Bv9ARM.ch09.html revision ddbd14ec13b6dc0130a94b46b6a3156549cb9911
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - Copyright (C) 2000-2003 Internet Software Consortium.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - Permission to use, copy, modify, and/or distribute this software for any
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - purpose with or without fee is hereby granted, provided that the above
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson - copyright notice and this permission notice appear in all copies.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - PERFORMANCE OF THIS SOFTWARE.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<!-- $Id$ -->
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<link rel="next" href="Bv9ARM.ch10.html" title="Manual pages">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<tr><th colspan="3" align="center">Appendix�A.�Appendices</th></tr>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h2 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="Bv9ARM.ch09"></a>Appendix�A.�Appendices</h2></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2564041">Release Notes for BIND Version 9.11.0pre-alpha</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2607628">Acknowledgments</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2607800">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611080">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2612432">Prerequisite</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2612441">Compilation</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2612466">Installation</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613248">Known Defects/Restrictions</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613393">The dns.conf File</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2613419">Sample Applications</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2614733">Library References</a></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h2 class="title" style="clear: both">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2564041"></a>Release Notes for BIND Version 9.11.0pre-alpha</h2></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This document summarizes changes since the last production release
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of BIND on the corresponding major release branch.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_download"></a>Download</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The latest versions of BIND 9 software can always be found at
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <a href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce There you will find additional information about each release,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce source code, and pre-compiled versions for Microsoft Windows
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce operating systems.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson<div class="itemizedlist"><ul type="disc">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce A flaw in delegation handling could be exploited to put
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">named</strong></span> into an infinite loop, in which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce each lookup of a name server triggered additional lookups
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of more name servers. This has been addressed by placing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce limits on the number of levels of recursion
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">named</strong></span> will allow (default 7), and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce on the number of queries that it will send before
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson terminating a recursive query (default 50).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The recursion depth limit is configured via the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="option">max-recursion-depth</code> option, and the query limit
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce via the <code class="option">max-recursion-queries</code> option.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The flaw was discovered by Florian Maury of ANSSI, and is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disclosed in CVE-2014-8500. [RT #37580]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Two separate problems were identified in BIND's GeoIP code that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce could lead to an assertion failure. One was triggered by use of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce both IPv4 and IPv6 address families, the other by referencing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a GeoIP database in <code class="filename">named.conf</code> which was
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce not installed. Both are covered by CVE-2014-8680. [RT #37672]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce A less serious security flaw was also found in GeoIP: changes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to the <span><strong class="command">geoip-directory</strong></span> option in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="filename">named.conf</code> were ignored when running
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">rndc reconfig</strong></span>. In theory, this could allow
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">named</strong></span> to allow access to unintended clients.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_features"></a>New Features</h3></div></div></div>
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson The serial number of a dynamically updatable zone can
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson now be set using
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson <span><strong class="command">rndc signing -serial <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>zonename</code></em></strong></span>.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson This is particularly useful with <code class="option">inline-signing</code>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zones that have been reset. Setting the serial number to a value
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson larger than that on the slaves will trigger an AXFR-style
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson When answering recursive queries, SERVFAIL responses can now be
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson cached by the server for a limited time; subsequent queries for
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson the same query name and type will return another SERVFAIL until
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson the cache times out. This reduces the frequency of retries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce when a query is persistently failing, which can be a burden
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson on recursive serviers. The SERVFAIL cache timeout is controlled
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson by <code class="option">servfail-ttl</code>, which defaults to 10 seconds
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson and has an upper limit of 30.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The new <span><strong class="command">rndc nta</strong></span> command can now be used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce set a "negative trust anchor" (NTA), disabling DNSSEC validation for
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson a specific domain; this can be used when responses from a domain
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson are known to be failing validation due to administrative error
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson rather than because of a spoofing attack. NTAs are strictly
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson temporary; by default they expire after one hour, but can be
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson configured to last up to one week. The default NTA lifetime
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson can be changed by setting the <code class="option">nta-lifetime</code> in
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson <code class="filename">named.conf</code>.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson The EDNS Client Subnet (ECS) option is now supported for
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson authoritative servers; if a query contains an ECS option then
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson ACLs containing <code class="option">geoip</code> or <code class="option">ecs</code>
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson elements can match against the the address encoded in the option.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson This can be used to select a view for a query, so that different
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson answers can be provided depending on the client network.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson The EDNS EXPIRE option has been implemented on the client
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson side, allowing a slave server to set the expiration timer
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson correctly when transferring zone data from another slave
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson A new <code class="option">masterfile-style</code> zone option controls
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson the formatting of text zone files: When set to
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson <code class="literal">full</code>, the zone file will dumped in
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson single-line-per-record format.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson <span><strong class="command">dig +ednsopt</strong></span> can now be used to set
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson arbitrary EDNS options in DNS requests.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson <span><strong class="command">dig +ednsflags</strong></span> can now be used to set
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson yet-to-be-defined EDNS flags in DNS requests.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson <span><strong class="command">dig +[no]ednsnegotiation</strong></span> can now be used enable /
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson disable EDNS version negotiation.
