Bv9ARM.ch09.html revision 11e9368a226272085c337e9e74b79808c16fbdba
885f47576842cf3c569315b9a48bd9f0ca03f203Automatic Updater - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater - purpose with or without fee is hereby granted, provided that the above
7b67cfadd077feb0ec3e6c78385ba0d845a9789bMark Andrews - copyright notice and this permission notice appear in all copies.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - PERFORMANCE OF THIS SOFTWARE.
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="next" href="Bv9ARM.ch10.html" title="Manual pages">
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<table width="100%" summary="Navigation header">
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<tr><th colspan="3" align="center">Appendix�A.�Appendices</th></tr>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<div class="titlepage"><div><div><h2 class="title">
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<a name="Bv9ARM.ch09"></a>Appendix�A.�Appendices</h2></div></div></div>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2573795">Release Notes for BIND Version 9.11.0pre-alpha</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2607845">Acknowledgments</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2608017">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611297">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2614852">Prerequisite</a></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2614861">Compilation</a></span></dt>
db5b7e2cdf150c46e8242d3e2e3ad3f5c7300258Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2612155">Installation</a></span></dt>
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2612186">Known Defects/Restrictions</a></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613901">The dns.conf File</a></span></dt>
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613928">Sample Applications</a></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2615106">Library References</a></span></dt>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<div class="titlepage"><div><div><h2 class="title" style="clear: both">
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<a name="id2573795"></a>Release Notes for BIND Version 9.11.0pre-alpha</h2></div></div></div>
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews<div class="titlepage"><div><div><h3 class="title">
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews This document summarizes changes since the last production release
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews of BIND on the corresponding major release branch.
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater<div class="titlepage"><div><div><h3 class="title">
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater<a name="relnotes_download"></a>Download</h3></div></div></div>
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater The latest versions of BIND 9 software can always be found at
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater <a href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont There you will find additional information about each release,
52367885450d8f61d4f2d63292beb15ba8f39ac7Automatic Updater source code, and pre-compiled versions for Microsoft Windows
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont operating systems.
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater<div class="titlepage"><div><div><h3 class="title">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews A flaw in delegation handling could be exploited to put
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater <span><strong class="command">named</strong></span> into an infinite loop, in which
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater each lookup of a name server triggered additional lookups
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews of more name servers. This has been addressed by placing
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater limits on the number of levels of recursion
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater <span><strong class="command">named</strong></span> will allow (default 7), and
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater on the number of queries that it will send before
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater terminating a recursive query (default 50).
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater The recursion depth limit is configured via the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <code class="option">max-recursion-depth</code> option, and the query limit
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson via the <code class="option">max-recursion-queries</code> option.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson The flaw was discovered by Florian Maury of ANSSI, and is
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews disclosed in CVE-2014-8500. [RT #37580]
e8c7dc2a5ce48f11c07a67c9923eeb8f419ff19fEvan Hunt Two separate problems were identified in BIND's GeoIP code that
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater could lead to an assertion failure. One was triggered by use of
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater both IPv4 and IPv6 address families, the other by referencing
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater a GeoIP database in <code class="filename">named.conf</code> which was
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater not installed. Both are covered by CVE-2014-8680. [RT #37672]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater A less serious security flaw was also found in GeoIP: changes
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater to the <span><strong class="command">geoip-directory</strong></span> option in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="filename">named.conf</code> were ignored when running
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <span><strong class="command">rndc reconfig</strong></span>. In theory, this could allow
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater <span><strong class="command">named</strong></span> to allow access to unintended clients.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="titlepage"><div><div><h3 class="title">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="relnotes_features"></a>New Features</h3></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The serial number of a dynamically updatable zone can
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater now be set using
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <span><strong class="command">rndc signing -serial <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>zonename</code></em></strong></span>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater This is particularly useful with <code class="option">inline-signing</code>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater zones that have been reset. Setting the serial number to a value
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater larger than that on the slaves will trigger an AXFR-style
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater When answering recursive queries, SERVFAIL responses can now be
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater cached by the server for a limited time; subsequent queries for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the same query name and type will return another SERVFAIL until
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the cache times out. This reduces the frequency of retries
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when a query is persistently failing, which can be a burden
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater on recursive serviers. The SERVFAIL cache timeout is controlled
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater by <code class="option">servfail-ttl</code>, which defaults to 10 seconds
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater and has an upper limit of 30.
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews The new <span><strong class="command">rndc nta</strong></span> command can now be used to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater set a "negative trust anchor" (NTA), disabling DNSSEC validation for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a specific domain; this can be used when responses from a domain
bbb069be941f649228760edcc241122933c066d2Automatic Updater are known to be failing validation due to administrative error
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater rather than because of a spoofing attack. NTAs are strictly
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater temporary; by default they expire after one hour, but can be
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews configured to last up to one week. The default NTA lifetime
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater can be changed by setting the <code class="option">nta-lifetime</code> in
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater The EDNS Client Subnet (ECS) option is now supported for
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews authoritative servers; if a query contains an ECS option then
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews ACLs containing <code class="option">geoip</code> or <code class="option">ecs</code>
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater elements can match against the the address encoded in the option.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews This can be used to select a view for a query, so that different
f7c88d61cc1ad2435b0b7cfaedfc9d5248c0be25Automatic Updater answers can be provided depending on the client network.
