man.named.html revision 4556ad3a270bf049b3225433a402666aaffe3c36
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Permission to use, copy, modify, and distribute this software for any
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - purpose with or without fee is hereby granted, provided that the above
8c225507766814e78e168b17a24b8a47ca7f8c37Tinderbox User - copyright notice and this permission notice appear in all copies.
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User - PERFORMANCE OF THIS SOFTWARE.
f9ce6280cec79deb16ff6d9807aa493ff23e10d9Tinderbox User<!-- $Id: man.named.html,v 1.57 2007/09/12 02:32:26 marka Exp $ -->
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<link rel="next" href="man.rndc.html" title="rndc">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<table width="100%" summary="Navigation header">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="man.named"></a><div class="titlepage"></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<p><span class="application">named</span> — Internet domain name server</p>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<p><span><strong class="command">named</strong></span>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User is a Domain Name System (DNS) server,
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User part of the BIND 9 distribution from ISC. For more
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User information on the DNS, see RFCs 1033, 1034, and 1035.
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User When invoked without arguments, <span><strong class="command">named</strong></span>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User read the default configuration file
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User <code class="filename">/etc/named.conf</code>, read any initial
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User data, and listen for queries.
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User Use IPv4 only even if the host machine is capable of IPv6.
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User <code class="option">-4</code> and <code class="option">-6</code> are mutually
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User Use IPv6 only even if the host machine is capable of IPv4.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User <code class="option">-4</code> and <code class="option">-6</code> are mutually
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User Use <em class="replaceable"><code>config-file</code></em> as the
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User configuration file instead of the default,
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User <code class="filename">/etc/named.conf</code>. To
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User ensure that reloading the configuration file continues
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User to work after the server has changed its working
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User directory due to to a possible
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User <code class="option">directory</code> option in the configuration
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User file, <em class="replaceable"><code>config-file</code></em> should be
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User an absolute pathname.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User Debugging traces from <span><strong class="command">named</strong></span> become
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User more verbose as the debug level increases.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Run the server in the foreground (i.e. do not daemonize).
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User Run the server in the foreground and force all logging
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User Turn on memory usage debugging flags. Possible flags are
550d3276d0490c4918f089ccb1528a3eb0951b0aTinderbox User <em class="replaceable"><code>usage</code></em>,
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <em class="replaceable"><code>trace</code></em>,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="replaceable"><code>record</code></em>,
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <em class="replaceable"><code>size</code></em>, and
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <em class="replaceable"><code>mctx</code></em>.
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User These correspond to the ISC_MEM_DEBUGXXXX flags described in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="filename"><isc/mem.h></code>.
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User Create <em class="replaceable"><code>#cpus</code></em> worker threads
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User to take advantage of multiple CPUs. If not specified,
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User <span><strong class="command">named</strong></span> will try to determine the
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User number of CPUs present and create one thread per CPU.
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User If it is unable to determine the number of CPUs, a
51da15c88648a9e47d0cddff4b2b782665e99401Tinderbox User single worker thread will be created.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt specified, the default is port 53.
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User Write memory usage statistics to <code class="filename">stdout</code> on exit.
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User This option is mainly of interest to BIND 9 developers
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User and may be removed or changed in a future release.
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User to <em class="replaceable"><code>directory</code></em> after
164ade1482251e1da962b42e5bf0d3aa02a11e03Tinderbox User processing the command line arguments, but before
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User reading the configuration file.
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User This option should be used in conjunction with the
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User <code class="option">-u</code> option, as chrooting a process
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User running as root doesn't enhance security on most
abe69df9a7de5cda07a2b8e19e8b7c981bcd7a9dTinderbox User systems; the way <code class="function">chroot(2)</code> is
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User defined allows a process with root privileges to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User escape a chroot jail.
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User to <em class="replaceable"><code>user</code></em> after completing
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User privileged operations, such as creating sockets that
421ba11f3f07cbcb12c288ef7f4e7bad13fcc28fTinderbox User listen on privileged ports.
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User On Linux, <span><strong class="command">named</strong></span> uses the kernel's
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User capability mechanism to drop all root privileges
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User except the ability to <code class="function">bind(2)</code> to
3b15473cedf41d48904f5b07bdc5e87afff6b58cTinderbox User privileged port and set process resource limits.
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User Unfortunately, this means that the <code class="option">-u</code>
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User option only works when <span><strong class="command">named</strong></span> is
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User later, since previous kernels did not allow privileges
99b30e26a6beb9092557cc9e5370b517309bff6eTinderbox User to be retained after <code class="function">setuid(2)</code>.
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User Report the version number and exit.
c48fdfda7a8ae8973aadfeb88cbeaab013024a6cTinderbox User<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User Load data from <em class="replaceable"><code>cache-file</code></em> into the
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User cache of the default view.
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt This option must not be used. It is only of interest
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to BIND 9 developers and may be removed or changed in a
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User future release.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt In routine operation, signals should not be used to control
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the nameserver; <span><strong class="command">rndc</strong></span> should be used
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User Force a reload of the server.