21163ca842b7969eade26710b4eae72ab0a99c0cAndreas Gustafsson <span><strong class="command">dig +header-only</strong></span> can now be used to send
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson queries without a question section.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson <span><strong class="command">dig +ttlunits</strong></span> causes <span><strong class="command">dig</strong></span>
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson to print TTL values with time-unit suffixes: w, d, h, m, s for
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson weeks, days, hours, minutes, and seconds.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson <span><strong class="command">dig +zflag</strong></span> can be used to set the last
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson unassigned DNS header flag bit. This bit in normally zero.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson <span><strong class="command">dig +dscp=<em class="replaceable"><code>value</code></em></strong></span>
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson can now be used to set the DSCP code point in outgoing query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="option">serial-update-method</code> can now be set to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="literal">date</code>. On update, the serial number will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce be set to the current date in YYYYMMDDNN format.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">dnssec-signzone -N date</strong></span> also sets the serial
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce number to YYYYMMDDNN.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">named -L <em class="replaceable"><code>filename</code></em></strong></span>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce causes named to send log messages to the specified file by
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce default instead of to the system log.
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce The rate limiter configured by the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="option">serial-query-rate</code> option no longer covers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce NOTIFY messages; those are now separately controlled by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="option">startup-notify-rate</code> (the latter of which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce controls the rate of NOTIFY messages sent when the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is first started up or reconfigured).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The default number of tasks and client objects available
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for serving lightweight resolver queries have been increased,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and are now configurable via the new <code class="option">lwres-tasks</code>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and <code class="option">lwres-clients</code> options in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="filename">named.conf</code>. [RT #35857]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Log output to files can now be buffered by specifying
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">buffered yes;</strong></span> when creating a channel.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">delv +tcp</strong></span> will exclusively use TCP when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sending queries.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ACLs containing <span><strong class="command">geoip asnum</strong></span> elements were
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson not correctly matched unless the full organization name was
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified in the ACL (as in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">geoip asnum "AS1234 Example, Inc.";</strong></span>).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce They can now match against the AS number alone (as in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">geoip asnum "AS1234";</strong></span>).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce When using native PKCS#11 cryptography (i.e.,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">configure --enable-native-pkcs11</strong></span>) HSM PINs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of up to 256 characters can now be used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce NXDOMAIN responses to queries of type DS are now cached separately
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce from those for other types. This helps when using "grafted" zones
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of type forward, for which the parent zone does not contain a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce delegation, such as local top-level domains. Previously a query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of type DS for such a zone could cause the zone apex to be cached
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce as NXDOMAIN, blocking all subsequent queries. (Note: This
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce change is only helpful when DNSSEC validation is not enabled.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "Grafted" zones without a delegation in the parent are not a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recommended configuration.)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Update forwarding performance has been improved by allowing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a single TCP connection to be shared between multiple updates.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce By default, <span><strong class="command">nsupdate</strong></span> will now check
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the correctness of hostnames when adding records of type
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce A, AAAA, MX, SOA, NS, SRV or PTR. This behavior can be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disabled with <span><strong class="command">check-names no</strong></span>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Added support for OPENPGPKEY type.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The names of the files used to store managed keys and added
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zones for each view are no longer based on the SHA256 hash
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of the view name, except when this is necessary because the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce view name contains characters that would be incompatible with use
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce as a file name. For views whose names do not contain forward