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater The EDNS EXPIRE option has been implemented on the client
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater side, allowing a slave server to set the expiration timer
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater correctly when transferring zone data from another slave
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington A new <code class="option">masterfile-style</code> zone option controls
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the formatting of text zone files: When set to
7eda3642eea03f1181e41540c7c8791a57759383Automatic Updater <code class="literal">full</code>, the zone file will dumped in
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater single-line-per-record format.
7eda3642eea03f1181e41540c7c8791a57759383Automatic Updater <span><strong class="command">dig +ednsopt</strong></span> can now be used to set
00be0f9f61d4c6bf197d000bfa1a6b7e70ea0866Automatic Updater arbitrary EDNS options in DNS requests.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">dig +ednsflags</strong></span> can now be used to set
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater yet-to-be-defined EDNS flags in DNS requests.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">dig +[no]ednsnegotiation</strong></span> can now be used enable /
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater disable EDNS version negotiation.
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater <span><strong class="command">dig +header-only</strong></span> can now be used to send
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews queries without a question section.
e2caa7536302de34de6cc04025abcd53dc3a499aAutomatic Updater <span><strong class="command">dig +ttlunits</strong></span> causes <span><strong class="command">dig</strong></span>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to print TTL values with time-unit suffixes: w, d, h, m, s for
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater weeks, days, hours, minutes, and seconds.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <span><strong class="command">dig +zflag</strong></span> can be used to set the last
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater unassigned DNS header flag bit. This bit in normally zero.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <span><strong class="command">dig +dscp=<em class="replaceable"><code>value</code></em></strong></span>
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews can now be used to set the DSCP code point in outgoing query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="option">serial-update-method</code> can now be set to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="literal">date</code>. On update, the serial number will
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater be set to the current date in YYYYMMDDNN format.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <span><strong class="command">dnssec-signzone -N date</strong></span> also sets the serial
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater number to YYYYMMDDNN.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <span><strong class="command">named -L <em class="replaceable"><code>filename</code></em></strong></span>
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews causes named to send log messages to the specified file by
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews default instead of to the system log.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The rate limiter configured by the
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater <code class="option">serial-query-rate</code> option no longer covers
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater NOTIFY messages; those are now separately controlled by
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="option">notify-rate</code> and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="option">startup-notify-rate</code> (the latter of which
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater controls the rate of NOTIFY messages sent when the server
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is first started up or reconfigured).
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The default number of tasks and client objects available
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for serving lightweight resolver queries have been increased,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and are now configurable via the new <code class="option">lwres-tasks</code>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and <code class="option">lwres-clients</code> options in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="filename">named.conf</code>. [RT #35857]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Log output to files can now be buffered by specifying
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">buffered yes;</strong></span> when creating a channel.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">delv +tcp</strong></span> will exclusively use TCP when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington sending queries.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">named</strong></span> will now check to see whether
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington other name server processes are running before starting up.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington This is implemented in two ways: 1) by refusing to start
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington if the configured network interfaces all return "address
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in use", and 2) by acquiring a file lock on
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="filename">/var/run/named/named.lock</code>, or on a different
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington file specified via the <span><strong class="command">named -X</strong></span> command
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">rndc delzone</strong></span> can now be applied to zones
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington which were configured in <code class="filename">named.conf</code>;
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington it is no longer restricted to zones which were added by
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">rndc addzone</strong></span>. (Note, however, that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington this does not edit <code class="filename">named.conf</code>; the zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington must be removed from the configuration or it will return
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington when <span><strong class="command">named</strong></span> is restarted or reloaded.)
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">rndc showzone</strong></span> displays the current
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington configuration for a specified zone.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<div class="titlepage"><div><div><h3 class="title">
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ACLs containing <span><strong class="command">geoip asnum</strong></span> elements were
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington not correctly matched unless the full organization name was
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington specified in the ACL (as in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">geoip asnum "AS1234 Example, Inc.";</strong></span>).
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington They can now match against the AS number alone (as in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">geoip asnum "AS1234";</strong></span>).
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater When using native PKCS#11 cryptography (i.e.,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <span><strong class="command">configure --enable-native-pkcs11</strong></span>) HSM PINs
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater of up to 256 characters can now be used.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater NXDOMAIN responses to queries of type DS are now cached separately
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater from those for other types. This helps when using "grafted" zones
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater of type forward, for which the parent zone does not contain a
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater delegation, such as local top-level domains. Previously a query
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater of type DS for such a zone could cause the zone apex to be cached
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater as NXDOMAIN, blocking all subsequent queries. (Note: This
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater change is only helpful when DNSSEC validation is not enabled.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater "Grafted" zones without a delegation in the parent are not a
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater recommended configuration.)
