Bv9ARM.ch09.html revision daf4204f82af39a71de8be039c2070aa605145a9
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews - Permission to use, copy, modify, and/or distribute this software for any
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews - purpose with or without fee is hereby granted, provided that the above
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews - copyright notice and this permission notice appear in all copies.
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews<!-- $Id$ -->
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews<link rel="next" href="Bv9ARM.ch10.html" title="Manual pages">
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews<table width="100%" summary="Navigation header">
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews<tr><th colspan="3" align="center">Appendix�A.�Appendices</th></tr>
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews<div class="titlepage"><div><div><h2 class="title">
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews<a name="Bv9ARM.ch09"></a>Appendix�A.�Appendices</h2></div></div></div>
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2580588">Release Notes for BIND Version 9.11.0pre-alpha</a></span></dt>
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2607587">Acknowledgments</a></span></dt>
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2607827">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611038">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613054">Prerequisite</a></span></dt>
75e184e4b80c499859574257dd5781d62cfed0b3Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613064">Compilation</a></span></dt>
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613089">Installation</a></span></dt>
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613188">Known Defects/Restrictions</a></span></dt>
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613401">The dns.conf File</a></span></dt>
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613428">Sample Applications</a></span></dt>
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2614605">Library References</a></span></dt>
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews<a name="id2580588"></a>Release Notes for BIND Version 9.11.0pre-alpha</h2></div></div></div>
81e302788a444b81231a7cda721548a020ae5660Brian Wellington<div class="titlepage"><div><div><h3 class="title">
81e302788a444b81231a7cda721548a020ae5660Brian Wellington<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
c00a1eb423623442aff428336bb55590f79013bbMark Andrews This document summarizes changes since the last production release
c00a1eb423623442aff428336bb55590f79013bbMark Andrews of BIND on the corresponding major release branch.
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews<div class="titlepage"><div><div><h3 class="title">
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington<a name="relnotes_download"></a>Download</h3></div></div></div>
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington The latest versions of BIND 9 software can always be found at
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington <a href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington There you will find additional information about each release,
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews source code, and pre-compiled versions for Microsoft Windows
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews operating systems.
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews<div class="titlepage"><div><div><h3 class="title">
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews Errors reported when running <span><strong class="command">rndc addzone</strong></span>
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews (e.g., when a zone file cannot be loaded) have been clarified
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews to make it easier to diagnose problems.
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews<div class="titlepage"><div><div><h3 class="title">
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews<a name="relnotes_features"></a>New Features</h3></div></div></div>
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews The serial number of a dynamically updatable zone can
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews now be set using
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews <span><strong class="command">rndc signing -serial <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>zonename</code></em></strong></span>.
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews This is particularly useful with <code class="option">inline-signing</code>
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews zones that have been reset. Setting the serial number to a value
6b610836bc081fdadf7bc7a16ce27f422c6b5638Brian Wellington larger than that on the slaves will trigger an AXFR-style
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews When answering recursive queries, SERVFAIL responses can now be
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews cached by the server for a limited time; subsequent queries for
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews the same query name and type will return another SERVFAIL until
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews the cache times out. This reduces the frequency of retries
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews when a query is persistently failing, which can be a burden
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews on recursive serviers. The SERVFAIL cache timeout is controlled
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews by <code class="option">servfail-ttl</code>, which defaults to 10 seconds
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews and has an upper limit of 30.
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews The new <span><strong class="command">rndc nta</strong></span> command can now be used to
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews set a "negative trust anchor" (NTA), disabling DNSSEC validation for
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews a specific domain; this can be used when responses from a domain
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews are known to be failing validation due to administrative error
faf23095be9a0b5e2696f2b1f1a260af16e9ebeaMark Andrews rather than because of a spoofing attack. NTAs are strictly
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews temporary; by default they expire after one hour, but can be
faf23095be9a0b5e2696f2b1f1a260af16e9ebeaMark Andrews configured to last up to one week. The default NTA lifetime
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews can be changed by setting the <code class="option">nta-lifetime</code> in
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews The EDNS Client Subnet (ECS) option is now supported for
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews authoritative servers; if a query contains an ECS option then
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews ACLs containing <code class="option">geoip</code> or <code class="option">ecs</code>
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews elements can match against the the address encoded in the option.
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews This can be used to select a view for a query, so that different
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews answers can be provided depending on the client network.
986be654feec852eb9da0d15599f18d0035e569bMark Andrews The EDNS EXPIRE option has been implemented on the client
986be654feec852eb9da0d15599f18d0035e569bMark Andrews side, allowing a slave server to set the expiration timer
986be654feec852eb9da0d15599f18d0035e569bMark Andrews correctly when transferring zone data from another slave
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews A new <code class="option">masterfile-style</code> zone option controls
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews the formatting of text zone files: When set to
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews <code class="literal">full</code>, the zone file will dumped in
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews single-line-per-record format.
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews <span><strong class="command">dig +ednsopt</strong></span> can now be used to set
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews arbitrary EDNS options in DNS requests.
