man.named.html revision 645a03d61e2fe1e4ec5695c95ec8d4343ac4920e
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt<!--
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt - Copyright (C) 2000-2003 Internet Software Consortium.
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt -
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt - Permission to use, copy, modify, and/or distribute this software for any
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt - purpose with or without fee is hereby granted, provided that the above
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt - copyright notice and this permission notice appear in all copies.
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt -
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews - PERFORMANCE OF THIS SOFTWARE.
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews-->
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews<!-- $Id$ -->
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews<html>
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews<head>
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews<title>named</title>
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews</head>
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews<div class="navheader">
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews<table width="100%" summary="Navigation header">
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt<tr>
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt<td width="20%" align="left">
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt<th width="60%" align="center">Manual pages</th>
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews</td>
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews</tr>
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews</table>
512765ba1e3f0b29e2c1ae4b0138838c6422f2bdEvan Hunt<hr>
512765ba1e3f0b29e2c1ae4b0138838c6422f2bdEvan Hunt</div>
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews<div class="refentry" lang="en">
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews<a name="man.named"></a><div class="titlepage"></div>
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews<div class="refnamediv">
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews<h2>Name</h2>
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman<p><span class="application">named</span> &#8212; Internet domain name server</p>
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman</div>
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman<div class="refsynopsisdiv">
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman<h2>Synopsis</h2>
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-L <em class="replaceable"><code>logfile</code></em></code>] [<code class="option">-M <em class="replaceable"><code>option</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>lock-file</code></em></code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman</div>
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman<div class="refsect1" lang="en">
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt<a name="id2647937"></a><h2>DESCRIPTION</h2>
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt<p><span><strong class="command">named</strong></span>
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt is a Domain Name System (DNS) server,
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews part of the BIND 9 distribution from ISC. For more
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews information on the DNS, see RFCs 1033, 1034, and 1035.
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews </p>
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews<p>
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews When invoked without arguments, <span><strong class="command">named</strong></span>
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews will
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt read the default configuration file
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt <code class="filename">/etc/named.conf</code>, read any initial
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt data, and listen for queries.
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt </p>
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt</div>
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt<div class="refsect1" lang="en">
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt<a name="id2647968"></a><h2>OPTIONS</h2>
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt<div class="variablelist"><dl>
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt<dt><span class="term">-4</span></dt>
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt<dd><p>
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt Use IPv4 only even if the host machine is capable of IPv6.
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman <code class="option">-4</code> and <code class="option">-6</code> are mutually
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman exclusive.
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman </p></dd>
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman<dt><span class="term">-6</span></dt>
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman<dd><p>
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman Use IPv6 only even if the host machine is capable of IPv4.
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman <code class="option">-4</code> and <code class="option">-6</code> are mutually
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman exclusive.
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman </p></dd>
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman<dd><p>
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman Use <em class="replaceable"><code>config-file</code></em> as the
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman configuration file instead of the default,
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman <code class="filename">/etc/named.conf</code>. To
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman ensure that reloading the configuration file continues
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman to work after the server has changed its working
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman directory due to to a possible
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman <code class="option">directory</code> option in the configuration
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman file, <em class="replaceable"><code>config-file</code></em> should be
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman an absolute pathname.
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman </p></dd>
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt<dd><p>
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt Debugging traces from <span><strong class="command">named</strong></span> become
2883bbaef3b2b712acfb89358f5a9c7ebb62733bEvan Hunt more verbose as the debug level increases.
527163f0e5e8639bcceb7fe52387285042f5b24cEvan Hunt </p></dd>
527163f0e5e8639bcceb7fe52387285042f5b24cEvan Hunt<dt><span class="term">-D <em class="replaceable"><code>string</code></em></span></dt>
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt<dd><p>
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt Specifies a string that is used to identify a instance of
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt <span><strong class="command">named</strong></span> in a process listing. The contents
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews of <em class="replaceable"><code>string</code></em> are
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews not examined.
