man.lwresd.html revision 010a51c427bfb6ab658fc0056955a1a5b69810be
220a21d38f675eb835f5758e3d23e896573aa5eaLennart Poettering - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - Copyright (C) 2000-2003 Internet Software Consortium.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - Permission to use, copy, modify, and/or distribute this software for any
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - purpose with or without fee is hereby granted, provided that the above
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - copyright notice and this permission notice appear in all copies.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering - PERFORMANCE OF THIS SOFTWARE.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<meta name="generator" content="DocBook XSL Stylesheets V1.76.1">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<link rel="prev" href="man.dnssec-verify.html" title="dnssec-verify">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<link rel="next" href="man.named.html" title="named">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<table width="100%" summary="Navigation header">
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<tr><th colspan="3" align="center"><span class="application">lwresd</span></th></tr>
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<a accesskey="p" href="man.dnssec-verify.html">Prev</a>�</td>
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<th width="60%" align="center">Manual pages</th>
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering<td width="20%" align="right">�<a accesskey="n" href="man.named.html">Next</a>
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering<a name="man.lwresd"></a><div class="titlepage"></div>
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering — lightweight resolver daemon
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering <div class="refsynopsisdiv" title="Synopsis">
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-C <em class="replaceable"><code>config-file</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-i <em class="replaceable"><code>pid-file</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-P <em class="replaceable"><code>port</code></em></code>]
6563b535a062055ae68f2e574018d9d04a864b65Lennart Poettering [<code class="option">-p <em class="replaceable"><code>port</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering <div class="refsection" title="DESCRIPTION">
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering<a name="idp78699728"></a><h2>DESCRIPTION</h2>
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering <p><span class="command"><strong>lwresd</strong></span>
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering is the daemon providing name lookup
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering services to clients that use the BIND 9 lightweight resolver
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering library. It is essentially a stripped-down, caching-only name
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering server that answers queries using the BIND 9 lightweight
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering resolver protocol rather than the DNS protocol.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <p><span class="command"><strong>lwresd</strong></span>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering listens for resolver queries on a
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering UDP port on the IPv4 loopback interface, 127.0.0.1. This
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering means that <span class="command"><strong>lwresd</strong></span> can only be used by
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering processes running on the local machine. By default, UDP port
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering number 921 is used for lightweight resolver requests and
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Incoming lightweight resolver requests are decoded by the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering server which then resolves them using the DNS protocol. When
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering the DNS lookup completes, <span class="command"><strong>lwresd</strong></span> encodes
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering the answers in the lightweight resolver format and returns
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering them to the client that made the request.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering If <code class="filename">/etc/resolv.conf</code> contains any
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="option">nameserver</code> entries, <span class="command"><strong>lwresd</strong></span>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering sends recursive DNS queries to those servers. This is similar
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering to the use of forwarders in a caching name server. If no
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="option">nameserver</code> entries are present, or if
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering forwarding fails, <span class="command"><strong>lwresd</strong></span> resolves the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering queries autonomously starting at the root name servers, using
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering a built-in list of root server hints.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<a name="idp78705872"></a><h2>OPTIONS</h2>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Use IPv4 only even if the host machine is capable of IPv6.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="option">-4</code> and <code class="option">-6</code> are mutually
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Use IPv6 only even if the host machine is capable of IPv4.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="option">-4</code> and <code class="option">-6</code> are mutually
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Use <em class="replaceable"><code>config-file</code></em> as the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering configuration file instead of the default,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="filename">/etc/lwresd.conf</code>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="option">-c</code> can not be used with <code class="option">-C</code>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-C <em class="replaceable"><code>config-file</code></em></span></dt>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Use <em class="replaceable"><code>config-file</code></em> as the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering configuration file instead of the default,
a98d5d64720bdf32e3b5f72f896b583e23f730adLennart Poettering <code class="filename">/etc/resolv.conf</code>.
a98d5d64720bdf32e3b5f72f896b583e23f730adLennart Poettering <code class="option">-C</code> can not be used with <code class="option">-c</code>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Debugging traces from <span class="command"><strong>lwresd</strong></span> become
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering more verbose as the debug level increases.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Run the server in the foreground (i.e. do not daemonize).
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Run the server in the foreground and force all logging
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-i <em class="replaceable"><code>pid-file</code></em></span></dt>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Use <em class="replaceable"><code>pid-file</code></em> as the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering PID file instead of the default,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="filename">/var/run/lwresd/lwresd.pid</code>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Turn on memory usage debugging flags. Possible flags are
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <em class="replaceable"><code>usage</code></em>,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <em class="replaceable"><code>trace</code></em>,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <em class="replaceable"><code>record</code></em>,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <em class="replaceable"><code>size</code></em>, and
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <em class="replaceable"><code>mctx</code></em>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering These correspond to the ISC_MEM_DEBUGXXXX flags described in
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <code class="filename"><isc/mem.h></code>.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering Create <em class="replaceable"><code>#cpus</code></em> worker threads
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering to take advantage of multiple CPUs. If not specified,
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering <span class="command"><strong>lwresd</strong></span> will try to determine the
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering number of CPUs present and create one thread per CPU.
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering If it is unable to determine the number of CPUs, a
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering single worker thread will be created.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering<dt><span class="term">-P <em class="replaceable"><code>port</code></em></span></dt>
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Listen for lightweight resolver queries on port
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering <em class="replaceable"><code>port</code></em>. If
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering not specified, the default is port 921.
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Send DNS lookups to port <em class="replaceable"><code>port</code></em>. If not
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering specified, the default is port 53. This provides a
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering way of testing the lightweight resolver daemon with a
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering name server that listens for queries on a non-standard
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Write memory usage statistics to <code class="filename">stdout</code>
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering <div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;">
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering This option is mainly of interest to BIND 9 developers
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering and may be removed or changed in a future release.
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering to <em class="replaceable"><code>directory</code></em> after
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering processing the command line arguments, but before
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering reading the configuration file.
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering <div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;">
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering This option should be used in conjunction with the
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering <code class="option">-u</code> option, as chrooting a process
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering running as root doesn't enhance security on most
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering systems; the way <code class="function">chroot(2)</code> is
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering defined allows a process with root privileges to
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering escape a chroot jail.
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering to <em class="replaceable"><code>user</code></em> after completing
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering privileged operations, such as creating sockets that
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering listen on privileged ports.
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Report the version number and exit.
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<dt><span class="term"><code class="filename">/etc/resolv.conf</code></span></dt>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering The default configuration file.
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<dt><span class="term"><code class="filename">/var/run/lwresd.pid</code></span></dt>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering The default process-id file.
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering <div class="refsection" title="SEE ALSO">
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<a name="idp78765904"></a><h2>SEE ALSO</h2>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering <span class="refentrytitle">named</span>(8)
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering <span class="refentrytitle">lwres</span>(3)
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering <span class="refentrytitle">resolver</span>(5)
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<table width="100%" summary="Navigation footer">
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<a accesskey="p" href="man.dnssec-verify.html">Prev</a>�</td>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<td width="40%" align="right">�<a accesskey="n" href="man.named.html">Next</a>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<td width="40%" align="left" valign="top">
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<span class="application">dnssec-verify</span>�</td>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<td width="40%" align="right" valign="top">�<span class="application">named</span>
c269cec334f940d82146f70d69125b1caef08baaLennart Poettering<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0pre-alpha</p>