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater Update forwarding performance has been improved by allowing
0d3490f93bb980fde704055e74c1b508987a5fe4Mark Andrews a single TCP connection to be shared between multiple updates.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington By default, <span><strong class="command">nsupdate</strong></span> will now check
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington the correctness of hostnames when adding records of type
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews A, AAAA, MX, SOA, NS, SRV or PTR. This behavior can be
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews disabled with <span><strong class="command">check-names no</strong></span>.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington Added support for OPENPGPKEY type.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The names of the files used to store managed keys and added
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater zones for each view are no longer based on the SHA256 hash
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of the view name, except when this is necessary because the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington view name contains characters that would be incompatible with use
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington as a file name. For views whose names do not contain forward
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington slashes ('/'), backslashes ('\'), or capital letters - which
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington could potentially cause namespace collision problems on
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater case-insensitive filesystems - files will now be named
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater after the view (for example, <code class="filename">internal.mkeys</code>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater or <code class="filename">external.nzf</code>). However, to ensure
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater consistent behavior when upgrading, if a file using the old
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater name format is found to exist, it will continue to be used.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "rndc" can now return text output of arbitrary size to
c01dec514a81ecf8c17ca3ef8c3ba95e437295ebAutomatic Updater the caller. (Prior to this, certain commands such as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "rndc tsig-list" and "rndc zonestatus" could return
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater truncated output.)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Errors reported when running <span><strong class="command">rndc addzone</strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (e.g., when a zone file cannot be loaded) have been clarified
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to make it easier to diagnose problems.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When encountering an authoritative name server whose name is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington an alias pointing to another name, the resolver treats
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington this as an error and skips to the next server. Previously
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington this happened silently; now the error will be logged to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the newly-created "cname" log category.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington If named is not configured to validate the answer then
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington allow fallback to plain DNS on timeout even when we know
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the server supports EDNS. This will allow the server to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington potentially resolve signed queries when TCP is being
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<div class="titlepage"><div><div><h3 class="title">
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span> and
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater <span><strong class="command">nslookup</strong></span> aborted when encountering
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a name which, after appending search list elements,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington exceeded 255 bytes. Such names are now skipped, but
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater processing of other names will continue. [RT #36892]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The error message generated when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">named-checkzone</strong></span> or
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">named-checkconf -z</strong></span> encounters a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="option">$TTL</code> directive without a value has
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington been clarified. [RT #37138]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Semicolon characters (;) included in TXT records were
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington incorrectly escaped with a backslash when the record was
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington displayed as text. This is actually only necessary when there
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington are no quotation marks. [RT #37159]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When files opened for writing by <span><strong class="command">named</strong></span>,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington such as zone journal files, were referenced more than once
b7aab05edae933e169d5f83c653935b17c7f0a8bMark Andrews in <code class="filename">named.conf</code>, it could lead to file
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington corruption as multiple threads wrote to the same file. This
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington is now detected when loading <code class="filename">named.conf</code>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and reported as an error. [RT #37172]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When checking for updates to trust anchors listed in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="option">managed-keys</code>, <span><strong class="command">named</strong></span>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews now revalidates keys based on the current set of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington active trust anchors, without relying on any cached
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington record of previous validation. [RT #37506]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Large-system tuning
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington (<span><strong class="command">configure --with-tuning=large</strong></span>) caused
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington problems on some platforms by setting a socket receive
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington buffer size that was too large. This is now detected and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington corrected at run time. [RT #37187]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When NXDOMAIN redirection is in use, queries for a name
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that is present in the redirection zone but a type that
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is not present will now return NOERROR instead of NXDOMAIN.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Due to an inadvertent removal of code in the previous
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater release, when <span><strong class="command">named</strong></span> encountered an
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater authoritative name server which dropped all EDNS queries,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater it did not always try plain DNS. This has been corrected.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater A regression caused nsupdate to use the default recursive servers
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater rather than the SOA MNAME server when sending the UPDATE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Adjusted max-recursion-queries to accommodate the smaller
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington initial packet sizes used in BIND 9.10 and higher when
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews contacting authoritative servers for the first time.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<div class="titlepage"><div><div><h3 class="title">
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<a name="end_of_life"></a>End of Life</h3></div></div></div>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews The end of life for BIND 9.11 is yet to be determined but
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington will not be before BIND 9.13.0 has been released for 6 months.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <a href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<div class="titlepage"><div><div><h3 class="title">