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews <span><strong class="command">dig +ednsflags</strong></span> can now be used to set
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews yet-to-be-defined EDNS flags in DNS requests.
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews <span><strong class="command">dig +[no]ednsnegotiation</strong></span> can now be used enable /
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews disable EDNS version negotiation.
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews <span><strong class="command">dig +header-only</strong></span> can now be used to send
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews queries without a question section.
eeede5be4b3ff940b622799a04951e0dc45ad45fAndreas Gustafsson <span><strong class="command">dig +ttlunits</strong></span> causes <span><strong class="command">dig</strong></span>
eeede5be4b3ff940b622799a04951e0dc45ad45fAndreas Gustafsson to print TTL values with time-unit suffixes: w, d, h, m, s for
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews weeks, days, hours, minutes, and seconds.
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews <span><strong class="command">dig +zflag</strong></span> can be used to set the last
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews unassigned DNS header flag bit. This bit in normally zero.
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews <span><strong class="command">dig +dscp=<em class="replaceable"><code>value</code></em></strong></span>
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews can now be used to set the DSCP code point in outgoing query
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews <code class="option">serial-update-method</code> can now be set to
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews <code class="literal">date</code>. On update, the serial number will
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews be set to the current date in YYYYMMDDNN format.
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington <span><strong class="command">dnssec-signzone -N date</strong></span> also sets the serial
9aa1fb4861dc1d45f5a02fb1b9a9b815cc863747Mark Andrews number to YYYYMMDDNN.
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson <span><strong class="command">named -L <em class="replaceable"><code>filename</code></em></strong></span>
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson causes named to send log messages to the specified file by
0b809e3e23f9f3d9697def5f447aa57d5aeef56bAndreas Gustafsson default instead of to the system log.
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington The rate limiter configured by the
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington <code class="option">serial-query-rate</code> option no longer covers
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington NOTIFY messages; those are now separately controlled by
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington <code class="option">notify-rate</code> and
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington <code class="option">startup-notify-rate</code> (the latter of which
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington controls the rate of NOTIFY messages sent when the server
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington is first started up or reconfigured).
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington The default number of tasks and client objects available
683f10428e292811317df38fa324f242abbf7384Mark Andrews for serving lightweight resolver queries have been increased,
683f10428e292811317df38fa324f242abbf7384Mark Andrews and are now configurable via the new <code class="option">lwres-tasks</code>
683f10428e292811317df38fa324f242abbf7384Mark Andrews and <code class="option">lwres-clients</code> options in
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews <code class="filename">named.conf</code>. [RT #35857]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews Log output to files can now be buffered by specifying
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews <span><strong class="command">buffered yes;</strong></span> when creating a channel.
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington<div class="titlepage"><div><div><h3 class="title">
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington ACLs containing <span><strong class="command">geoip asnum</strong></span> elements were
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington not correctly matched unless the full organization name was
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington specified in the ACL (as in
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington <span><strong class="command">geoip asnum "AS1234 Example, Inc.";</strong></span>).
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington They can now match against the AS number alone (as in
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington <span><strong class="command">geoip asnum "AS1234";</strong></span>).
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington When using native PKCS#11 cryptography (i.e.,
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews <span><strong class="command">configure --enable-native-pkcs11</strong></span>) HSM PINs
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews of up to 256 characters can now be used.
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews NXDOMAIN responses to queries of type DS are now cached separately
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews from those for other types. This helps when using "grafted" zones
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington of type forward, for which the parent zone does not contain a
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington delegation, such as local top-level domains. Previously a query
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington of type DS for such a zone could cause the zone apex to be cached
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews as NXDOMAIN, blocking all subsequent queries. (Note: This
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews change is only helpful when DNSSEC validation is not enabled.
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews "Grafted" zones without a delegation in the parent are not a
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews recommended configuration.)
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews Update forwarding performance has been improved by allowing
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews a single TCP connection to be shared between multiple updates.
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews By default, <span><strong class="command">nsupdate</strong></span> will now check
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews the correctness of hostnames when adding records of type
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews A, AAAA, MX, SOA, NS, SRV or PTR. This behavior can be
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews disabled with <span><strong class="command">check-names no</strong></span>.
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson Added support for OPENPGPKEY type.