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce slashes ('/'), backslashes ('\'), or capital letters - which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce could potentially cause namespace collision problems on
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce case-insensitive filesystems - files will now be named
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce after the view (for example, <code class="filename">internal.mkeys</code>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce or <code class="filename">external.nzf</code>). However, to ensure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce consistent behavior when upgrading, if a file using the old
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce name format is found to exist, it will continue to be used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "rndc" can now return text output of arbitrary size to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the caller. (Prior to this, certain commands such as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "rndc tsig-list" and "rndc zonestatus" could return
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce truncated output.)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Errors reported when running <span><strong class="command">rndc addzone</strong></span>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (e.g., when a zone file cannot be loaded) have been clarified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to make it easier to diagnose problems.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span> and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">nslookup</strong></span> aborted when encountering
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a name which, after appending search list elements,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce exceeded 255 bytes. Such names are now skipped, but
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce processing of other names will continue. [RT #36892]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The error message generated when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">named-checkzone</strong></span> or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">named-checkconf -z</strong></span> encounters a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="option">$TTL</code> directive without a value has
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce been clarified. [RT #37138]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Semicolon characters (;) included in TXT records were
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce incorrectly escaped with a backslash when the record was
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer displayed as text. This is actually only necessary when there
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce are no quotation marks. [RT #37159]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce When files opened for writing by <span><strong class="command">named</strong></span>,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce such as zone journal files, were referenced more than once
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in <code class="filename">named.conf</code>, it could lead to file
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce corruption as multiple threads wrote to the same file. This
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is now detected when loading <code class="filename">named.conf</code>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and reported as an error. [RT #37172]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce When checking for updates to trust anchors listed in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <code class="option">managed-keys</code>, <span><strong class="command">named</strong></span>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce now revalidates keys based on the current set of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce active trust anchors, without relying on any cached
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce record of previous validation. [RT #37506]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Large-system tuning
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (<span><strong class="command">configure --with-tuning=large</strong></span>) caused
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce problems on some platforms by setting a socket receive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce buffer size that was too large. This is now detected and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce corrected at run time. [RT #37187]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce When NXDOMAIN redirection is in use, queries for a name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that is present in the redirection zone but a type that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is not present will now return NOERROR instead of NXDOMAIN.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="end_of_life"></a>End of Life</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The end of life for BIND 9.11 is yet to be determined but
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce will not be before BIND 9.13.0 has been released for 6 months.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <a href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Thank you to everyone who assisted us in making this release possible.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce If you would like to contribute to ISC to assist us in continuing to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce make quality open source software, please visit our donations page at
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <a href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h2 class="title" style="clear: both">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2607628"></a>Acknowledgments</h2></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Although the "official" beginning of the Domain Name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce System occurred in 1984 with the publication of RFC 920, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce core of the new system was described in 1983 in RFCs 882 and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 883. From 1984 to 1987, the ARPAnet (the precursor to today's