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Thank you to everyone who assisted us in making this release possible.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington If you would like to contribute to ISC to assist us in continuing to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington make quality open source software, please visit our donations page at
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <a href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="titlepage"><div><div><h2 class="title" style="clear: both">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2607845"></a>Acknowledgments</h2></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="titlepage"><div><div><h3 class="title">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Although the "official" beginning of the Domain Name
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater System occurred in 1984 with the publication of RFC 920, the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater core of the new system was described in 1983 in RFCs 882 and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 883. From 1984 to 1987, the ARPAnet (the precursor to today's
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Internet) became a testbed of experimentation for developing the
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater new naming/addressing scheme in a rapidly expanding,
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews operational network environment. New RFCs were written and
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater published in 1987 that modified the original documents to
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater incorporate improvements based on the working model. RFC 1034,
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater "Domain Names-Concepts and Facilities", and RFC 1035, "Domain
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater Names-Implementation and Specification" were published and
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater became the standards upon which all <acronym class="acronym">DNS</acronym> implementations are
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington The first working domain name server, called "Jeeves", was
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington written in 1983-84 by Paul Mockapetris for operation on DEC
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater machines located at the University of Southern California's
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington Sciences Institute (USC-ISI) and SRI International's Network
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Center (SRI-NIC). A <acronym class="acronym">DNS</acronym> server for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Unix machines, the Berkeley Internet
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Name Domain (<acronym class="acronym">BIND</acronym>) package, was
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater written soon after by a group of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater graduate students at the University of California at Berkeley
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a grant from the US Defense Advanced Research Projects
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Administration
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Versions of <acronym class="acronym">BIND</acronym> through
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 4.8.3 were maintained by the Computer
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Painter, David Riggle and Songnian Zhou made up the initial <acronym class="acronym">BIND</acronym>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater project team. After that, additional work on the software package
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater employee on loan to the CSRG, worked on <acronym class="acronym">BIND</acronym> for 2 years, from 1985
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to 1987. Many other people also contributed to <acronym class="acronym">BIND</acronym> development
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater during that time: Doug Kingston, Craig Partridge, Smoot
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Carl-Mitchell,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Mike Muuss, Jim Bloom and Mike Schwartz. <acronym class="acronym">BIND</acronym> maintenance was subsequently
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater handled by Mike Karels and �ivind Kure.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <acronym class="acronym">BIND</acronym> versions 4.9 and 4.9.1 were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater released by Digital Equipment
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Corporation (now Compaq Computer Corporation). Paul Vixie, then
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a DEC employee, became <acronym class="acronym">BIND</acronym>'s
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater primary caretaker. He was assisted
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Beecher, Andrew
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Wolfhugel, and others.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater In 1994, <acronym class="acronym">BIND</acronym> version 4.9.2 was sponsored by
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Vixie Enterprises. Paul
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Vixie became <acronym class="acronym">BIND</acronym>'s principal
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <acronym class="acronym">BIND</acronym> versions from 4.9.3 onward
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater have been developed and maintained
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater by the Internet Systems Consortium and its predecessor,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the Internet Software Consortium, with support being provided
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater by ISC's sponsors.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater As co-architects/programmers, Bob Halley and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Paul Vixie released the first production-ready version of
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater <acronym class="acronym">BIND</acronym> version 8 in May 1997.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater BIND version 9 was released in September 2000 and is a
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews major rewrite of nearly all aspects of the underlying
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater BIND architecture.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater BIND versions 4 and 8 are officially deprecated.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater No additional development is done
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater on BIND version 4 or BIND version 8.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <acronym class="acronym">BIND</acronym> development work is made
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater possible today by the sponsorship
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of several corporations, and by the tireless work efforts of
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater numerous individuals.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater<div class="titlepage"><div><div><h2 class="title" style="clear: both">
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608017"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="titlepage"><div><div><h3 class="title">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater IPv6 addresses are 128-bit identifiers for interfaces and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater sets of interfaces which were introduced in the <acronym class="acronym">DNS</acronym> to facilitate
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater scalable Internet routing. There are three types of addresses: <span class="emphasis"><em>Unicast</em></span>,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater an identifier for a single interface;
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <span class="emphasis"><em>Anycast</em></span>,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater an identifier for a set of interfaces; and <span class="emphasis"><em>Multicast</em></span>,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater an identifier for a set of interfaces. Here we describe the global
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater Unicast address scheme. For more information, see RFC 3587,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater "Global Unicast Address Format."
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater IPv6 unicast addresses consist of a
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <span class="emphasis"><em>global routing prefix</em></span>, a
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <span class="emphasis"><em>subnet identifier</em></span>, and an
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <span class="emphasis"><em>interface identifier</em></span>.