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews </p></dd>
3195754154292f0651c195433607696a259a98e2Evan Hunt<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
3195754154292f0651c195433607696a259a98e2Evan Hunt<dd>
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt<p>
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt When applicable, specifies the hardware to use for
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt cryptographic operations, such as a secure key store used
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt for signing.
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews </p>
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews<p>
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews When BIND is built with OpenSSL PKCS#11 support, this defaults
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews to the string "pkcs11", which identifies an OpenSSL engine
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews that can drive a cryptographic accelerator or hardware service
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews module. When BIND is built with native PKCS#11 cryptography
1bce43adcc11d21afaf645cbe466553aabc725b2Mark Andrews (--enable-native-pkcs11), it defaults to the path of the PKCS#11
1bce43adcc11d21afaf645cbe466553aabc725b2Mark Andrews provider library specified via "--with-pkcs11".
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews </p>
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews</dd>
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews<dt><span class="term">-f</span></dt>
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews<dd><p>
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews Run the server in the foreground (i.e. do not daemonize).
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews </p></dd>
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt<dt><span class="term">-g</span></dt>
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt<dd><p>
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt Run the server in the foreground and force all logging
62b5dd5b09cb575281f8193476b58a4bd9870fc9Evan Hunt to <code class="filename">stderr</code>.
62b5dd5b09cb575281f8193476b58a4bd9870fc9Evan Hunt </p></dd>
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews<dt><span class="term">-L <em class="replaceable"><code>logfile</code></em></span></dt>
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews<dd><p>
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews Log to the file <code class="option">logfile</code> by default
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews instead of the system log.
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews </p></dd>
8bcd80824c51c802c2927236b012cd526f569b04Mark Andrews<dt><span class="term">-M <em class="replaceable"><code>option</code></em></span></dt>
3be4330b77e6de0c6aa7cca74c1ae17fc661ac32Tinderbox User<dd><p>
8bcd80824c51c802c2927236b012cd526f569b04Mark Andrews Sets the default memory context options. Currently
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews the only supported option is
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews <em class="replaceable"><code>external</code></em>,
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews which causes the internal memory manager to be bypassed
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt in favor of system-provided memory allocation functions.
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt </p></dd>
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt<dd><p>
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt Turn on memory usage debugging flags. Possible flags are
6ef61e764583887172e27c3bc681e36cfa27b469Mark Andrews <em class="replaceable"><code>usage</code></em>,
94a94fca2444bb18b4bf74d6c5dbcbb89f139237Mark Andrews <em class="replaceable"><code>trace</code></em>,
b81977ae70138c9befd8fa4bb66b6145e1986561Mark Andrews <em class="replaceable"><code>record</code></em>,
b81977ae70138c9befd8fa4bb66b6145e1986561Mark Andrews <em class="replaceable"><code>size</code></em>, and
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt <em class="replaceable"><code>mctx</code></em>.
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt These correspond to the ISC_MEM_DEBUGXXXX flags described in
9ecedaea58defeadaf54dfc1211270653e0657ceMark Andrews <code class="filename">&lt;isc/mem.h&gt;</code>.
9ecedaea58defeadaf54dfc1211270653e0657ceMark Andrews </p></dd>
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt<dd><p>
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt Create <em class="replaceable"><code>#cpus</code></em> worker threads
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt to take advantage of multiple CPUs. If not specified,
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt <span><strong class="command">named</strong></span> will try to determine the
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt number of CPUs present and create one thread per CPU.
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt If it is unable to determine the number of CPUs, a
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt single worker thread will be created.
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt </p></dd>
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt<dd><p>
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews specified, the default is port 53.
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews </p></dd>
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt<dt><span class="term">-s</span></dt>
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt<dd>
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt<p>
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt Write memory usage statistics to <code class="filename">stdout</code> on exit.
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews </p>
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
e2ec0753ce8ed53c870141541b34ebb44598cef7Tinderbox User<h3 class="title">Note</h3>
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews<p>
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews This option is mainly of interest to BIND 9 developers
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews and may be removed or changed in a future release.