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Internet) became a testbed of experimentation for developing the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce new naming/addressing scheme in a rapidly expanding,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce operational network environment. New RFCs were written and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce published in 1987 that modified the original documents to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce incorporate improvements based on the working model. RFC 1034,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "Domain Names-Concepts and Facilities", and RFC 1035, "Domain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Names-Implementation and Specification" were published and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce became the standards upon which all <acronym class="acronym">DNS</acronym> implementations are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The first working domain name server, called "Jeeves", was
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce written in 1983-84 by Paul Mockapetris for operation on DEC
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce machines located at the University of Southern California's
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Sciences Institute (USC-ISI) and SRI International's Network
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Center (SRI-NIC). A <acronym class="acronym">DNS</acronym> server for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Unix machines, the Berkeley Internet
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Name Domain (<acronym class="acronym">BIND</acronym>) package, was
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson written soon after by a group of
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson graduate students at the University of California at Berkeley
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a grant from the US Defense Advanced Research Projects
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Administration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Versions of <acronym class="acronym">BIND</acronym> through
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 4.8.3 were maintained by the Computer
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Painter, David Riggle and Songnian Zhou made up the initial <acronym class="acronym">BIND</acronym>
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson project team. After that, additional work on the software package
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson employee on loan to the CSRG, worked on <acronym class="acronym">BIND</acronym> for 2 years, from 1985
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson to 1987. Many other people also contributed to <acronym class="acronym">BIND</acronym> development
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson during that time: Doug Kingston, Craig Partridge, Smoot
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Carl-Mitchell,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Mike Muuss, Jim Bloom and Mike Schwartz. <acronym class="acronym">BIND</acronym> maintenance was subsequently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce handled by Mike Karels and �ivind Kure.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <acronym class="acronym">BIND</acronym> versions 4.9 and 4.9.1 were
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce released by Digital Equipment
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Corporation (now Compaq Computer Corporation). Paul Vixie, then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a DEC employee, became <acronym class="acronym">BIND</acronym>'s
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce primary caretaker. He was assisted
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Beecher, Andrew
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Wolfhugel, and others.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce In 1994, <acronym class="acronym">BIND</acronym> version 4.9.2 was sponsored by
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Vixie Enterprises. Paul
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Vixie became <acronym class="acronym">BIND</acronym>'s principal
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson <acronym class="acronym">BIND</acronym> versions from 4.9.3 onward
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson have been developed and maintained
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer by the Internet Systems Consortium and its predecessor,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the Internet Software Consortium, with support being provided
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by ISC's sponsors.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson As co-architects/programmers, Bob Halley and
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Paul Vixie released the first production-ready version of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <acronym class="acronym">BIND</acronym> version 8 in May 1997.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson BIND version 9 was released in September 2000 and is a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce major rewrite of nearly all aspects of the underlying
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce BIND architecture.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce BIND versions 4 and 8 are officially deprecated.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce No additional development is done
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce on BIND version 4 or BIND version 8.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <acronym class="acronym">BIND</acronym> development work is made
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce possible today by the sponsorship
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of several corporations, and by the tireless work efforts of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce numerous individuals.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h2 class="title" style="clear: both">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2607800"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce<a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce IPv6 addresses are 128-bit identifiers for interfaces and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sets of interfaces which were introduced in the <acronym class="acronym">DNS</acronym> to facilitate
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce scalable Internet routing. There are three types of addresses: <span class="emphasis"><em>Unicast</em></span>,
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce an identifier for a single interface;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce an identifier for a set of interfaces; and <span class="emphasis"><em>Multicast</em></span>,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce an identifier for a set of interfaces. Here we describe the global
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce Unicast address scheme. For more information, see RFC 3587,
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce "Global Unicast Address Format."