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews<div class="titlepage"><div><div><h3 class="title">
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span> and
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews <span><strong class="command">nslookup</strong></span> aborted when encountering
3036da01090c0d1e11cddc26af16630d6d9c1f39Mark Andrews a name which, after appending search list elements,
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson exceeded 255 bytes. Such names are now skipped, but
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews processing of other names will continue. [RT #36892]
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews The error message generated when
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson <span><strong class="command">named-checkzone</strong></span> or
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews <span><strong class="command">named-checkconf -z</strong></span> encounters a
58d943711575376b05b3b3b303922a8a9d7ce9c1Mark Andrews <code class="option">$TTL</code> directive without a value has
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews been clarified. [RT #37138]
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson Semicolon characters (;) included in TXT records were
23fb770906bf1fd98210f16ad660078274242963Mark Andrews incorrectly escaped with a backslash when the record was
23fb770906bf1fd98210f16ad660078274242963Mark Andrews displayed as text. This is actually only necessary when there
23fb770906bf1fd98210f16ad660078274242963Mark Andrews are no quotation marks. [RT #37159]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington When files opened for writing by <span><strong class="command">named</strong></span>,
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews such as zone journal files, were referenced more than once
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews in <code class="filename">named.conf</code>, it could lead to file
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews corruption as multiple threads wrote to the same file. This
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews is now detected when loading <code class="filename">named.conf</code>
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews and reported as an error. [RT #37172]
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews When checking for updates to trust anchors listed in
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson <code class="option">managed-keys</code>, <span><strong class="command">named</strong></span>
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson now revalidates keys based on the current set of
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson active trust anchors, without relying on any cached
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson record of previous validation. [RT #37506]
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews Large-system tuning
0d6f70f1dbf77cf10e0bae8683c741f5924f6afeMark Andrews (<span><strong class="command">configure --with-tuning=large</strong></span>) caused
b938d2af619822a8262c86223cad958511e716a9Andreas Gustafsson problems on some platforms by setting a socket receive
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews buffer size that was too large. This is now detected and
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews corrected at run time. [RT #37187]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson<div class="titlepage"><div><div><h3 class="title">
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson<a name="end_of_life"></a>End of Life</h3></div></div></div>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson The end of life for BIND 9.11 is yet to be determined but
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson will not be before BIND 9.13.0 has been released for 6 months.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <a href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson<div class="titlepage"><div><div><h3 class="title">
f2c49862fb348586bb4b95a5388c86e0c0cbfa2cAndreas Gustafsson<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
45fe575607b91147ed753d175a7255198f14f197Andreas Gustafsson Thank you to everyone who assisted us in making this release possible.
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews If you would like to contribute to ISC to assist us in continuing to
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews make quality open source software, please visit our donations page at
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews <a href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews<a name="id2607587"></a>Acknowledgments</h2></div></div></div>
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews<div class="titlepage"><div><div><h3 class="title">
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson<a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington Although the "official" beginning of the Domain Name
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington System occurred in 1984 with the publication of RFC 920, the
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington core of the new system was described in 1983 in RFCs 882 and
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington 883. From 1984 to 1987, the ARPAnet (the precursor to today's
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington Internet) became a testbed of experimentation for developing the
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington new naming/addressing scheme in a rapidly expanding,
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington operational network environment. New RFCs were written and
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington published in 1987 that modified the original documents to
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington incorporate improvements based on the working model. RFC 1034,
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington "Domain Names-Concepts and Facilities", and RFC 1035, "Domain
8bb79fc9b9952172d10f56f31739730e38d4b013Brian Wellington Names-Implementation and Specification" were published and
f59d47928ed33d1546e8f982370086429f727e85Andreas Gustafsson became the standards upon which all <acronym class="acronym">DNS</acronym> implementations are
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson The first working domain name server, called "Jeeves", was
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson written in 1983-84 by Paul Mockapetris for operation on DEC
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson machines located at the University of Southern California's
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson Sciences Institute (USC-ISI) and SRI International's Network
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson Center (SRI-NIC). A <acronym class="acronym">DNS</acronym> server for
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews Unix machines, the Berkeley Internet
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson Name Domain (<acronym class="acronym">BIND</acronym>) package, was
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson written soon after by a group of
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews graduate students at the University of California at Berkeley
892476530f3971aff52f25103d488ece9b01f673Andreas Gustafsson a grant from the US Defense Advanced Research Projects
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson Administration
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews Versions of <acronym class="acronym">BIND</acronym> through
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson 4.8.3 were maintained by the Computer
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson Painter, David Riggle and Songnian Zhou made up the initial <acronym class="acronym">BIND</acronym>
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson project team. After that, additional work on the software package
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews employee on loan to the CSRG, worked on <acronym class="acronym">BIND</acronym> for 2 years, from 1985
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews to 1987. Many other people also contributed to <acronym class="acronym">BIND</acronym> development
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson during that time: Doug Kingston, Craig Partridge, Smoot
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson Carl-Mitchell,
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson Mike Muuss, Jim Bloom and Mike Schwartz. <acronym class="acronym">BIND</acronym> maintenance was subsequently
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson handled by Mike Karels and �ivind Kure.
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews <acronym class="acronym">BIND</acronym> versions 4.9 and 4.9.1 were
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson released by Digital Equipment
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson Corporation (now Compaq Computer Corporation). Paul Vixie, then
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson a DEC employee, became <acronym class="acronym">BIND</acronym>'s
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson primary caretaker. He was assisted
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson Beecher, Andrew
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington Wolfhugel, and others.
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson In 1994, <acronym class="acronym">BIND</acronym> version 4.9.2 was sponsored by
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson Vixie Enterprises. Paul
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson Vixie became <acronym class="acronym">BIND</acronym>'s principal
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews <acronym class="acronym">BIND</acronym> versions from 4.9.3 onward
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson have been developed and maintained
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews by the Internet Systems Consortium and its predecessor,
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews the Internet Software Consortium, with support being provided
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews by ISC's sponsors.
