man.named.html revision 36da16fa31fa2a582afe67010ba449a57177fd2f
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp - Copyright (C) 2000-2003 Internet Software Consortium.
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp - Permission to use, copy, modify, and/or distribute this software for any
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp - purpose with or without fee is hereby granted, provided that the above
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp - copyright notice and this permission notice appear in all copies.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp - PERFORMANCE OF THIS SOFTWARE.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<!-- $Id: man.named.html,v 1.213 2011/11/07 01:15:03 tbox Exp $ -->
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<p><span class="application">named</span> — Internet domain name server</p>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp is a Domain Name System (DNS) server,
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp part of the BIND 9 distribution from ISC. For more
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp information on the DNS, see RFCs 1033, 1034, and 1035.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp When invoked without arguments, <span><strong class="command">named</strong></span>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp read the default configuration file
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <code class="filename">/etc/named.conf</code>, read any initial
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp data, and listen for queries.
cd5b1aa05bfbf7fdf7ed97054e9ee3954c2e1bc6Tripp Use IPv4 only even if the host machine is capable of IPv6.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <code class="option">-4</code> and <code class="option">-6</code> are mutually
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Use IPv6 only even if the host machine is capable of IPv4.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <code class="option">-4</code> and <code class="option">-6</code> are mutually
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Use <em class="replaceable"><code>config-file</code></em> as the
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp configuration file instead of the default,
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp ensure that reloading the configuration file continues
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp to work after the server has changed its working
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp directory due to to a possible
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <code class="option">directory</code> option in the configuration
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp file, <em class="replaceable"><code>config-file</code></em> should be
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp an absolute pathname.
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp Debugging traces from <span><strong class="command">named</strong></span> become
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp more verbose as the debug level increases.
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Use a crypto hardware (OpenSSL engine) for the crypto operations
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp it supports, for instance re-signing with private keys from
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp a secure key store. When compiled with PKCS#11 support
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp defaults to pkcs11, the empty name resets it to no engine.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Run the server in the foreground (i.e. do not daemonize).
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Run the server in the foreground and force all logging
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Turn on memory usage debugging flags. Possible flags are
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp These correspond to the ISC_MEM_DEBUGXXXX flags described in
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Create <em class="replaceable"><code>#cpus</code></em> worker threads
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp to take advantage of multiple CPUs. If not specified,
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <span><strong class="command">named</strong></span> will try to determine the
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp number of CPUs present and create one thread per CPU.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp If it is unable to determine the number of CPUs, a
422668e1d4513bb870b8b576fd9d828c8872f074Tripp single worker thread will be created.
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp specified, the default is port 53.
422668e1d4513bb870b8b576fd9d828c8872f074Tripp Write memory usage statistics to <code class="filename">stdout</code> on exit.
422668e1d4513bb870b8b576fd9d828c8872f074Tripp<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
422668e1d4513bb870b8b576fd9d828c8872f074Tripp This option is mainly of interest to BIND 9 developers
422668e1d4513bb870b8b576fd9d828c8872f074Tripp and may be removed or changed in a future release.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp Allow <span><strong class="command">named</strong></span> to use up to
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp <em class="replaceable"><code>#max-socks</code></em> sockets.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp This option should be unnecessary for the vast majority
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp The use of this option could even be harmful because the
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp specified value may exceed the limitation of the
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp underlying system API.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp It is therefore set only when the default configuration
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp causes exhaustion of file descriptors and the
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp operational environment is known to support the
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp specified number of sockets.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Note also that the actual maximum number is normally a little
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp fewer than the specified value because
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <span><strong class="command">named</strong></span> reserves some file descriptors
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp for its internal use.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp to <em class="replaceable"><code>directory</code></em> after
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp processing the command line arguments, but before
422668e1d4513bb870b8b576fd9d828c8872f074Tripp reading the configuration file.
422668e1d4513bb870b8b576fd9d828c8872f074Tripp<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
422668e1d4513bb870b8b576fd9d828c8872f074Tripp This option should be used in conjunction with the
422668e1d4513bb870b8b576fd9d828c8872f074Tripp <code class="option">-u</code> option, as chrooting a process
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp running as root doesn't enhance security on most
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp systems; the way <code class="function">chroot(2)</code> is
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp defined allows a process with root privileges to
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp escape a chroot jail.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
8b594f23b40af0ed8368f49ee58370563d1ef0e0Tripp to <em class="replaceable"><code>user</code></em> after completing
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp privileged operations, such as creating sockets that
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp listen on privileged ports.
c6624d55071139dbc6ebd4252f6c7ee46a5800a9Tripp<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
422668e1d4513bb870b8b576fd9d828c8872f074Tripp On Linux, <span><strong class="command">named</strong></span> uses the kernel's
422668e1d4513bb870b8b576fd9d828c8872f074Tripp capability mechanism to drop all root privileges
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp except the ability to <code class="function">bind(2)</code> to
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp privileged port and set process resource limits.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Unfortunately, this means that the <code class="option">-u</code>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp option only works when <span><strong class="command">named</strong></span> is
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp later, since previous kernels did not allow privileges
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp to be retained after <code class="function">setuid(2)</code>.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp Report the version number and exit.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp Report the version number and build options, and exit.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp Load data from <em class="replaceable"><code>cache-file</code></em> into the
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp cache of the default view.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp This option must not be used. It is only of interest
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp to BIND 9 developers and may be removed or changed in a
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp future release.
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp In routine operation, signals should not be used to control
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp the nameserver; <span><strong class="command">rndc</strong></span> should be used
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Force a reload of the server.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp Shut down the server.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp The result of sending any other signals to the server is undefined.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp The <span><strong class="command">named</strong></span> configuration file is too complex
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp to describe in detail here. A complete description is provided
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
422668e1d4513bb870b8b576fd9d828c8872f074Tripp (file creation mode mask) from the parent process. If files
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp created by <span><strong class="command">named</strong></span>, such as journal files,
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp need to have custom permissions, the <code class="function">umask</code>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp should be set explicitly in the script used to start the
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <span><strong class="command">named</strong></span> process.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp The default configuration file.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
cc21b565833307c2b0b06deb4e3ab22c2a94be3eTripp The default process-id file.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<p><span class="corpauthor">Internet Systems Consortium</span>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
8209f3939e32e0e5bde64192267fdaf9db6f4fbcTripp<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
8648721e29bb657dd5c5ff20f03e86fe50628ce6Tripp<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
e393eced613f9b4a5fb6bdd461d0e0bf5064d5ecTripp<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>