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce IPv6 unicast addresses consist of a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span class="emphasis"><em>global routing prefix</em></span>, a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span class="emphasis"><em>subnet identifier</em></span>, and an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span class="emphasis"><em>interface identifier</em></span>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The global routing prefix is provided by the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce upstream provider or ISP, and (roughly) corresponds to the
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce IPv4 <span class="emphasis"><em>network</em></span> section
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce of the address range.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The subnet identifier is for local subnetting, much the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce same as subnetting an
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce IPv4 /16 network into /24 subnets.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The interface identifier is the address of an individual
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce interface on a given network; in IPv6, addresses belong to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce interfaces rather than to machines.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The subnetting capability of IPv6 is much more flexible than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that of IPv4: subnetting can be carried out on bit boundaries,
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce in much the same way as Classless InterDomain Routing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (CIDR), and the DNS PTR representation ("nibble" format)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce makes setting up reverse zones easier.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The Interface Identifier must be unique on the local link,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and is usually generated automatically by the IPv6
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce implementation, although it is usually possible to
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce override the default setting if necessary. A typical IPv6
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address might look like:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">2001:db8:201:9:a00:20ff:fe81:2b32</strong></span>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce IPv6 address specifications often contain long strings
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of zeros, so the architects have included a shorthand for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce them. The double colon (`::') indicates the longest possible
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of zeros that can fit, and can be used only once in an address.
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce<div class="titlepage"><div><div><h2 class="title" style="clear: both">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="bibliography"></a>Bibliography (and Suggested Reading)</h2></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="rfcs"></a>Request for Comments (RFCs)</h3></div></div></div>
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce Specification documents for the Internet protocol suite, including
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce the <acronym class="acronym">DNS</acronym>, are published as part of
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce the Request for Comments (RFCs)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce series of technical notes. The standards themselves are defined
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by the Internet Engineering Task Force (IETF) and the Internet
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <a href="ftp://www.isi.edu/in-notes/" target="_top">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ftp://www.isi.edu/in-notes/RFC<em class="replaceable"><code>xxxx</code></em>.txt
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce (where <em class="replaceable"><code>xxxx</code></em> is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the number of the RFC). RFCs are also available via the Web at:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <a href="http://www.ietf.org/rfc/" target="_top">http://www.ietf.org/rfc/</a>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2607988"></a>Bibliography</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608067"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608090"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608114"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Implementation and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Specification</i>. </span><span class="pubdate">November 1987. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="proposed_standards"></a>Proposed Standards</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608150"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Specification</i>. </span><span class="pubdate">July 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608177"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Queries</i>. </span><span class="pubdate">March 1998. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608202"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608227"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608250"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608306"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608332"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608359"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608421"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608451"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce<a name="id2608481"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce<a name="id2608507"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Key Transaction Authentication for DNS
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608589"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608616"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608652"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608717"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608782"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Implementation</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608856"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Deployed <acronym class="acronym">DNS</acronym> Software</i>. </span><span class="pubdate">October 1993. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608882"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608950"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2608985"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609031"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609089"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609126"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609161"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Name System</i>. </span><span class="pubdate">January 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609216"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Services</i>. </span><span class="pubdate">October 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609254"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Distribute MIXER
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609280"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609373"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609400"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609427"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609466"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609496"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609526"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609569"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609602"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609628"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609652"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce version 6</i>. </span><span class="pubdate">October 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609709"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<acronym class="acronym">DNS</acronym> and the Internet</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609741"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and Other Types</i>. </span><span class="pubdate">April 1989. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609767"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Support</i>. </span><span class="pubdate">October 1989. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609789"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609813"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609859"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609882"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<acronym class="acronym">DNS</acronym> Operations</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609940"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide</i>. </span><span class="pubdate">November 1987. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609963"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2609990"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610017"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers</i>. </span><span class="pubdate">October 1996. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610053"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Network Services</i>. </span><span class="pubdate">October 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<h3 class="title">Internationalized Domain Names</h3>