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson As co-architects/programmers, Bob Halley and
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson Paul Vixie released the first production-ready version of
ce6caa07591b3723968c22f5aa13740f9609135aAndreas Gustafsson <acronym class="acronym">BIND</acronym> version 8 in May 1997.
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews BIND version 9 was released in September 2000 and is a
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews major rewrite of nearly all aspects of the underlying
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer BIND architecture.
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson BIND versions 4 and 8 are officially deprecated.
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson No additional development is done
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson on BIND version 4 or BIND version 8.
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson <acronym class="acronym">BIND</acronym> development work is made
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson possible today by the sponsorship
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson of several corporations, and by the tireless work efforts of
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson numerous individuals.
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews<a name="id2607827"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews<div class="titlepage"><div><div><h3 class="title">
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews<a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div>
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews IPv6 addresses are 128-bit identifiers for interfaces and
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson sets of interfaces which were introduced in the <acronym class="acronym">DNS</acronym> to facilitate
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson scalable Internet routing. There are three types of addresses: <span class="emphasis"><em>Unicast</em></span>,
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson an identifier for a single interface;
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson <span class="emphasis"><em>Anycast</em></span>,
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews an identifier for a set of interfaces; and <span class="emphasis"><em>Multicast</em></span>,
9eec883bf871ee2235009e889440f986c98908b8Andreas Gustafsson an identifier for a set of interfaces. Here we describe the global
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer Unicast address scheme. For more information, see RFC 3587,
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson "Global Unicast Address Format."
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson IPv6 unicast addresses consist of a
088eaf3878580eebbbd2b020411532af278aae5aAndreas Gustafsson <span class="emphasis"><em>global routing prefix</em></span>, a
6b13908f7030e09fb4573f3c2f8d7a5edc70e0b5Mark Andrews <span class="emphasis"><em>subnet identifier</em></span>, and an
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews <span class="emphasis"><em>interface identifier</em></span>.
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson The global routing prefix is provided by the
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson upstream provider or ISP, and (roughly) corresponds to the
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson IPv4 <span class="emphasis"><em>network</em></span> section
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer of the address range.
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson The subnet identifier is for local subnetting, much the
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson same as subnetting an
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson IPv4 /16 network into /24 subnets.
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington The interface identifier is the address of an individual
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington interface on a given network; in IPv6, addresses belong to
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews interfaces rather than to machines.
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson The subnetting capability of IPv6 is much more flexible than
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson that of IPv4: subnetting can be carried out on bit boundaries,
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson in much the same way as Classless InterDomain Routing
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews (CIDR), and the DNS PTR representation ("nibble" format)
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews makes setting up reverse zones easier.
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews The Interface Identifier must be unique on the local link,
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews and is usually generated automatically by the IPv6
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews implementation, although it is usually possible to
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews override the default setting if necessary. A typical IPv6
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews address might look like:
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews <span><strong class="command">2001:db8:201:9:a00:20ff:fe81:2b32</strong></span>
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews IPv6 address specifications often contain long strings
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews of zeros, so the architects have included a shorthand for
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews them. The double colon (`::') indicates the longest possible
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews of zeros that can fit, and can be used only once in an address.
923de3bb9cf4d619de206544975986a22b18196fMark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews<a name="bibliography"></a>Bibliography (and Suggested Reading)</h2></div></div></div>
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews<div class="titlepage"><div><div><h3 class="title">
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews<a name="rfcs"></a>Request for Comments (RFCs)</h3></div></div></div>
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews Specification documents for the Internet protocol suite, including
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews the <acronym class="acronym">DNS</acronym>, are published as part of
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews the Request for Comments (RFCs)
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews series of technical notes. The standards themselves are defined
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews by the Internet Engineering Task Force (IETF) and the Internet
64e9b7eafb798c75e9a40948cf05d8847da59d9dAndreas Gustafsson Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews <a href="ftp://www.isi.edu/in-notes/" target="_top">
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews ftp://www.isi.edu/in-notes/RFC<em class="replaceable"><code>xxxx</code></em>.txt
c8d9ff1fe871a0e9d5834240c5872a26166cc240Andreas Gustafsson (where <em class="replaceable"><code>xxxx</code></em> is
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews the number of the RFC). RFCs are also available via the Web at:
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews <a href="http://www.ietf.org/rfc/" target="_top">http://www.ietf.org/rfc/</a>.
