Bv9ARM.html revision b2f07642fd712c8fda81a116bcdde229ab291f33
1133N/A<div><p class="copyright">Copyright � 2004-2013 Internet Systems Consortium, Inc. ("ISC")</p></div>
664N/A<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564378">Scope of Document</a></span></dt>
1261N/A<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564402">Organization of This Document</a></span></dt>
1261N/A<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564541">Conventions Used in This Document</a></span></dt>
1261N/A<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564791">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt>
749N/A<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564846">Domains and Domain Names</a></span></dt>
664N/A<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567260">Authoritative Name Servers</a></span></dt>
1134N/A<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567433">Caching Name Servers</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567563">Name Servers in Multiple Roles</a></span></dt>
1257N/A<dt><span class="chapter"><a href="Bv9ARM.ch02.html">2. <acronym class="acronym">BIND</acronym> Resource Requirements</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567597">Hardware requirements</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567624">CPU Requirements</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567637">Memory Requirements</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567732">Name Server Intensive Environment Issues</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567742">Supported Operating Systems</a></span></dt>
1257N/A<dt><span class="chapter"><a href="Bv9ARM.ch03.html">3. Name Server Configuration</a></span></dt>
1261N/A<dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567774">A Caching-only Name Server</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567995">An Authoritative-only Name Server</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568372">Name Server Operations</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568377">Tools for Use With the Name Server Daemon</a></span></dt>
1257N/A<dt><span class="chapter"><a href="Bv9ARM.ch04.html">4. Advanced DNS Features</a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt>
1257N/A<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt>
1257N/A<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571303">Example split DNS setup</a></span></dt></dl></dd>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571873">Generate Shared Keys for Each Pair of Hosts</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563959">Copying the Shared Secret to Both Machines</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563970">Informing the Servers of the Key's Existence</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2564006">Instructing the Server to Use the Key</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2564064">TSIG Key Based Access Control</a></span></dt>
1190N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572801">Configuring Servers</a></span></dt>
1183N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dnssec.dynamic.zones">DNSSEC, Dynamic Zones, and Automatic Signing</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610558">Converting from insecure to secure</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563492">Dynamic DNS update method</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563528">Fully automatic zone signing</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563632">Private-type records</a></span></dt>
1133N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563669">DNSKEY rollovers</a></span></dt>
625N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563682">Dynamic DNS update method</a></span></dt>
1182N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563851">Automatic key rollovers</a></span></dt>
1182N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563878">NSEC3PARAM rollovers via UPDATE</a></span></dt>
625N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563888">Converting from NSEC to NSEC3</a></span></dt>
625N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571953">Converting from NSEC3 to NSEC</a></span></dt>
625N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571965">Converting from secure to insecure</a></span></dt>
625N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572003">Periodic re-signing</a></span></dt>
1133N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572012">NSEC3 and OPTOUT</a></span></dt>
1133N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#rfc5011.support">Dynamic Trust Anchor Management</a></span></dt>
625N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572182">Validating Resolver</a></span></dt>
1134N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572204">Authoritative Server</a></span></dt>
625N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#pkcs11">PKCS #11 (Cryptoki) support</a></span></dt>
518N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2611108">Building BIND 9 with PKCS#11</a></span></dt>
1161N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2638086">Specifying the engine on the command line</a></span></dt>
1161N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2638200">Running named with automatic zone re-signing</a></span></dt>
1161N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dlz-info">DLZ (Dynamically Loadable Zones)</a></span></dt>
1161N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610123">Sample DLZ Driver</a></span></dt>
1161N/A<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2572956">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt>
1161N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2573086">Address Lookups Using AAAA Records</a></span></dt>
1161N/A<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2573176">Address to Name Lookups Using Nibble Format</a></span></dt>
1183N/A<dt><span class="chapter"><a href="Bv9ARM.ch05.html">5. The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</a></span></dt>
289N/A<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2573209">The Lightweight Resolver Library</a></span></dt>
289N/A<dt><span class="sect1"><a href="Bv9ARM.ch05.html#lwresd">Running a Resolver Daemon</a></span></dt>
289N/A<dt><span class="chapter"><a href="Bv9ARM.ch06.html">6. <acronym class="acronym">BIND</acronym> 9 Configuration Reference</a></span></dt>
289N/A<dt><span class="sect1"><a href="Bv9ARM.ch06.html#configuration_file_elements">Configuration File Elements</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#address_match_lists">Address Match Lists</a></span></dt>
1182N/A<dt><span class="sect1"><a href="Bv9ARM.ch06.html#Configuration_File_Grammar">Configuration File Grammar</a></span></dt>
1182N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575414"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#acl"><span><strong class="command">acl</strong></span> Statement Definition and
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575657"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage"><span><strong class="command">controls</strong></span> Statement Definition and
1133N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575948"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575965"><span><strong class="command">include</strong></span> Statement Definition and
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576057"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576081"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576171"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576502"><span><strong class="command">logging</strong></span> Statement Definition and