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson<a name="id2610099"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610131"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610177"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610212"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for Internationalized Domain Names in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<h3 class="title">Other <acronym class="acronym">DNS</acronym>-related RFCs</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Note: the following list of RFCs, although
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <acronym class="acronym">DNS</acronym>-related, are not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce concerned with implementing software.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610325"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Attributes</i>. </span><span class="pubdate">May 1993. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610347"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610373"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Balancing</i>. </span><span class="pubdate">April 1995. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610398"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610422"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610468"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610491"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610518"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610544"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<h3 class="title">Obsolete and Unimplemented Experimental RFC</h3>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610587"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson Location</i>. </span><span class="pubdate">November 1994. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610645"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610672"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p>
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson<h3 class="title">Obsoleted DNS Security RFCs</h3>
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Most of these have been consolidated into RFC4033,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce RFC4034 and RFC4035 which collectively describe DNSSECbis.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610720"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610759"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610786"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610816"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610841"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce<a name="id2610868"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610904"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610940"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610967"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2610994"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2611038"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="internet_drafts"></a>Internet Drafts</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Internet Drafts (IDs) are rough-draft working documents of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the Internet Engineering Task Force. They are, in essence, RFCs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in the preliminary stages of development. Implementors are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cautioned not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to regard IDs as archival, and they should not be quoted or cited
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in any formal documents unless accompanied by the disclaimer that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce they are "works in progress." IDs have a lifespan of six months
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce after which they are deleted unless updated by their authors.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2611080"></a>Other Documents About <acronym class="acronym">BIND</acronym>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2611090"></a>Bibliography</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2611092"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright � 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h2 class="title" style="clear: both">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="bind9.library"></a>BIND 9 DNS Library Support</h2></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p>This version of BIND 9 "exports" its internal libraries so
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that they can be used by third-party applications more easily (we
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce call them "export" libraries in this document). In addition to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce all major DNS-related APIs BIND 9 is currently using, the export
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce libraries provide the following features:</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<li><p>The newly created "DNS client" module. This is a higher
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce level API that provides an interface to name resolution,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce single DNS transaction with a particular server, and dynamic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce update. Regarding name resolution, it supports advanced
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce features such as DNSSEC validation and caching. This module
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce supports both synchronous and asynchronous mode.</p></li>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<li><p>The new "IRS" (Information Retrieval System) library.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce It provides an interface to parse the traditional resolv.conf
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file and more advanced, DNS-specific configuration file for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the rest of this package (see the description for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<li><p>As part of the IRS library, newly implemented standard
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address-name mapping functions, getaddrinfo() and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce getnameinfo(), are provided. They use the DNSSEC-aware
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce validating resolver backend, and could use other advanced
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce features of the BIND 9 libraries such as caching. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce getaddrinfo() function resolves both A and AAAA RRs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce concurrently (when the address family is unspecified).</p></li>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<li><p>An experimental framework to support other event
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce libraries than BIND 9's internal event task system.</p></li>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2612432"></a>Prerequisite</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p>GNU make is required to build the export libraries (other
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce part of BIND 9 can still be built with other types of make). In
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the reminder of this document, "make" means GNU make. Note that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in some platforms you may need to invoke a different command name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce than "make" (e.g. "gmake") to indicate it's GNU make.</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2612441"></a>Compilation</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>/configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>make</code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This will create (in addition to usual BIND 9 programs) and a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce separate set of libraries under the lib/export directory. For
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce example, <code class="filename">lib/export/dns/libdns.a</code> is the archive file of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce export version of the BIND 9 DNS library. Sample application
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce programs using the libraries will also be built under the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson<a name="id2612466"></a>Installation</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>cd lib/export</code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>make install</code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This will install library object files under the directory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified by the --with-export-libdir configure option (default:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce EPREFIX/lib/bind9), and header files under the directory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified by the --with-export-includedir configure option
