man.named.html revision 21e01d1a464c9b3c694534a5e283bcde361e72bd
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - Copyright (C) 2000-2003 Internet Software Consortium.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - Permission to use, copy, modify, and/or distribute this software for any
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - purpose with or without fee is hereby granted, provided that the above
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - copyright notice and this permission notice appear in all copies.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm - PERFORMANCE OF THIS SOFTWARE.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<!-- $Id$ -->
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<p><span class="application">named</span> — Internet domain name server</p>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm is a Domain Name System (DNS) server,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm part of the BIND 9 distribution from ISC. For more
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm information on the DNS, see RFCs 1033, 1034, and 1035.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm When invoked without arguments, <span><strong class="command">named</strong></span>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm read the default configuration file
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <code class="filename">/etc/named.conf</code>, read any initial
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm data, and listen for queries.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Use IPv4 only even if the host machine is capable of IPv6.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <code class="option">-4</code> and <code class="option">-6</code> are mutually
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm exclusive.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Use IPv6 only even if the host machine is capable of IPv4.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <code class="option">-4</code> and <code class="option">-6</code> are mutually
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm exclusive.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Use <em class="replaceable"><code>config-file</code></em> as the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm configuration file instead of the default,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm ensure that reloading the configuration file continues
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to work after the server has changed its working
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm directory due to to a possible
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <code class="option">directory</code> option in the configuration
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm file, <em class="replaceable"><code>config-file</code></em> should be
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm an absolute pathname.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Debugging traces from <span><strong class="command">named</strong></span> become
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm more verbose as the debug level increases.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Use a crypto hardware (OpenSSL engine) for the crypto operations
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm it supports, for instance re-signing with private keys from
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm a secure key store. When compiled with PKCS#11 support
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm defaults to pkcs11, the empty name resets it to no engine.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Run the server in the foreground (i.e. do not daemonize).
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Run the server in the foreground and force all logging
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Turn on memory usage debugging flags. Possible flags are
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm These correspond to the ISC_MEM_DEBUGXXXX flags described in
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Create <em class="replaceable"><code>#cpus</code></em> worker threads
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to take advantage of multiple CPUs. If not specified,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span><strong class="command">named</strong></span> will try to determine the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm number of CPUs present and create one thread per CPU.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm If it is unable to determine the number of CPUs, a
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm single worker thread will be created.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm specified, the default is port 53.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Write memory usage statistics to <code class="filename">stdout</code> on exit.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm This option is mainly of interest to BIND 9 developers
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm and may be removed or changed in a future release.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Allow <span><strong class="command">named</strong></span> to use up to
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <em class="replaceable"><code>#max-socks</code></em> sockets.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm This option should be unnecessary for the vast majority
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm The use of this option could even be harmful because the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm specified value may exceed the limitation of the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm underlying system API.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm It is therefore set only when the default configuration
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm causes exhaustion of file descriptors and the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm operational environment is known to support the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm specified number of sockets.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Note also that the actual maximum number is normally a little
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm fewer than the specified value because
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span><strong class="command">named</strong></span> reserves some file descriptors
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm for its internal use.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to <em class="replaceable"><code>directory</code></em> after
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm processing the command line arguments, but before
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm reading the configuration file.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm This option should be used in conjunction with the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <code class="option">-u</code> option, as chrooting a process
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm running as root doesn't enhance security on most
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm systems; the way <code class="function">chroot(2)</code> is
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm defined allows a process with root privileges to
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm escape a chroot jail.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm worker threads to listen for incoming UDP packets on each
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm address. If not specified, <span><strong class="command">named</strong></span> will
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm use all of the worker threads for this purpose; the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <code class="option">-U</code> option allows the number to be
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm decreased but not increased.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to <em class="replaceable"><code>user</code></em> after completing
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm privileged operations, such as creating sockets that
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm listen on privileged ports.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm On Linux, <span><strong class="command">named</strong></span> uses the kernel's
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm capability mechanism to drop all root privileges
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm except the ability to <code class="function">bind(2)</code> to
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm privileged port and set process resource limits.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Unfortunately, this means that the <code class="option">-u</code>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm option only works when <span><strong class="command">named</strong></span> is
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm later, since previous kernels did not allow privileges
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to be retained after <code class="function">setuid(2)</code>.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Report the version number and exit.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Report the version number and build options, and exit.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Load data from <em class="replaceable"><code>cache-file</code></em> into the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm cache of the default view.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm This option must not be used. It is only of interest
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to BIND 9 developers and may be removed or changed in a
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm future release.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm In routine operation, signals should not be used to control
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm the nameserver; <span><strong class="command">rndc</strong></span> should be used
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Force a reload of the server.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm Shut down the server.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm The result of sending any other signals to the server is undefined.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm The <span><strong class="command">named</strong></span> configuration file is too complex
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm to describe in detail here. A complete description is provided
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm (file creation mode mask) from the parent process. If files
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm created by <span><strong class="command">named</strong></span>, such as journal files,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm need to have custom permissions, the <code class="function">umask</code>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm should be set explicitly in the script used to start the
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span><strong class="command">named</strong></span> process.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm The default configuration file.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm The default process-id file.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<p><span class="corpauthor">Internet Systems Consortium</span>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
8fea755a86ff6c596183a4366bfbd59f1bfdfe55jm<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>