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt </p>
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt</div>
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews</dd>
c742ef745e1f3400b79c9df3d188896ccbb50f15Evan Hunt<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews<dd>
5688a47c152def63dd2f5fb9a93911a0df46162eTinderbox User<p>
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews Allow <span><strong class="command">named</strong></span> to use up to
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews <em class="replaceable"><code>#max-socks</code></em> sockets.
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews The default value is 4096 on systems built with default
8ce73e5c8cd5e985310ad42b76e8cacee406cb34Mark Andrews configuration options, and 21000 on systems built with
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews "configure --with-tuning=large".
f2e8131f508ca9c92bf7601c80db3c9e1d3bc4ebMark Andrews </p>
22e3ffcf2c52114092b2dbdf2bc1872371c96192Mark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
22e3ffcf2c52114092b2dbdf2bc1872371c96192Mark Andrews<h3 class="title">Warning</h3>
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews<p>
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews This option should be unnecessary for the vast majority
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews of users.
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews The use of this option could even be harmful because the
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews specified value may exceed the limitation of the
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews underlying system API.
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews It is therefore set only when the default configuration
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews causes exhaustion of file descriptors and the
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews operational environment is known to support the
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews specified number of sockets.
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews Note also that the actual maximum number is normally a little
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews fewer than the specified value because
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews <span><strong class="command">named</strong></span> reserves some file descriptors
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt for its internal use.
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt </p>
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt</div>
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt</dd>
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt<dd>
d6080de9be23024f5f7a1e40d0cb06df94cdcb72Mark Andrews<p>Chroot
d6080de9be23024f5f7a1e40d0cb06df94cdcb72Mark Andrews to <em class="replaceable"><code>directory</code></em> after
2a2618356ecdf5962230fe11606d2b106a638295Tinderbox User processing the command line arguments, but before
6649db1ca4f3dc2d14f41f77e03867ac013215f9Evan Hunt reading the configuration file.
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk </p>
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
6649db1ca4f3dc2d14f41f77e03867ac013215f9Evan Hunt<h3 class="title">Warning</h3>
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk<p>
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk This option should be used in conjunction with the
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews <code class="option">-u</code> option, as chrooting a process
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews running as root doesn't enhance security on most
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews systems; the way <code class="function">chroot(2)</code> is
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews defined allows a process with root privileges to
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews escape a chroot jail.
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews </p>
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews</div>
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews</dd>
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews<dd><p>
544e2b48ece5724f2c4a0d6636048a72335cfd54Evan Hunt Use <em class="replaceable"><code>#listeners</code></em>
23ac7e663494ffdfd78b52d1a0a62d93f0d30d93Mark Andrews worker threads to listen for incoming UDP packets on each
23ac7e663494ffdfd78b52d1a0a62d93f0d30d93Mark Andrews address. If not specified, <span><strong class="command">named</strong></span> will
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews calculate a default value based on the number of detected
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews detected CPUs divided by 2 for values higher than 4.
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews If <code class="option">-n</code> has been set to a higher value than
d84a356d4b122d9a50dbca6776c820f5e59ec44dMark Andrews the number of detected CPUs, then <code class="option">-U</code> may
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews be increased as high as that value, but no higher.
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews </p></dd>
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews<dd>
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews<p>Setuid
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews to <em class="replaceable"><code>user</code></em> after completing
348d80fb8490f4547aaa569e5f7ea2a032543bacMark Andrews privileged operations, such as creating sockets that
348d80fb8490f4547aaa569e5f7ea2a032543bacMark Andrews listen on privileged ports.
47071b7310bd6d4d12169c336faac72c8c3d9ecfMark Andrews </p>
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews<h3 class="title">Note</h3>
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews<p>
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews On Linux, <span><strong class="command">named</strong></span> uses the kernel's
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews capability mechanism to drop all root privileges
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews except the ability to <code class="function">bind(2)</code> to
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews a
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews privileged port and set process resource limits.
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews Unfortunately, this means that the <code class="option">-u</code>
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews option only works when <span><strong class="command">named</strong></span> is
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews run
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews later, since previous kernels did not allow privileges
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews to be retained after <code class="function">setuid(2)</code>.