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2578497"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2578570"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2578634"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2578814"><span><strong class="command">masters</strong></span> Statement Definition and
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2578836"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#options"><span><strong class="command">options</strong></span> Statement Definition and
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_grammar"><span><strong class="command">server</strong></span> Statement Grammar</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and
1133N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt>
1182N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591524"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
1190N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#trusted-keys"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
1183N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591861"><span><strong class="command">trusted-keys</strong></span> Statement Definition
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591908"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#managed-keys"><span><strong class="command">managed-keys</strong></span> Statement Definition
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592418"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594198"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599944">Discussion of MX Records</a></span></dt>
1238N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2600628">Inverse Mapping in IPv4</a></span></dt>
1134N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2600755">Other Zone File Directives</a></span></dt>
647N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2601028"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
289N/A<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
289N/A<dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
289N/A<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch06.html#statistics_counters">Statistics Counters</a></span></dt></dl></dd>
289N/A<dt><span class="chapter"><a href="Bv9ARM.ch07.html">7. <acronym class="acronym">BIND</acronym> 9 Security Considerations</a></span></dt>
815N/A<dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt>
647N/A<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2605733"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
1182N/A<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2605882">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
1182N/A<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2605942">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
647N/A<dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt>
647N/A<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2606096">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
647N/A<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2606107">Incrementing and Changing the Serial Number</a></span></dt>
647N/A<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2606124">Where Can I Get Help?</a></span></dt>
1257N/A<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2606494">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
1261N/A<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609706">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
1257N/A<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610359">Known Defects/Restrictions</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611323">The dns.conf File</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611350">Sample Applications</a></span></dt>
1257N/A<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2612391">Library References</a></span></dt>
1261N/A<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> — DNS lookup utility</span>
1257N/A<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> — DNS lookup utility</span>
1257N/A<span class="refentrytitle"><a href="man.dnssec-dsfromkey.html"><span class="application">dnssec-dsfromkey</span></a></span><span class="refpurpose"> — DNSSEC DS RR generation tool</span>
1257N/A<span class="refentrytitle"><a href="man.dnssec-keyfromlabel.html"><span class="application">dnssec-keyfromlabel</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span>
1257N/A<span class="refentrytitle"><a href="man.dnssec-keygen.html"><span class="application">dnssec-keygen</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span>
1257N/A<span class="refentrytitle"><a href="man.dnssec-revoke.html"><span class="application">dnssec-revoke</span></a></span><span class="refpurpose"> — Set the REVOKED bit on a DNSSEC key</span>
647N/A<span class="refentrytitle"><a href="man.dnssec-settime.html"><span class="application">dnssec-settime</span></a></span><span class="refpurpose"> — Set the key timing metadata for a DNSSEC key</span>
1183N/A<span class="refentrytitle"><a href="man.dnssec-signzone.html"><span class="application">dnssec-signzone</span></a></span><span class="refpurpose"> — DNSSEC zone signing tool</span>
1161N/A<span class="refentrytitle"><a href="man.dnssec-verify.html"><span class="application">dnssec-verify</span></a></span><span class="refpurpose"> — DNSSEC zone verification tool</span>
647N/A<span class="refentrytitle"><a href="man.named-checkconf.html"><span class="application">named-checkconf</span></a></span><span class="refpurpose"> — named configuration file syntax checking tool</span>
1183N/A<span class="refentrytitle"><a href="man.named-checkzone.html"><span class="application">named-checkzone</span></a></span><span class="refpurpose"> — zone file validity checking or converting tool</span>
647N/A<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> — Internet domain name server</span>
647N/A<span class="refentrytitle"><a href="man.named-journalprint.html"><span class="application">named-journalprint</span></a></span><span class="refpurpose"> — print zone journal in human-readable form</span>
647N/A<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> — Dynamic DNS update utility</span>
647N/A<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> — name server control utility</span>
1183N/A<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> — rndc configuration file</span>
647N/A<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> — rndc key generation tool</span>
289N/A<span class="refentrytitle"><a href="man.ddns-confgen.html"><span class="application">ddns-confgen</span></a></span><span class="refpurpose"> — ddns key generation tool</span>
647N/A<span class="refentrytitle"><a href="man.arpaname.html"><span class="application">arpaname</span></a></span><span class="refpurpose"> — translate IP addresses to the corresponding ARPA names</span>
815N/A<span class="refentrytitle"><a href="man.genrandom.html"><span class="application">genrandom</span></a></span><span class="refpurpose"> — generate a file containing random data</span>
518N/A<span class="refentrytitle"><a href="man.isc-hmac-fixup.html"><span class="application">isc-hmac-fixup</span></a></span><span class="refpurpose"> — fixes HMAC keys generated by older versions of BIND</span>
518N/A<span class="refentrytitle"><a href="man.nsec3hash.html"><span class="application">nsec3hash</span></a></span><span class="refpurpose"> — generate NSEC3 hash</span>