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews<div class="titlepage"><div><div><h4 class="title">
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews<a name="id2608014"></a>Bibliography</h4></div></div></div>
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson<a name="id2608025"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
1418d7292da7ebaba1ba389d60192023c0170245Andreas Gustafsson<a name="id2608049"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson<a name="id2608072"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Implementation and
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson Specification</i>. </span><span class="pubdate">November 1987. </span></p>
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson<a name="proposed_standards"></a>Proposed Standards</h3>
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews<a name="id2608108"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson Specification</i>. </span><span class="pubdate">July 1997. </span></p>
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews<a name="id2608135"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews Queries</i>. </span><span class="pubdate">March 1998. </span></p>
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson<a name="id2608161"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson<a name="id2608185"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews<a name="id2608209"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson<a name="id2608264"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson<a name="id2608291"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews<a name="id2608317"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson<a name="id2608379"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson<a name="id2608409"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews<a name="id2608439"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson<a name="id2608466"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson Key Transaction Authentication for DNS
1255d388f034dc556d235a002527101781dbeb29Mark Andrews (GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p>
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews<acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews<a name="id2608616"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews<a name="id2608643"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews<a name="id2608679"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson<a name="id2608744"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson<a name="id2608809"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews<h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym>
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews Implementation</h3>
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews<a name="id2608883"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews Deployed <acronym class="acronym">DNS</acronym> Software</i>. </span><span class="pubdate">October 1993. </span></p>
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews<a name="id2608908"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p>
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson<a name="id2608977"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews<a name="id2609012"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p>
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson<h3 class="title">Resource Record Types</h3>
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews<a name="id2609058"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson<a name="id2609115"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson<a name="id2609153"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p>
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson<a name="id2609188"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson Name System</i>. </span><span class="pubdate">January 1996. </span></p>
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson<a name="id2609242"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson Services</i>. </span><span class="pubdate">October 1996. </span></p>
9bdb01e6c382e897572791b12190472955994d87Mark Andrews<a name="id2609281"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson Distribute MIXER
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p>
417872b98aec720d587a9ef0197e25e78a2b7ee9Mark Andrews<a name="id2609306"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson<a name="id2609332"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews<a name="id2609427"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson<a name="id2609453"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson<a name="id2609493"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson<a name="id2609523"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson<a name="id2609553"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson<a name="id2609595"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson<a name="id2609628"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
cf638fc378d74dd4afa59fe11d04da7b0cddca88Andreas Gustafsson<a name="id2609655"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson<a name="id2609678"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson version 6</i>. </span><span class="pubdate">October 2003. </span></p>
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson<a name="id2609736"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson<acronym class="acronym">DNS</acronym> and the Internet</h3>
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson<a name="id2609768"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson and Other Types</i>. </span><span class="pubdate">April 1989. </span></p>
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson<a name="id2609794"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson Support</i>. </span><span class="pubdate">October 1989. </span></p>
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson<a name="id2609816"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews<a name="id2609840"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews<a name="id2609885"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson<a name="id2609909"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson<acronym class="acronym">DNS</acronym> Operations</h3>
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson<a name="id2609966"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide</i>. </span><span class="pubdate">November 1987. </span></p>
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson<a name="id2609990"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p>
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson<a name="id2610017"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p>
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson<a name="id2610043"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers</i>. </span><span class="pubdate">October 1996. </span></p>
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson<a name="id2610080"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson Network Services</i>. </span><span class="pubdate">October 1997. </span></p>
3dff229f5dd223568476acec4df1f513acb00b1dAndreas Gustafsson<h3 class="title">Internationalized Domain Names</h3>
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews<a name="id2610125"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p>
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson<a name="id2610157"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson<a name="id2610203"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson<a name="id2610238"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson for Internationalized Domain Names in
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson<h3 class="title">Other <acronym class="acronym">DNS</acronym>-related RFCs</h3>
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson Note: the following list of RFCs, although
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson <acronym class="acronym">DNS</acronym>-related, are not
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson concerned with implementing software.
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson<a name="id2610283"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson Attributes</i>. </span><span class="pubdate">May 1993. </span></p>
595a14576ea14884c35b3726f054f2065365620bMark Andrews<a name="id2610306"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson<a name="id2610331"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson Balancing</i>. </span><span class="pubdate">April 1995. </span></p>
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson<a name="id2610357"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson<a name="id2610380"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews<a name="id2610426"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson<a name="id2610450"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson<a name="id2610476"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p>
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson<a name="id2610502"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
ea34bcc6376555296a08e4c9e2f9c2cbe58378a9Andreas Gustafsson<h3 class="title">Obsolete and Unimplemented Experimental RFC</h3>
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews<a name="id2610546"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer Location</i>. </span><span class="pubdate">November 1994. </span></p>
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer<a name="id2610603"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews<a name="id2610630"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews<h3 class="title">Obsoleted DNS Security RFCs</h3>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington Most of these have been consolidated into RFC4033,
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews RFC4034 and RFC4035 which collectively describe DNSSECbis.
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews<a name="id2610678"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson<a name="id2610717"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson<a name="id2610744"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews<a name="id2610774"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p>
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson<a name="id2610800"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson<a name="id2610826"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson<a name="id2610862"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson<a name="id2610899"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews<a name="id2610925"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews<a name="id2610952"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson (RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p>
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson<a name="id2610997"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson<div class="titlepage"><div><div><h3 class="title">
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson<a name="internet_drafts"></a>Internet Drafts</h3></div></div></div>
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson Internet Drafts (IDs) are rough-draft working documents of
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews the Internet Engineering Task Force. They are, in essence, RFCs
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews in the preliminary stages of development. Implementors are
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington to regard IDs as archival, and they should not be quoted or cited
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson in any formal documents unless accompanied by the disclaimer that
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington they are "works in progress." IDs have a lifespan of six months
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson after which they are deleted unless updated by their authors.