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt </p>
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt</div>
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt</dd>
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews<dt><span class="term">-v</span></dt>
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews<dd><p>
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews Report the version number and exit.
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews </p></dd>
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews<dt><span class="term">-V</span></dt>
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt<dd><p>
47071b7310bd6d4d12169c336faac72c8c3d9ecfMark Andrews Report the version number and build options, and exit.
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt </p></dd>
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt<dt><span class="term">-X <em class="replaceable"><code>lock-file</code></em></span></dt>
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt<dd><p>
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt Acquire a lock on the specified file at runtime; this
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews helps to prevent duplicate <span><strong class="command">named</strong></span> instances
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews from running simultaneously.
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews Use of this option overrides the <span><strong class="command">lock-file</strong></span>
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman option in <code class="filename">named.conf</code>.
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman If set to <code class="literal">none</code>, the lock file check
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman is disabled.
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews </p></dd>
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews<dd>
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt<p>
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt Load data from <em class="replaceable"><code>cache-file</code></em> into the
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt cache of the default view.
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews </p>
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews<h3 class="title">Warning</h3>
fd017eea638d690b6a90c4d2a3f2ebe51c472173Mark Andrews<p>
fd017eea638d690b6a90c4d2a3f2ebe51c472173Mark Andrews This option must not be used. It is only of interest
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews to BIND 9 developers and may be removed or changed in a
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews future release.
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews </p>
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews</div>
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews</dd>
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews</dl></div>
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews</div>
294ef74e5ad68d898207c4fb36d8b18d526a11f6Curtis Blackburn<div class="refsect1" lang="en">
1008577c673876037d60b5241a8f1de0d1b680d9Tinderbox User<a name="id2683141"></a><h2>SIGNALS</h2>
294ef74e5ad68d898207c4fb36d8b18d526a11f6Curtis Blackburn<p>
fe6557e5901162308e716791077ace6811728242Mark Andrews In routine operation, signals should not be used to control
fe6557e5901162308e716791077ace6811728242Mark Andrews the nameserver; <span><strong class="command">rndc</strong></span> should be used
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews instead.
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews </p>
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews<div class="variablelist"><dl>
4df43743ab1ef4bad2b96840a7b2b9c77bc82bc2Mark Andrews<dt><span class="term">SIGHUP</span></dt>
4df43743ab1ef4bad2b96840a7b2b9c77bc82bc2Mark Andrews<dd><p>
4df43743ab1ef4bad2b96840a7b2b9c77bc82bc2Mark Andrews Force a reload of the server.
60c47284e4d752ccefa57f47b61a9c82899f3297Mark Andrews </p></dd>
60c47284e4d752ccefa57f47b61a9c82899f3297Mark Andrews<dt><span class="term">SIGINT, SIGTERM</span></dt>
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews<dd><p>
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews Shut down the server.
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews </p></dd>
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews</dl></div>
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews<p>
7a3d063847290b204dfcedaef7288033c8424bfbEvan Hunt The result of sending any other signals to the server is undefined.
7a3d063847290b204dfcedaef7288033c8424bfbEvan Hunt </p>
7a3d063847290b204dfcedaef7288033c8424bfbEvan Hunt</div>
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews<div class="refsect1" lang="en">
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews<a name="id2683191"></a><h2>CONFIGURATION</h2>
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews<p>
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews The <span><strong class="command">named</strong></span> configuration file is too complex
2b8679cf0f832c5e55121eb23806da577d272dd7Francis Dupont to describe in detail here. A complete description is provided
6db55b4ff9b099bc8d6621f6e13ec1f087d35e04Mark Andrews in the
6db55b4ff9b099bc8d6621f6e13ec1f087d35e04Mark Andrews <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
2ac8829a8a7ce2f5fbcf006c3bf6c5a6c821abf3Mark Andrews </p>
2ac8829a8a7ce2f5fbcf006c3bf6c5a6c821abf3Mark Andrews<p>
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews (file creation mode mask) from the parent process. If files
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews created by <span><strong class="command">named</strong></span>, such as journal files,
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews need to have custom permissions, the <code class="function">umask</code>
d9b96d0a42a70c1a43415dcbe0f8872b84d76a13Evan Hunt should be set explicitly in the script used to start the
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt <span><strong class="command">named</strong></span> process.
