-class</strong></span>
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User </p>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User<p>
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User For more information and a list of available commands and
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User options, see the <span><strong class="command">dig</strong></span> man
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User page.
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User </p>
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User</dd>
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User<dt><span class="term"><span><strong class="command">host</strong></span></span></dt>
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User<dd>
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User<p>
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User The <span><strong class="command">host</strong></span> utility emphasizes
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User simplicity
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User and ease of use. By default, it converts
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User between host names and Internet addresses, but its
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User functionality
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User can be extended with the use of options.
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User </p>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User<div class="cmdsynopsis"><p><code class="command">host</code> [-aCdlnrsTwv] [-c <em class="replaceable"><code>class</code></em>] [-N <em class="replaceable"><code>ndots</code></em>] [-t <em class="replaceable"><code>type</code></em>] [-W <em class="replaceable"><code>timeout</code></em>] [-R <em class="replaceable"><code>retries</code></em>] [-m <em class="replaceable"><code>flag</code></em>] [-4] [-6] <em class="replaceable"><code>hostname</code></em> [<em class="replaceable"><code>server</code></em>]</p></div>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User<p>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User For more information and a list of available commands and
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User options, see the <span><strong class="command">host</strong></span> man
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User page.
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User </p>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User</dd>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User<dt><span class="term"><span><strong class="command">nslookup</strong></span></span></dt>
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User<dd>
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User<p><span><strong class="command">nslookup</strong></span>
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User has two modes: interactive and
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User non-interactive. Interactive mode allows the user to
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User query name servers for information about various
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User hosts and domains or to print a list of hosts in a
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User domain. Non-interactive mode is used to print just
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User the name and requested information for a host or
666b453b37f9ccfe3c7984fb0b31b70a3ceb918fTinderbox User domain.
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User </p>
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User<div class="cmdsynopsis"><p><code class="command">nslookup</code> [-option...] [[<em class="replaceable"><code>host-to-find</code></em>] | [- [server]]]</p></div>
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User<p>
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User Interactive mode is entered when no arguments are given (the
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User default name server will be used) or when the first argument
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User is a
266afc085a8a74f4b13cb150234a4db21f65278bTinderbox User hyphen (`-') and the second argument is the host name or
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User Internet address
bea02a4cc08d57b9f36979906f291ac78a99060aTinderbox User of a name server.
9efd8fc7e811d3c0c160adeb5552c2df7e49df67Tinderbox User </p>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User<p>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User Non-interactive mode is used when the name or Internet
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User address
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User of the host to be looked up is given as the first argument.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User optional second argument specifies the host name or address
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt of a name server.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Due to its arcane user interface and frequently inconsistent
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User behavior, we do not recommend the use of <span><strong class="command">nslookup</strong></span>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Use <span><strong class="command">dig</strong></span> instead.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</dd>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User</dl></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User</div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="sect3" lang="en">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="titlepage"><div><div><h4 class="title">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<a name="admin_tools"></a>Administrative Tools</h4></div></div></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Administrative tools play an integral part in the management
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User of a server.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="variablelist"><dl>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="named-checkconf"></a><span class="term"><span><strong class="command">named-checkconf</strong></span></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dd>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The <span><strong class="command">named-checkconf</strong></span> program
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checks the syntax of a <code class="filename">named.conf</code> file.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [-jvz] [-t <em class="replaceable"><code>directory</code></em>] [<em class="replaceable"><code>filename</code></em>]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</dd>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="named-checkzone"></a><span class="term"><span><strong class="command">named-checkzone</strong></span></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</dt>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<dd>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<p>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The <span><strong class="command">named-checkzone</strong></span> program
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checks a master file for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein syntax and consistency.
350e5eecadfc5ee72b11b2cc46828c9a0bcd717cTinderbox User </p>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [-djqvD] [-c <em class="replaceable"><code>class</code></em>] [-o <em class="replaceable"><code>output</code></em>] [-t <em class="replaceable"><code>directory</code></em>] [-w <em class="replaceable"><code>directory</code></em>] [-k <em class="replaceable"><code>(ignore|warn|fail)</code></em>] [-n <em class="replaceable"><code>(ignore|warn|fail)</code></em>] [-W <em class="replaceable"><code>(ignore|warn)</code></em>] <em class="replaceable"><code>zone</code></em> [<em class="replaceable"><code>filename</code></em>]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</dd>
<dt>
<a name="named-compilezone"></a><span class="term"><span><strong class="command">named-compilezone</strong></span></span>
</dt>
<dd><p>
Similar to <span><strong class="command">named-checkzone,</strong></span> but
it always dumps the zone content to a specified file
(typically in a different format).