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews<div class="titlepage"><div><div><h3 class="title">
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews<a name="id2611038"></a>Other Documents About <acronym class="acronym">BIND</acronym>
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews<div class="titlepage"><div><div><h4 class="title">
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews<a name="id2611048"></a>Bibliography</h4></div></div></div>
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews<a name="id2611050"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright � 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson<div class="titlepage"><div><div><h2 class="title" style="clear: both">
5af0708e7fd78976a33de70f9380785f4086a1f0Andreas Gustafsson<a name="bind9.library"></a>BIND 9 DNS Library Support</h2></div></div></div>
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson<p>This version of BIND 9 "exports" its internal libraries so
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson that they can be used by third-party applications more easily (we
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews call them "export" libraries in this document). In addition to
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews all major DNS-related APIs BIND 9 is currently using, the export
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews libraries provide the following features:</p>
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews<li><p>The newly created "DNS client" module. This is a higher
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson level API that provides an interface to name resolution,
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews single DNS transaction with a particular server, and dynamic
773e64ec150c33269e748d96dd95726ed7e0d842Mark Andrews update. Regarding name resolution, it supports advanced
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews features such as DNSSEC validation and caching. This module
cb8fd52bbeaf40c9166a0144541c4ff2bafc2dd6Andreas Gustafsson supports both synchronous and asynchronous mode.</p></li>
1eaad22e111709254c70953a4dc768b6d4d31646Mark Andrews<li><p>The new "IRS" (Information Retrieval System) library.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson It provides an interface to parse the traditional resolv.conf
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson file and more advanced, DNS-specific configuration file for
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson the rest of this package (see the description for the
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson<li><p>As part of the IRS library, newly implemented standard
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson address-name mapping functions, getaddrinfo() and
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson getnameinfo(), are provided. They use the DNSSEC-aware
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer validating resolver backend, and could use other advanced
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer features of the BIND 9 libraries such as caching. The
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer getaddrinfo() function resolves both A and AAAA RRs
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer concurrently (when the address family is unspecified).</p></li>
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer<li><p>An experimental framework to support other event
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer libraries than BIND 9's internal event task system.</p></li>
f462b9aed23b77bda867301f80ead6990df6f4f8Andreas Gustafsson<div class="titlepage"><div><div><h3 class="title">
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews<a name="id2613054"></a>Prerequisite</h3></div></div></div>
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson<p>GNU make is required to build the export libraries (other
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson part of BIND 9 can still be built with other types of make). In
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson the reminder of this document, "make" means GNU make. Note that
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson in some platforms you may need to invoke a different command name
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson than "make" (e.g. "gmake") to indicate it's GNU make.</p>
539cad8f49b38540b7c20c64d1ef456cb2fa7914Andreas Gustafsson<div class="titlepage"><div><div><h3 class="title">
330b421487d7c3a5e699472fe889aa633772057fMark Andrews<a name="id2613064"></a>Compilation</h3></div></div></div>
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson$ <strong class="userinput"><code>/configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong>
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews$ <strong class="userinput"><code>make</code></strong>
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews This will create (in addition to usual BIND 9 programs) and a
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews separate set of libraries under the lib/export directory. For
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson example, <code class="filename">lib/export/dns/libdns.a</code> is the archive file of the
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews export version of the BIND 9 DNS library. Sample application
ea72586fc5c360539117119ee35e4c3a04b912bcAndreas Gustafsson programs using the libraries will also be built under the
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson lib/export/samples directory (see below).</p>
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews<div class="titlepage"><div><div><h3 class="title">
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews<a name="id2613089"></a>Installation</h3></div></div></div>
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews$ <strong class="userinput"><code>cd lib/export</code></strong>
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer$ <strong class="userinput"><code>make install</code></strong>
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer This will install library object files under the directory
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson specified by the --with-export-libdir configure option (default:
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson EPREFIX/lib/bind9), and header files under the directory
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson specified by the --with-export-includedir configure option
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson Root privilege is normally required.