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt </p>
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt</div>
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews<div class="refsect1" lang="en">
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews<a name="id2683240"></a><h2>FILES</h2>
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews<div class="variablelist"><dl>
a0e34c90eaf2464c6ef7c46c75c2df2dcb152293Mark Andrews<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
a0e34c90eaf2464c6ef7c46c75c2df2dcb152293Mark Andrews<dd><p>
31ad8218ccdffd986b9487e3bcb9df089e47d0ddTinderbox User The default configuration file.
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt </p></dd>
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt<dd><p>
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt The default process-id file.
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt </p></dd>
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt</dl></div>
76af83c9adb772f7b045c62cf8b411165bfaa5efMark Andrews</div>
76af83c9adb772f7b045c62cf8b411165bfaa5efMark Andrews<div class="refsect1" lang="en">
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt<a name="id2683284"></a><h2>SEE ALSO</h2>
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt<p><em class="citetitle">RFC 1033</em>,
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt <em class="citetitle">RFC 1034</em>,
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt <em class="citetitle">RFC 1035</em>,
9e0cd8be9aa2b24fa373fe227c5eaf5641ac62f4Mark Andrews <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
9e0cd8be9aa2b24fa373fe227c5eaf5641ac62f4Mark Andrews <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
fb9cdee4af778c5e53fc9e25f15364f5bbd2dae3Mark Andrews <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
2a1860ad83294da4abe34a72bdb6f5a28b87f2efMark Andrews <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
2a1860ad83294da4abe34a72bdb6f5a28b87f2efMark Andrews <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews </p>
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews</div>
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews<div class="refsect1" lang="en">
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews<a name="id2683422"></a><h2>AUTHOR</h2>
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews<p><span class="corpauthor">Internet Systems Consortium</span>
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews </p>
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews</div>
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews</div>
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews<div class="navfooter">
c5e8808e35310eddfd99398198660a3eb37ac51eMark Andrews<hr>
c5e8808e35310eddfd99398198660a3eb37ac51eMark Andrews<table width="100%" summary="Navigation footer">
7c66fc970082f2f8b4a7ae1bbfca3531ab6798b4Mark Andrews<tr>
32f4f500a5dfa77631217a390f3cd616827cab18Mukund Sivaraman<td width="40%" align="left">
32f4f500a5dfa77631217a390f3cd616827cab18Mukund Sivaraman<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
7c66fc970082f2f8b4a7ae1bbfca3531ab6798b4Mark Andrews<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
2a80bc01530013293016172b1dcc1d12471ccf33Mark Andrews<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
2a80bc01530013293016172b1dcc1d12471ccf33Mark Andrews</td>
cc51cd2d2076e33117c60c9effcb8caccde4983bWitold Krecicki</tr>
cc51cd2d2076e33117c60c9effcb8caccde4983bWitold Krecicki<tr>
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews<td width="40%" align="left" valign="top">
2bbab60f504e4cd905080d42eae5cc8fe62599cbMark Andrews<span class="application">named-checkzone</span>�</td>
2bbab60f504e4cd905080d42eae5cc8fe62599cbMark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>
0b612b420df38f1b2f1ba19df727f77a492f08a7Mark Andrews</td>
0b612b420df38f1b2f1ba19df727f77a492f08a7Mark Andrews</tr>
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews</table>
802e0662ef6041078cb7bad4cdb197a295eab770Mark Andrews</div>
802e0662ef6041078cb7bad4cdb197a295eab770Mark Andrews<p style="text-align: center;">BIND 9.11.0pre-alpha</p>
802e0662ef6041078cb7bad4cdb197a295eab770Mark Andrews</body>
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews</html>
af9b975ccc2f0e6d82a4dfc2daa6cedfc5f4bdc2Mark Andrews