man.lwresd.html revision fa535fa05f36a1a45027faf9d116cfa3249d9d72
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - Copyright (C) 2000-2003 Internet Software Consortium.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - Permission to use, copy, modify, and/or distribute this software for any
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - purpose with or without fee is hereby granted, provided that the above
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - copyright notice and this permission notice appear in all copies.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse - PERFORMANCE OF THIS SOFTWARE.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f5c2e7ea56aaa46a9976476fb0cb1f02b9426f07Theo Schlossnagle<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<link rel="prev" href="man.named.conf.html" title="named.conf">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<table width="100%" summary="Navigation header">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<tr><th colspan="3" align="center"><span class="application">lwresd</span></th></tr>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<a accesskey="p" href="man.named.conf.html">Prev</a>�</td>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<th width="60%" align="center">Manual pages</th>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<a name="man.lwresd"></a><div class="titlepage"></div>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<p><span class="application">lwresd</span> — lightweight resolver daemon</p>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<div class="cmdsynopsis"><p><code class="command">lwresd</code> [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-C <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-i <em class="replaceable"><code>pid-file</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-P <em class="replaceable"><code>port</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-4</code>] [<code class="option">-6</code>]</p></div>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<p><span><strong class="command">lwresd</strong></span>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse is the daemon providing name lookup
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse services to clients that use the BIND 9 lightweight resolver
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse library. It is essentially a stripped-down, caching-only name
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse server that answers queries using the BIND 9 lightweight
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse resolver protocol rather than the DNS protocol.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<p><span><strong class="command">lwresd</strong></span>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse listens for resolver queries on a
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse UDP port on the IPv4 loopback interface, 127.0.0.1. This
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse means that <span><strong class="command">lwresd</strong></span> can only be used by
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse processes running on the local machine. By default, UDP port
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse number 921 is used for lightweight resolver requests and
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Incoming lightweight resolver requests are decoded by the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse server which then resolves them using the DNS protocol. When
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse the DNS lookup completes, <span><strong class="command">lwresd</strong></span> encodes
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse the answers in the lightweight resolver format and returns
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse them to the client that made the request.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse If <code class="filename">/etc/resolv.conf</code> contains any
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">nameserver</code> entries, <span><strong class="command">lwresd</strong></span>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse sends recursive DNS queries to those servers. This is similar
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse to the use of forwarders in a caching name server. If no
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">nameserver</code> entries are present, or if
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse forwarding fails, <span><strong class="command">lwresd</strong></span> resolves the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse queries autonomously starting at the root name servers, using
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse a built-in list of root server hints.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Use IPv4 only even if the host machine is capable of IPv6.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">-4</code> and <code class="option">-6</code> are mutually
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Use IPv6 only even if the host machine is capable of IPv4.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">-4</code> and <code class="option">-6</code> are mutually
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Use <em class="replaceable"><code>config-file</code></em> as the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse configuration file instead of the default,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="filename">/etc/lwresd.conf</code>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">-c</code> can not be used with <code class="option">-C</code>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-C <em class="replaceable"><code>config-file</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Use <em class="replaceable"><code>config-file</code></em> as the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse configuration file instead of the default,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="filename">/etc/resolv.conf</code>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">-C</code> can not be used with <code class="option">-c</code>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Debugging traces from <span><strong class="command">lwresd</strong></span> become
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse more verbose as the debug level increases.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Run the server in the foreground (i.e. do not daemonize).
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Run the server in the foreground and force all logging
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-i <em class="replaceable"><code>pid-file</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Use <em class="replaceable"><code>pid-file</code></em> as the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse PID file instead of the default,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="filename">/var/run/lwresd/lwresd.pid</code>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Turn on memory usage debugging flags. Possible flags are
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <em class="replaceable"><code>usage</code></em>,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <em class="replaceable"><code>trace</code></em>,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <em class="replaceable"><code>record</code></em>,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <em class="replaceable"><code>size</code></em>, and
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <em class="replaceable"><code>mctx</code></em>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse These correspond to the ISC_MEM_DEBUGXXXX flags described in
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="filename"><isc/mem.h></code>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Create <em class="replaceable"><code>#cpus</code></em> worker threads
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse to take advantage of multiple CPUs. If not specified,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <span><strong class="command">lwresd</strong></span> will try to determine the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse number of CPUs present and create one thread per CPU.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse If it is unable to determine the number of CPUs, a
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse single worker thread will be created.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-P <em class="replaceable"><code>port</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Listen for lightweight resolver queries on port
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <em class="replaceable"><code>port</code></em>. If
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse not specified, the default is port 921.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Send DNS lookups to port <em class="replaceable"><code>port</code></em>. If not
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse specified, the default is port 53. This provides a
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse way of testing the lightweight resolver daemon with a
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse name server that listens for queries on a non-standard
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Write memory usage statistics to <code class="filename">stdout</code>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse This option is mainly of interest to BIND 9 developers
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse and may be removed or changed in a future release.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse to <em class="replaceable"><code>directory</code></em> after
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse processing the command line arguments, but before
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse reading the configuration file.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse This option should be used in conjunction with the
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <code class="option">-u</code> option, as chrooting a process
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse running as root doesn't enhance security on most
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse systems; the way <code class="function">chroot(2)</code> is
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse defined allows a process with root privileges to
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse escape a chroot jail.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse to <em class="replaceable"><code>user</code></em> after completing
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse privileged operations, such as creating sockets that
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse listen on privileged ports.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse Report the version number and exit.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term"><code class="filename">/etc/resolv.conf</code></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse The default configuration file.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<dt><span class="term"><code class="filename">/var/run/lwresd.pid</code></span></dt>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse The default process-id file.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse <span class="citerefentry"><span class="refentrytitle">resolver</span>(5)</span>.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<p><span class="corpauthor">Internet Systems Consortium</span>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<table width="100%" summary="Navigation footer">
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<a accesskey="p" href="man.named.conf.html">Prev</a>�</td>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse<p style="text-align: center;">BIND 9.11.0pre-alpha</p>