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater The global routing prefix is provided by the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington upstream provider or ISP, and (roughly) corresponds to the
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater IPv4 <span class="emphasis"><em>network</em></span> section
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of the address range.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater The subnet identifier is for local subnetting, much the
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater same as subnetting an
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater IPv4 /16 network into /24 subnets.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The interface identifier is the address of an individual
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington interface on a given network; in IPv6, addresses belong to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington interfaces rather than to machines.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The subnetting capability of IPv6 is much more flexible than
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that of IPv4: subnetting can be carried out on bit boundaries,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in much the same way as Classless InterDomain Routing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (CIDR), and the DNS PTR representation ("nibble" format)
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington makes setting up reverse zones easier.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The Interface Identifier must be unique on the local link,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and is usually generated automatically by the IPv6
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater implementation, although it is usually possible to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater override the default setting if necessary. A typical IPv6
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater address might look like:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">2001:db8:201:9:a00:20ff:fe81:2b32</strong></span>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington IPv6 address specifications often contain long strings
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of zeros, so the architects have included a shorthand for
bbf7c3fd96ae5e02cb84743c581862e35327032aAutomatic Updater them. The double colon (`::') indicates the longest possible
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of zeros that can fit, and can be used only once in an address.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
f8c47598b87a5eb5ff2ceda6c81d136212d59cefAutomatic Updater<a name="bibliography"></a>Bibliography (and Suggested Reading)</h2></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="titlepage"><div><div><h3 class="title">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="rfcs"></a>Request for Comments (RFCs)</h3></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Specification documents for the Internet protocol suite, including
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the <acronym class="acronym">DNS</acronym>, are published as part of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the Request for Comments (RFCs)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater series of technical notes. The standards themselves are defined
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington by the Internet Engineering Task Force (IETF) and the Internet
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <a href="ftp://www.isi.edu/in-notes/" target="_top">
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ftp://www.isi.edu/in-notes/RFC<em class="replaceable"><code>xxxx</code></em>.txt
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (where <em class="replaceable"><code>xxxx</code></em> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the number of the RFC). RFCs are also available via the Web at:
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <a href="http://www.ietf.org/rfc/" target="_top">http://www.ietf.org/rfc/</a>.
bbb069be941f649228760edcc241122933c066d2Automatic Updater<div class="titlepage"><div><div><h4 class="title">
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608341"></a>Bibliography</h4></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608352"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater<a name="id2608375"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
3e79333aa37d3b88959372431a02af8a3eb7cfd9Automatic Updater<a name="id2608398"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Implementation and
e076d0c88be69de7c190ab924d095e69d2e11f7aAndreas Gustafsson Specification</i>. </span><span class="pubdate">November 1987. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="proposed_standards"></a>Proposed Standards</h3>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608435"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Specification</i>. </span><span class="pubdate">July 1997. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608461"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Queries</i>. </span><span class="pubdate">March 1998. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608487"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608512"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608535"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater<a name="id2608590"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608617"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608644"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater<a name="id2608706"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608736"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608765"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608792"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Key Transaction Authentication for DNS
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews (GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater<a name="id2608874"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2608901"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2608937"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609002"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
53aed64e0f8553762fc0c380ee41cb42f514c7d5Brian Wellington<a name="id2609067"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
6de27e27ad6056d7c049feb912df5a6b9a56d1b8Automatic Updater Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Implementation</h3>
af3e516f771c8ba376a8cd954a7233badfce8cdcAutomatic Updater<a name="id2609141"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews Deployed <acronym class="acronym">DNS</acronym> Software</i>. </span><span class="pubdate">October 1993. </span></p>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<a name="id2609166"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<a name="id2609235"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<a name="id2609270"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<a name="id2609316"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<a name="id2609373"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<a name="id2609411"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609446"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
af3e516f771c8ba376a8cd954a7233badfce8cdcAutomatic Updater Name System</i>. </span><span class="pubdate">January 1996. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609569"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Services</i>. </span><span class="pubdate">October 1996. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609607"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Distribute MIXER
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609633"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2609658"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609685"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2609712"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609751"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609781"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2609811"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2609853"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2609886"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609913"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2609937"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater version 6</i>. </span><span class="pubdate">October 2003. </span></p>
73eb75dc212911e4da58a3ce0a4672d3910193ebBrian Wellington<a name="id2609994"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<acronym class="acronym">DNS</acronym> and the Internet</h3>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater<a name="id2610026"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and Other Types</i>. </span><span class="pubdate">April 1989. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2610052"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Support</i>. </span><span class="pubdate">October 1989. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610074"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610098"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610144"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2610167"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater<acronym class="acronym">DNS</acronym> Operations</h3>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater<a name="id2610225"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide</i>. </span><span class="pubdate">November 1987. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610248"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610275"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610301"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers</i>. </span><span class="pubdate">October 1996. </span></p>
8227257b1c0224a7991e04bb79dc5059d5062dfbAndreas Gustafsson<a name="id2610338"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater Network Services</i>. </span><span class="pubdate">October 1997. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<h3 class="title">Internationalized Domain Names</h3>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610384"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610416"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2610461"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610497"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for Internationalized Domain Names in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<h3 class="title">Other <acronym class="acronym">DNS</acronym>-related RFCs</h3>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Note: the following list of RFCs, although