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews "<span><strong class="command">make install</strong></span>" at the top directory will do the
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews To see how to build your own
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson application after the installation, see
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson <code class="filename">lib/export/samples/Makefile-postinstall.in</code>.</p>
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson<div class="titlepage"><div><div><h3 class="title">
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson<a name="id2613188"></a>Known Defects/Restrictions</h3></div></div></div>
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson<div class="itemizedlist"><ul type="disc">
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson<li><p>Currently, win32 is not supported for the export
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson library. (Normal BIND 9 application can be built as
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews<p>The "fixed" RRset order is not (currently) supported in
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews the export library. If you want to use "fixed" RRset order
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson for, e.g. <span><strong class="command">named</strong></span> while still building the
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson export library even without the fixed order support, build
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson them separately:
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson$ <strong class="userinput"><code>/configure --enable-fixed-rrset <em class="replaceable"><code>[other flags, but not --enable-exportlib]</code></em></code></strong>
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson$ <strong class="userinput"><code>make</code></strong>
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson$ <strong class="userinput"><code>/configure --enable-exportlib <em class="replaceable"><code>[other flags, but not --enable-fixed-rrset]</code></em></code></strong>
44c141f9471a6bb1fac0cba7880ba768ede2f0c8Brian Wellington$ <strong class="userinput"><code>cd lib/export</code></strong>
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson$ <strong class="userinput"><code>make</code></strong>
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson<li><p>The client module and the IRS library currently do not
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson support DNSSEC validation using DLV (the underlying modules
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson can handle it, but there is no tunable interface to enable
4d77dbcfa052c065a87d2d35b116f17b74bae573Andreas Gustafsson<li><p>RFC 5011 is not supported in the validating stub
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews resolver of the export library. In fact, it is not clear
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews whether it should: trust anchors would be a system-wide
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews configuration which would be managed by an administrator,
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington while the stub resolver will be used by ordinary applications
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson<li><p>Not all common <code class="filename">/etc/resolv.conf</code>
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson options are supported
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson in the IRS library. The only available options in this
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington<div class="titlepage"><div><div><h3 class="title">
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington<a name="id2613401"></a>The dns.conf File</h3></div></div></div>
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson<p>The IRS library supports an "advanced" configuration file
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson related to the DNS library for configuration parameters that
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington would be beyond the capability of the
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews <code class="filename">resolv.conf</code> file.
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews Specifically, it is intended to provide DNSSEC related
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews configuration parameters. By default the path to this
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington configuration file is <code class="filename">/etc/dns.conf</code>.
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson This module is very
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington experimental and the configuration syntax or library interfaces
2033e305852d4b76772885ea73ebfb6776c1f820Mark Andrews may change in future versions. Currently, only the
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson <span><strong class="command">trusted-keys</strong></span>
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson statement is supported, whose syntax is the same as the same name
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson of statement for <code class="filename">named.conf</code>. (See
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington <a href="Bv9ARM.ch06.html#trusted-keys" title="trusted-keys Statement Grammar">the section called “<span><strong class="command">trusted-keys</strong></span> Statement Grammar”</a> for details.)</p>
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington<div class="titlepage"><div><div><h3 class="title">
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews<a name="id2613428"></a>Sample Applications</h3></div></div></div>
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews<p>Some sample application programs using this API are
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews provided for reference. The following is a brief description of
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews these applications.
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson<div class="titlepage"><div><div><h4 class="title">
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews<a name="id2613436"></a>sample: a simple stub resolver utility</h4></div></div></div>
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson It sends a query of a given name (of a given optional RR type) to a
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson specified recursive server, and prints the result as a list of
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson RRs. It can also act as a validating stub resolver if a trust
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson anchor is given via a set of command line options.</p>
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson Usage: sample [options] server_address hostname
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson Options and Arguments:
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington specify the RR type of the query. The default is the A RR.
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson [-a algorithm] [-e] -k keyname -K keystring
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington specify a command-line DNS key to validate the answer. For
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson example, to specify the following DNSKEY of example.com:
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington����������������example.com.�3600�IN�DNSKEY�257�3�5�xxx<br>
e9596e1fb3dfa560216776acdbfac3cf5ef97157Mark Andrews specify the options as follows:
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley -e -k example.com -K "xxx"
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington -e means that this key is a zone's "key signing key" (as known
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson as "secure Entry point").
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson When -a is omitted rsasha1 will be used by default.
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson -s domain:alt_server_address
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson specify a separate recursive server address for the specific
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington "domain". Example: -s example.com:2001:db8::1234
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington<dt><span class="term">server_address</span></dt>
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson an IP(v4/v6) address of the recursive server to which queries
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson the domain name for the query
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson<div class="titlepage"><div><div><h4 class="title">
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington<a name="id2613595"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington Similar to "sample", but accepts a list
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson of (query) domain names as a separate file and resolves the names
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson asynchronously.</p>
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson Usage: sample-async [-s server_address] [-t RR_type] input_file</p>
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson Options and Arguments:
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson -s server_address
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson an IPv4 address of the recursive server to which queries are sent.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson (IPv6 addresses are not supported in this implementation)
f2a16ec2e8970615d39f8fe339b215ad0a893b85Mark Andrews specify the RR type of the queries. The default is the A
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence a list of domain names to be resolved. each line
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence consists of a single domain name. Example:
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson<div class="titlepage"><div><div><h4 class="title">
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington<a name="id2613649"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson It sends a query to a specified server, and
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington prints the response with minimal processing. It doesn't act as a
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson "stub resolver": it stops the processing once it gets any
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson response from the server, whether it's a referral or an alias
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson (CNAME or DNAME) that would require further queries to get the
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence ultimate answer. In other words, this utility acts as a very
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews simplified <span><strong class="command">dig</strong></span>.
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence Usage: sample-request [-t RRtype] server_address hostname
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson Options and Arguments:
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson specify the RR type of
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson the queries. The default is the A RR.