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Root privilege is normally required.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "<span><strong class="command">make install</strong></span>" at the top directory will do the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce To see how to build your own
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson application after the installation, see
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson <code class="filename">lib/export/samples/Makefile-postinstall.in</code>.</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2613248"></a>Known Defects/Restrictions</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<li><p>Currently, win32 is not supported for the export
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce library. (Normal BIND 9 application can be built as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p>The "fixed" RRset order is not (currently) supported in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the export library. If you want to use "fixed" RRset order
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for, e.g. <span><strong class="command">named</strong></span> while still building the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce export library even without the fixed order support, build
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce them separately:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>/configure --enable-fixed-rrset <em class="replaceable"><code>[other flags, but not --enable-exportlib]</code></em></code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>make</code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>/configure --enable-exportlib <em class="replaceable"><code>[other flags, but not --enable-fixed-rrset]</code></em></code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>cd lib/export</code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>make</code></strong>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<li><p>The client module and the IRS library currently do not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce support DNSSEC validation using DLV (the underlying modules
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce can handle it, but there is no tunable interface to enable
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson<li><p>RFC 5011 is not supported in the validating stub
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce resolver of the export library. In fact, it is not clear
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce whether it should: trust anchors would be a system-wide
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configuration which would be managed by an administrator,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce while the stub resolver will be used by ordinary applications
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson<li><p>Not all common <code class="filename">/etc/resolv.conf</code>
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson options are supported
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson in the IRS library. The only available options in this
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson version are "debug" and "ndots".</p></li>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2613393"></a>The dns.conf File</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p>The IRS library supports an "advanced" configuration file
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce related to the DNS library for configuration parameters that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce would be beyond the capability of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Specifically, it is intended to provide DNSSEC related
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configuration parameters. By default the path to this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configuration file is <code class="filename">/etc/dns.conf</code>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This module is very
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce experimental and the configuration syntax or library interfaces
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson may change in future versions. Currently, only the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <span><strong class="command">trusted-keys</strong></span>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statement is supported, whose syntax is the same as the same name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of statement for <code class="filename">named.conf</code>. (See
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <a href="Bv9ARM.ch06.html#trusted-keys" title="trusted-keys Statement Grammar">the section called “<span><strong class="command">trusted-keys</strong></span> Statement Grammar”</a> for details.)</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2613419"></a>Sample Applications</h3></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p>Some sample application programs using this API are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce provided for reference. The following is a brief description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce these applications.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2613428"></a>sample: a simple stub resolver utility</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce It sends a query of a given name (of a given optional RR type) to a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified recursive server, and prints the result as a list of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce RRs. It can also act as a validating stub resolver if a trust
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce anchor is given via a set of command line options.</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Usage: sample [options] server_address hostname
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Options and Arguments:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify the RR type of the query. The default is the A RR.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [-a algorithm] [-e] -k keyname -K keystring
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify a command-line DNS key to validate the answer. For
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce example, to specify the following DNSKEY of example.com:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce����������������example.com.�3600�IN�DNSKEY�257�3�5�xxx<br>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify the options as follows:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -e -k example.com -K "xxx"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -e means that this key is a zone's "key signing key" (as known
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce as "secure Entry point").
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce When -a is omitted rsasha1 will be used by default.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -s domain:alt_server_address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify a separate recursive server address for the specific
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "domain". Example: -s example.com:2001:db8::1234
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce an IP(v4/v6) address of the recursive server to which queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the domain name for the query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson<a name="id2613655"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Similar to "sample", but accepts a list
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of (query) domain names as a separate file and resolves the names
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce asynchronously.</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Usage: sample-async [-s server_address] [-t RR_type] input_file</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Options and Arguments:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -s server_address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce an IPv4 address of the recursive server to which queries are sent.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (IPv6 addresses are not supported in this implementation)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify the RR type of the queries. The default is the A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a list of domain names to be resolved. each line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce consists of a single domain name. Example:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson<a name="id2613708"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce It sends a query to a specified server, and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce prints the response with minimal processing. It doesn't act as a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "stub resolver": it stops the processing once it gets any
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce response from the server, whether it's a referral or an alias
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (CNAME or DNAME) that would require further queries to get the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ultimate answer. In other words, this utility acts as a very