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <acronym class="acronym">DNS</acronym>-related, are not
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater concerned with implementing software.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2610541"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Attributes</i>. </span><span class="pubdate">May 1993. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610564"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610589"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Balancing</i>. </span><span class="pubdate">April 1995. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610615"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610638"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610684"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610708"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater<a name="id2610734"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p>
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater<a name="id2610760"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<h3 class="title">Obsolete and Unimplemented Experimental RFC</h3>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610804"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater Location</i>. </span><span class="pubdate">November 1994. </span></p>
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater<a name="id2610861"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater<a name="id2610888"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
cab3e375b77a980a5d4b7e5e4ee90167439e7934Mark Andrews and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p>
cab3e375b77a980a5d4b7e5e4ee90167439e7934Mark Andrews<h3 class="title">Obsoleted DNS Security RFCs</h3>
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
510f19039bcd402dff28c85114551179670f482aAutomatic Updater Most of these have been consolidated into RFC4033,
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater RFC4034 and RFC4035 which collectively describe DNSSECbis.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610936"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2610976"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater<a name="id2611002"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2611032"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<a name="id2611058"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
d912d1139efa8410785f0fc88dfb7dc7fbaae6deMark Andrews<a name="id2611084"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
2fd97723b2ec7fc1975672780ab0c1c9a8c369d6Automatic Updater<a name="id2611121"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
282e38d96feb488fddbbc0b0409491094786977fMark Andrews<a name="id2611157"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2611184"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2611210"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p>
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews<a name="id2611255"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
0ca8fddd5b5e26d8a05f0936fc4b2666a025b9c0Mark Andrews<div class="titlepage"><div><div><h3 class="title">
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater<a name="internet_drafts"></a>Internet Drafts</h3></div></div></div>
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater Internet Drafts (IDs) are rough-draft working documents of
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater the Internet Engineering Task Force. They are, in essence, RFCs
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews in the preliminary stages of development. Implementors are
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews cautioned not
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews to regard IDs as archival, and they should not be quoted or cited
10b4a0c3a4eec1b22b990c0a0595fbda51f54e94Automatic Updater in any formal documents unless accompanied by the disclaimer that
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews they are "works in progress." IDs have a lifespan of six months
4f5257ba7afbe06e949d1577581de18b22ef6c05Automatic Updater after which they are deleted unless updated by their authors.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<div class="titlepage"><div><div><h3 class="title">
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<a name="id2611297"></a>Other Documents About <acronym class="acronym">BIND</acronym>
21f8d40dbd9be951555f46b0bfa23571c5a9b913Automatic Updater<div class="titlepage"><div><div><h4 class="title">
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<a name="id2611306"></a>Bibliography</h4></div></div></div>
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<a name="id2611308"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright � 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<a name="bind9.library"></a>BIND 9 DNS Library Support</h2></div></div></div>
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews<p>This version of BIND 9 "exports" its internal libraries so
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews that they can be used by third-party applications more easily (we
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews call them "export" libraries in this document). In addition to
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews all major DNS-related APIs BIND 9 is currently using, the export
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews libraries provide the following features:</p>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>The newly created "DNS client" module. This is a higher
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews level API that provides an interface to name resolution,
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews single DNS transaction with a particular server, and dynamic
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews update. Regarding name resolution, it supports advanced
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews features such as DNSSEC validation and caching. This module
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews supports both synchronous and asynchronous mode.</p></li>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>The new "IRS" (Information Retrieval System) library.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews It provides an interface to parse the traditional resolv.conf
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews file and more advanced, DNS-specific configuration file for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the rest of this package (see the description for the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>As part of the IRS library, newly implemented standard
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews address-name mapping functions, getaddrinfo() and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews getnameinfo(), are provided. They use the DNSSEC-aware
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews validating resolver backend, and could use other advanced
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews features of the BIND 9 libraries such as caching. The
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews getaddrinfo() function resolves both A and AAAA RRs
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews concurrently (when the address family is unspecified).</p></li>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>An experimental framework to support other event
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews libraries than BIND 9's internal event task system.</p></li>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h3 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2614852"></a>Prerequisite</h3></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<p>GNU make is required to build the export libraries (other
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews part of BIND 9 can still be built with other types of make). In
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the reminder of this document, "make" means GNU make. Note that
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews in some platforms you may need to invoke a different command name
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews than "make" (e.g. "gmake") to indicate it's GNU make.</p>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h3 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2614861"></a>Compilation</h3></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>/configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>make</code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews This will create (in addition to usual BIND 9 programs) and a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews separate set of libraries under the lib/export directory. For
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews example, <code class="filename">lib/export/dns/libdns.a</code> is the archive file of the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews export version of the BIND 9 DNS library. Sample application
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews programs using the libraries will also be built under the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h3 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2612155"></a>Installation</h3></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>cd lib/export</code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>make install</code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews This will install library object files under the directory
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specified by the --with-export-libdir configure option (default:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews EPREFIX/lib/bind9), and header files under the directory
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specified by the --with-export-includedir configure option