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence server_address
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence address of the recursive server to which the query is sent.
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence the domain name for the query
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence<div class="titlepage"><div><div><h4 class="title">
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence<a name="id2613713"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence This is a test program
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson to check getaddrinfo() and getnameinfo() behavior. It takes a
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson host name as an argument, calls getaddrinfo() with the given host
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington name, and calls getnameinfo() with the resulting IP addresses
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson returned by getaddrinfo(). If the dns.conf file exists and
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington defines a trust anchor, the underlying resolver will act as a
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington validating resolver, and getaddrinfo()/getnameinfo() will fail
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson with an EAI_INSECUREDATA error when DNSSEC validation fails.
7fe2ead2b3e23f68c1d3c79da51ef5af4f678f7dAndreas Gustafsson Usage: sample-gai hostname
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson<div class="titlepage"><div><div><h4 class="title">
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson<a name="id2613728"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington It accepts a single update command as a
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson command-line argument, sends an update request message to the
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington authoritative server, and shows the response from the server. In
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews other words, this is a simplified <span><strong class="command">nsupdate</strong></span>.
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews Usage: sample-update [options] (add|delete) "update data"
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson Options and Arguments:
711c2be7d9d99ee4415bc4e41ebe4f7f31947b3bAndreas Gustafsson -a auth_server
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson An IP address of the authoritative server that has authority
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson for the zone containing the update name. This should normally
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson be the primary authoritative server that accepts dynamic
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson updates. It can also be a secondary server that is configured
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson to forward update requests to the primary server.
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews A TSIG key file to secure the update transaction. The keyfile
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews format is the same as that for the nsupdate utility.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson -p prerequisite
99a8d30559834dc12bd80f4f164fa6375f73cb62Mark Andrews A prerequisite for the update (only one prerequisite can be
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence specified). The prerequisite format is the same as that is
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence accepted by the nsupdate utility.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence -r recursive_server
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence An IP address of a recursive server that this utility will
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence use. A recursive server may be necessary to identify the
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence authoritative server address to which the update request is
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews The domain name of the zone that contains
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews Specify the type of update operation. Either "add" or "delete"
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews must be specified.
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews "update data"
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson Specify the data to be updated. A typical example of the data
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence would look like "name TTL RRtype RDATA".
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence<h3 class="title">Note</h3>In practice, either -a or -r must be specified. Others can
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence be optional; the underlying library routine tries to identify the
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence appropriate server and the zone name for the update.</div>
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Examples: assuming the primary authoritative server of the
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence dynamic.example.com zone has an IPv6 address 2001:db8::1234,
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key add "foo.dynamic.example.com 30 IN A 192.168.2.1"</code></strong></pre>
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence adds an A RR for foo.dynamic.example.com using the given key.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com 30 IN A"</code></strong></pre>
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence removes all A RRs for foo.dynamic.example.com using the given key.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com"</code></strong></pre>
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence removes all RRs for foo.dynamic.example.com using the given key.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson<div class="titlepage"><div><div><h4 class="title">
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence<a name="id2614541"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence It checks a set
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence of domains to see the name servers of the domains behave
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence correctly in terms of RFC 4074. This is included in the set of
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence sample programs to show how the export library can be used in a
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence DNS-related application.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Usage: nsprobe [-d] [-v [-v...]] [-c cache_address] [input_file]
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews run in the "debug" mode. with this option nsprobe will dump
89d03d4715120fd0c968775bf0724b5a2a647539Mark Andrews every RRs it receives.
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson increase verbosity of other normal log messages. This can be
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson specified multiple times
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson -c cache_address
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson specify an IP address of a recursive (caching) name server.
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson nsprobe uses this server to get the NS RRset of each domain and
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson the A and/or AAAA RRsets for the name servers. The default
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson value is 127.0.0.1.
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson a file name containing a list of domain (zone) names to be
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson probed. when omitted the standard input will be used. Each
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson line of the input file specifies a single domain name such as
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson "example.com". In general this domain name must be the apex
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson name of some DNS zone (unlike normal "host names" such as
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson "www.example.com"). nsprobe first identifies the NS RRsets for
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson the given domain name, and sends A and AAAA queries to these
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson servers for some "widely used" names under the zone;
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson specifically, adding "www" and "ftp" to the zone name.
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley<div class="titlepage"><div><div><h3 class="title">
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley<a name="id2614605"></a>Library References</h3></div></div></div>
751aa24c98fea02215cad95a08411af547d70e41Bob Halley<p>As of this writing, there is no formal "manual" of the
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson libraries, except this document, header files (some of them
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson provide pretty detailed explanations), and sample application
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews<table width="100%" summary="Navigation footer">
f08f3c6caeb8460cb679a8687f61da61fff69fb0Mark Andrews<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington<td width="40%" align="left" valign="top">Chapter�8.�Troubleshooting�</td>
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington<td width="40%" align="right" valign="top">�Manual pages</td>
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington<p style="text-align: center;">BIND 9.11.0pre-alpha</p>