</p></dd>
<dt>
<a name="rndc"></a><span class="term"><span><strong class="command">rndc</strong></span></span>
</dt>
<dd>
<p>
The remote name daemon control
(<span><strong class="command">rndc</strong></span>) program allows the
system
administrator to control the operation of a name server.
Since <acronym class="acronym">BIND</acronym> 9.2, <span><strong class="command">rndc</strong></span>
supports all the commands of the BIND 8 <span><strong class="command">ndc</strong></span>
utility except <span><strong class="command">ndc start</strong></span> and
<span><strong class="command">ndc restart</strong></span>, which were also
not supported in <span><strong class="command">ndc</strong></span>'s
channel mode.
If you run <span><strong class="command">rndc</strong></span> without any
options
it will display a usage message as follows:
</p>
<div class="cmdsynopsis"><p><code class="command">rndc</code> [-c <em class="replaceable"><code>config</code></em>] [-s <em class="replaceable"><code>server</code></em>] [-p <em class="replaceable"><code>port</code></em>] [-y <em class="replaceable"><code>key</code></em>] <em class="replaceable"><code>command</code></em> [<em class="replaceable"><code>command</code></em>...]</p></div>
<p>See <a href="man.rndc.html" title="rndc"><span class="refentrytitle"><span class="application">rndc</span></span>(8)</a> for details of
the available <span><strong class="command">rndc</strong></span> commands.
</p>
<p>
<span><strong class="command">rndc</strong></span> requires a configuration file,
since all
communication with the server is authenticated with
digital signatures that rely on a shared secret, and
there is no way to provide that secret other than with a
configuration file. The default location for the
<span><strong class="command">rndc</strong></span> configuration file is
<code class="filename">/etc/rndc.conf</code>, but an
alternate
location can be specified with the <code class="option">-c</code>
option. If the configuration file is not found,
<span><strong class="command">rndc</strong></span> will also look in
<code class="filename">/etc/rndc.key</code> (or whatever
<code class="varname">sysconfdir</code> was defined when
the <acronym class="acronym">BIND</acronym> build was
configured).
The <code class="filename">rndc.key</code> file is
generated by
running <span><strong class="command">rndc-confgen -a</strong></span> as
described in
<a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage" title="controls Statement Definition and
Usage">the section called &#8220;<span><strong class="command">controls</strong></span> Statement Definition and
Usage&#8221;</a>.
</p>
<p>
The format of the configuration file is similar to
that of <code class="filename">named.conf</code>, but
limited to
only four statements, the <span><strong class="command">options</strong></span>,
<span><strong class="command">key</strong></span>, <span><strong class="command">server</strong></span> and
<span><strong class="command">include</strong></span>
statements. These statements are what associate the
secret keys to the servers with which they are meant to
be shared. The order of statements is not
significant.
</p>
<p>
The <span><strong class="command">options</strong></span> statement has
three clauses:
<span><strong class="command">default-server</strong></span>, <span><strong class="command">default-key</strong></span>,
and <span><strong class="command">default-port</strong></span>.
<span><strong class="command">default-server</strong></span> takes a
host name or address argument and represents the server
that will
be contacted if no <code class="option">-s</code>
option is provided on the command line.
<span><strong class="command">default-key</strong></span> takes
the name of a key as its argument, as defined by a <span><strong class="command">key</strong></span> statement.
<span><strong class="command">default-port</strong></span> specifies the
port to which
<span><strong class="command">rndc</strong></span> should connect if no
port is given on the command line or in a
<span><strong class="command">server</strong></span> statement.
</p>
<p>
The <span><strong class="command">key</strong></span> statement defines a
key to be used
by <span><strong class="command">rndc</strong></span> when authenticating
with
<span><strong class="command">named</strong></span>. Its syntax is
identical to the
<span><strong class="command">key</strong></span> statement in <code class="filename">named.conf</code>.
The keyword <strong class="userinput"><code>key</code></strong> is
followed by a key name, which must be a valid
domain name, though it need not actually be hierarchical;
thus,
a string like "<strong class="userinput"><code>rndc_key</code></strong>" is a valid
name.