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Root privilege is normally required.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews "<span><strong class="command">make install</strong></span>" at the top directory will do the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews To see how to build your own
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews application after the installation, see
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <code class="filename">lib/export/samples/Makefile-postinstall.in</code>.</p>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h3 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2612186"></a>Known Defects/Restrictions</h3></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>Currently, win32 is not supported for the export
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews library. (Normal BIND 9 application can be built as
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<p>The "fixed" RRset order is not (currently) supported in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the export library. If you want to use "fixed" RRset order
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews for, e.g. <span><strong class="command">named</strong></span> while still building the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews export library even without the fixed order support, build
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews them separately:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>/configure --enable-fixed-rrset <em class="replaceable"><code>[other flags, but not --enable-exportlib]</code></em></code></strong>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews$ <strong class="userinput"><code>make</code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>/configure --enable-exportlib <em class="replaceable"><code>[other flags, but not --enable-fixed-rrset]</code></em></code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>cd lib/export</code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews$ <strong class="userinput"><code>make</code></strong>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>The client module and the IRS library currently do not
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews support DNSSEC validation using DLV (the underlying modules
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews can handle it, but there is no tunable interface to enable
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>RFC 5011 is not supported in the validating stub
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews resolver of the export library. In fact, it is not clear
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews whether it should: trust anchors would be a system-wide
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews configuration which would be managed by an administrator,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews while the stub resolver will be used by ordinary applications
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<li><p>Not all common <code class="filename">/etc/resolv.conf</code>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews options are supported
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews in the IRS library. The only available options in this
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h3 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2613901"></a>The dns.conf File</h3></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<p>The IRS library supports an "advanced" configuration file
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews related to the DNS library for configuration parameters that
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews would be beyond the capability of the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <code class="filename">resolv.conf</code> file.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Specifically, it is intended to provide DNSSEC related
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews configuration parameters. By default the path to this
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews configuration file is <code class="filename">/etc/dns.conf</code>.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews This module is very
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews experimental and the configuration syntax or library interfaces
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews may change in future versions. Currently, only the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <span><strong class="command">trusted-keys</strong></span>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews statement is supported, whose syntax is the same as the same name
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of statement for <code class="filename">named.conf</code>. (See
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <a href="Bv9ARM.ch06.html#trusted-keys" title="trusted-keys Statement Grammar">the section called “<span><strong class="command">trusted-keys</strong></span> Statement Grammar”</a> for details.)</p>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h3 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2613928"></a>Sample Applications</h3></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<p>Some sample application programs using this API are
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews provided for reference. The following is a brief description of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews these applications.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<div class="titlepage"><div><div><h4 class="title">
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<a name="id2613937"></a>sample: a simple stub resolver utility</h4></div></div></div>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews It sends a query of a given name (of a given optional RR type) to a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specified recursive server, and prints the result as a list of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews RRs. It can also act as a validating stub resolver if a trust
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews anchor is given via a set of command line options.</p>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Usage: sample [options] server_address hostname
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Options and Arguments:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specify the RR type of the query. The default is the A RR.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews [-a algorithm] [-e] -k keyname -K keystring
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specify a command-line DNS key to validate the answer. For
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews example, to specify the following DNSKEY of example.com:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews����������������example.com.�3600�IN�DNSKEY�257�3�5�xxx<br>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specify the options as follows:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews -e -k example.com -K "xxx"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews -e means that this key is a zone's "key signing key" (as known
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews as "secure Entry point").
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews When -a is omitted rsasha1 will be used by default.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews -s domain:alt_server_address
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specify a separate recursive server address for the specific
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews "domain". Example: -s example.com:2001:db8::1234
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews<dt><span class="term">server_address</span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington an IP(v4/v6) address of the recursive server to which queries
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews the domain name for the query
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews<div class="titlepage"><div><div><h4 class="title">
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews<a name="id2614027"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews Similar to "sample", but accepts a list
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews of (query) domain names as a separate file and resolves the names
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews asynchronously.</p>
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews Usage: sample-async [-s server_address] [-t RR_type] input_file</p>
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews Options and Arguments:
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews -s server_address
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews an IPv4 address of the recursive server to which queries are sent.
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater (IPv6 addresses are not supported in this implementation)
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater specify the RR type of the queries. The default is the A
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater a list of domain names to be resolved. each line
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater consists of a single domain name. Example:
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater<div class="titlepage"><div><div><h4 class="title">
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater<a name="id2614217"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater It sends a query to a specified server, and
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater prints the response with minimal processing. It doesn't act as a
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson "stub resolver": it stops the processing once it gets any
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews response from the server, whether it's a referral or an alias
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson (CNAME or DNAME) that would require further queries to get the
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic Updater ultimate answer. In other words, this utility acts as a very
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater simplified <span><strong class="command">dig</strong></span>.