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce simplified <span><strong class="command">dig</strong></span>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Usage: sample-request [-t RRtype] server_address hostname
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Options and Arguments:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify the RR type of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the queries. The default is the A RR.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce server_address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address of the recursive server to which the query is sent.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the domain name for the query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2613772"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This is a test program
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson to check getaddrinfo() and getnameinfo() behavior. It takes a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce host name as an argument, calls getaddrinfo() with the given host
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce name, and calls getnameinfo() with the resulting IP addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce returned by getaddrinfo(). If the dns.conf file exists and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce defines a trust anchor, the underlying resolver will act as a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce validating resolver, and getaddrinfo()/getnameinfo() will fail
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce with an EAI_INSECUREDATA error when DNSSEC validation fails.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Usage: sample-gai hostname
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2613787"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce It accepts a single update command as a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce command-line argument, sends an update request message to the
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson authoritative server, and shows the response from the server. In
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce other words, this is a simplified <span><strong class="command">nsupdate</strong></span>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Usage: sample-update [options] (add|delete) "update data"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Options and Arguments:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -a auth_server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce An IP address of the authoritative server that has authority
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for the zone containing the update name. This should normally
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce be the primary authoritative server that accepts dynamic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce updates. It can also be a secondary server that is configured
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to forward update requests to the primary server.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce A TSIG key file to secure the update transaction. The keyfile
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce format is the same as that for the nsupdate utility.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -p prerequisite
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce A prerequisite for the update (only one prerequisite can be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified). The prerequisite format is the same as that is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce accepted by the nsupdate utility.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -r recursive_server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce An IP address of a recursive server that this utility will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use. A recursive server may be necessary to identify the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce authoritative server address to which the update request is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The domain name of the zone that contains
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (add|delete)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Specify the type of update operation. Either "add" or "delete"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce must be specified.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "update data"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Specify the data to be updated. A typical example of the data
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson would look like "name TTL RRtype RDATA".
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<h3 class="title">Note</h3>In practice, either -a or -r must be specified. Others can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce be optional; the underlying library routine tries to identify the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce appropriate server and the zone name for the update.</div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Examples: assuming the primary authoritative server of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dynamic.example.com zone has an IPv6 address 2001:db8::1234,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key add "foo.dynamic.example.com 30 IN A 192.168.2.1"</code></strong></pre>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce adds an A RR for foo.dynamic.example.com using the given key.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com 30 IN A"</code></strong></pre>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce removes all A RRs for foo.dynamic.example.com using the given key.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com"</code></strong></pre>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce removes all RRs for foo.dynamic.example.com using the given key.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h4 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2614669"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce It checks a set
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of domains to see the name servers of the domains behave
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce correctly in terms of RFC 4074. This is included in the set of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sample programs to show how the export library can be used in a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce DNS-related application.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Usage: nsprobe [-d] [-v [-v...]] [-c cache_address] [input_file]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce run in the "debug" mode. with this option nsprobe will dump
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce every RRs it receives.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce increase verbosity of other normal log messages. This can be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified multiple times
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce -c cache_address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specify an IP address of a recursive (caching) name server.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nsprobe uses this server to get the NS RRset of each domain and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the A and/or AAAA RRsets for the name servers. The default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce value is 127.0.0.1.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a file name containing a list of domain (zone) names to be
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce probed. when omitted the standard input will be used. Each
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce line of the input file specifies a single domain name such as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "example.com". In general this domain name must be the apex
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce name of some DNS zone (unlike normal "host names" such as
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson "www.example.com"). nsprobe first identifies the NS RRsets for
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson the given domain name, and sends A and AAAA queries to these
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson servers for some "widely used" names under the zone;
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson specifically, adding "www" and "ftp" to the zone name.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<div class="titlepage"><div><div><h3 class="title">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a name="id2614733"></a>Library References</h3></div></div></div>
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson<p>As of this writing, there is no formal "manual" of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce libraries, except this document, header files (some of them
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce provide pretty detailed explanations), and sample application
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce programs.</p>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<td width="40%" align="left" valign="top">Chapter�8.�Troubleshooting�</td>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<td width="40%" align="right" valign="top">�Manual pages</td>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p style="text-align: center;">BIND 9.11.0pre-alpha</p>