The <span><strong class="command">key</strong></span> statement has two
clauses:
<span><strong class="command">algorithm</strong></span> and <span><strong class="command">secret</strong></span>.
While the configuration parser will accept any string as the
argument
to algorithm, currently only the strings
"<strong class="userinput"><code>hmac-md5</code></strong>",
"<strong class="userinput"><code>hmac-sha1</code></strong>",
"<strong class="userinput"><code>hmac-sha224</code></strong>",
"<strong class="userinput"><code>hmac-sha256</code></strong>",
"<strong class="userinput"><code>hmac-sha384</code></strong>"
and "<strong class="userinput"><code>hmac-sha512</code></strong>"
have any meaning. The secret is a base-64 encoded string
as specified in RFC 3548.
</p>
<p>
The <span><strong class="command">server</strong></span> statement
associates a key
defined using the <span><strong class="command">key</strong></span>
statement with a server.
The keyword <strong class="userinput"><code>server</code></strong> is followed by a
host name or address. The <span><strong class="command">server</strong></span> statement
has two clauses: <span><strong class="command">key</strong></span> and <span><strong class="command">port</strong></span>.
The <span><strong class="command">key</strong></span> clause specifies the
name of the key
to be used when communicating with this server, and the
<span><strong class="command">port</strong></span> clause can be used to
specify the port <span><strong class="command">rndc</strong></span> should
connect
to on the server.
</p>
<p>
A sample minimal configuration file is as follows:
</p>
<pre class="programlisting">
key rndc_key {
algorithm "hmac-sha256";
secret
"c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K";
};
options {
default-server 127.0.0.1;
default-key rndc_key;
};
</pre>
<p>
This file, if installed as <code class="filename">/etc/rndc.conf</code>,
would allow the command:
</p>
<p>
<code class="prompt">$ </code><strong class="userinput"><code>rndc reload</code></strong>
</p>
<p>
to connect to 127.0.0.1 port 953 and cause the name server
to reload, if a name server on the local machine were
running with
following controls statements:
</p>
<pre class="programlisting">
controls {
inet 127.0.0.1
allow { localhost; } keys { rndc_key; };
};
</pre>
<p>
and it had an identical key statement for
<code class="literal">rndc_key</code>.
</p>
<p>
Running the <span><strong class="command">rndc-confgen</strong></span>
program will
conveniently create a <code class="filename">rndc.conf</code>
file for you, and also display the
corresponding <span><strong class="command">controls</strong></span>
statement that you need to
add to <code class="filename">named.conf</code>.
Alternatively,
you can run <span><strong class="command">rndc-confgen -a</strong></span>
to set up
a <code class="filename">rndc.key</code> file and not
modify
<code class="filename">named.conf</code> at all.
</p>
</dd>
</dl></div>
</div>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
<a name="id2569462"></a>Signals</h3></div></div></div>
<p>
Certain UNIX signals cause the name server to take specific
actions, as described in the following table. These signals can
be sent using the <span><strong class="command">kill</strong></span> command.
</p>
<div class="informaltable"><table border="1">
<colgroup>
<col>
<col>
</colgroup>
<tbody>
<tr>
<td>
<p><span><strong class="command">SIGHUP</strong></span></p>
</td>
<td>
<p>
Causes the server to read <code class="filename">named.conf</code> and
reload the database.
</p>
</td>
</tr>
<tr>
<td>
<p><span><strong class="command">SIGTERM</strong></span></p>
</td>
<td>
<p>
Causes the server to clean up and exit.
</p>
</td>
</tr>
<tr>
<td>
<p><span><strong class="command">SIGINT</strong></span></p>
</td>
<td>
<p>
Causes the server to clean up and exit.
</p>
</td>
</tr>
</tbody>
</table></div>
</div>
</div>
</div>
<div class="navfooter">
<hr>
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="Bv9ARM.ch02.html">Prev</a>�</td>
<td width="20%" align="center">�</td>
<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch04.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">Chapter�2.�<acronym class="acronym">BIND</acronym> Resource Requirements�</td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top">�Chapter�4.�Advanced DNS Features</td>
</tr>
</table>
</div>
<p style="text-align: center;">BIND 9.11.0pre-alpha</p>
</body>
</html>