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson Usage: sample-request [-t RRtype] server_address hostname
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews Options and Arguments:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specify the RR type of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the queries. The default is the A RR.
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews server_address
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater address of the recursive server to which the query is sent.
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic Updater the domain name for the query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<div class="titlepage"><div><div><h4 class="title">
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<a name="id2614281"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater This is a test program
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater to check getaddrinfo() and getnameinfo() behavior. It takes a
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater host name as an argument, calls getaddrinfo() with the given host
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater name, and calls getnameinfo() with the resulting IP addresses
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater returned by getaddrinfo(). If the dns.conf file exists and
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater defines a trust anchor, the underlying resolver will act as a
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater validating resolver, and getaddrinfo()/getnameinfo() will fail
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater with an EAI_INSECUREDATA error when DNSSEC validation fails.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater Usage: sample-gai hostname
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater<div class="titlepage"><div><div><h4 class="title">
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater<a name="id2614296"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater It accepts a single update command as a
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater command-line argument, sends an update request message to the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater authoritative server, and shows the response from the server. In
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater other words, this is a simplified <span><strong class="command">nsupdate</strong></span>.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater Usage: sample-update [options] (add|delete) "update data"
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater Options and Arguments:
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater -a auth_server
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater An IP address of the authoritative server that has authority
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater for the zone containing the update name. This should normally
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater be the primary authoritative server that accepts dynamic
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater updates. It can also be a secondary server that is configured
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater to forward update requests to the primary server.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater A TSIG key file to secure the update transaction. The keyfile
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater format is the same as that for the nsupdate utility.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater -p prerequisite
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater A prerequisite for the update (only one prerequisite can be
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater specified). The prerequisite format is the same as that is
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater accepted by the nsupdate utility.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater -r recursive_server
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater An IP address of a recursive server that this utility will
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater use. A recursive server may be necessary to identify the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater authoritative server address to which the update request is
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater The domain name of the zone that contains
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater Specify the type of update operation. Either "add" or "delete"
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater must be specified.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater Specify the data to be updated. A typical example of the data
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater would look like "name TTL RRtype RDATA".
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater<h3 class="title">Note</h3>In practice, either -a or -r must be specified. Others can
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater be optional; the underlying library routine tries to identify the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater appropriate server and the zone name for the update.</div>
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater Examples: assuming the primary authoritative server of the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater dynamic.example.com zone has an IPv6 address 2001:db8::1234,
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key add "foo.dynamic.example.com 30 IN A 192.168.2.1"</code></strong></pre>
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater adds an A RR for foo.dynamic.example.com using the given key.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com 30 IN A"</code></strong></pre>
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater removes all A RRs for foo.dynamic.example.com using the given key.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com"</code></strong></pre>
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater removes all RRs for foo.dynamic.example.com using the given key.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater<div class="titlepage"><div><div><h4 class="title">
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater<a name="id2614973"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater It checks a set
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater of domains to see the name servers of the domains behave
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater correctly in terms of RFC 4074. This is included in the set of
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater sample programs to show how the export library can be used in a
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater DNS-related application.
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater Usage: nsprobe [-d] [-v [-v...]] [-c cache_address] [input_file]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater run in the "debug" mode. with this option nsprobe will dump
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater every RRs it receives.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater increase verbosity of other normal log messages. This can be
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater specified multiple times
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater -c cache_address
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater specify an IP address of a recursive (caching) name server.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater nsprobe uses this server to get the NS RRset of each domain and
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater the A and/or AAAA RRsets for the name servers. The default
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater value is 127.0.0.1.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater a file name containing a list of domain (zone) names to be
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater probed. when omitted the standard input will be used. Each
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater line of the input file specifies a single domain name such as
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater "example.com". In general this domain name must be the apex
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater name of some DNS zone (unlike normal "host names" such as
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater "www.example.com"). nsprobe first identifies the NS RRsets for
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater the given domain name, and sends A and AAAA queries to these
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater servers for some "widely used" names under the zone;
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater specifically, adding "www" and "ftp" to the zone name.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater<div class="titlepage"><div><div><h3 class="title">
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater<a name="id2615106"></a>Library References</h3></div></div></div>
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater<p>As of this writing, there is no formal "manual" of the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater libraries, except this document, header files (some of them
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater provide pretty detailed explanations), and sample application
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater<table width="100%" summary="Navigation footer">
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater<td width="40%" align="left" valign="top">Chapter�8.�Troubleshooting�</td>
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater<td width="40%" align="right" valign="top">�Manual pages</td>
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater<p style="text-align: center;">BIND 9.11.0pre-alpha</p>