man.named.html revision 983df82baf1d7d0b668c98cf45928a19f175c6e7
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<!--
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - Copyright (C) 2000-2003 Internet Software Consortium.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse -
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - Permission to use, copy, modify, and/or distribute this software for any
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - purpose with or without fee is hereby granted, provided that the above
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - copyright notice and this permission notice appear in all copies.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse -
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
bc8fd1b0b1afdf89b8d28eefa8cd74e26ba97986fielding - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse - PERFORMANCE OF THIS SOFTWARE.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse-->
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<!-- $Id$ -->
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<html>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<head>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<title>named</title>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<link rel="next" href="man.named.conf.html" title="named.conf">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</head>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<div class="navheader">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<table width="100%" summary="Navigation header">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<tr>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<td width="20%" align="left">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<th width="60%" align="center">Manual pages</th>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<td width="20%" align="right">�<a accesskey="n" href="man.named.conf.html">Next</a>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</td>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</tr>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</table>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<hr>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</div>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<div class="refentry" lang="en">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<a name="man.named"></a><div class="titlepage"></div>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<div class="refnamediv">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<h2>Name</h2>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<p><span class="application">named</span> &#8212; Internet domain name server</p>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</div>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<div class="refsynopsisdiv">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<h2>Synopsis</h2>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-L <em class="replaceable"><code>logfile</code></em></code>] [<code class="option">-M <em class="replaceable"><code>option</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>lock-file</code></em></code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse</div>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<div class="refsect1" lang="en">
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<a name="id2648153"></a><h2>DESCRIPTION</h2>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse<p><span><strong class="command">named</strong></span>
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse is a Domain Name System (DNS) server,
d86ef5503dcbc38e87c0e03cd3e1f16458cb6323rse part of the BIND 9 distribution from ISC. For more
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse information on the DNS, see RFCs 1033, 1034, and 1035.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p>
6ace32dacb8313226eb9019275d0e4fa45a15148rse<p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse When invoked without arguments, <span><strong class="command">named</strong></span>
a943533fd4d91d114af622731a405407990c4fb1rse will
a943533fd4d91d114af622731a405407990c4fb1rse read the default configuration file
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse <code class="filename">/etc/named.conf</code>, read any initial
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse data, and listen for queries.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse</div>
7933d4a963def02417113b6798d87a36395053b0rse<div class="refsect1" lang="en">
7933d4a963def02417113b6798d87a36395053b0rse<a name="id2648184"></a><h2>OPTIONS</h2>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<div class="variablelist"><dl>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dt><span class="term">-4</span></dt>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Use IPv4 only even if the host machine is capable of IPv6.
71c00f988beb28388702e14cb7fe06f08bd792bbdougm <code class="option">-4</code> and <code class="option">-6</code> are mutually
71c00f988beb28388702e14cb7fe06f08bd792bbdougm exclusive.
71c00f988beb28388702e14cb7fe06f08bd792bbdougm </p></dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-6</span></dt>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dd><p>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm Use IPv6 only even if the host machine is capable of IPv4.
71c00f988beb28388702e14cb7fe06f08bd792bbdougm <code class="option">-4</code> and <code class="option">-6</code> are mutually
7933d4a963def02417113b6798d87a36395053b0rse exclusive.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
d1bb6e2664788e0437acc18e877562c9a796d7cerse<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dd><p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse Use <em class="replaceable"><code>config-file</code></em> as the
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse configuration file instead of the default,
7933d4a963def02417113b6798d87a36395053b0rse <code class="filename">/etc/named.conf</code>. To
7933d4a963def02417113b6798d87a36395053b0rse ensure that reloading the configuration file continues
7933d4a963def02417113b6798d87a36395053b0rse to work after the server has changed its working
7933d4a963def02417113b6798d87a36395053b0rse directory due to to a possible
7933d4a963def02417113b6798d87a36395053b0rse <code class="option">directory</code> option in the configuration
71c00f988beb28388702e14cb7fe06f08bd792bbdougm file, <em class="replaceable"><code>config-file</code></em> should be
71c00f988beb28388702e14cb7fe06f08bd792bbdougm an absolute pathname.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
7933d4a963def02417113b6798d87a36395053b0rse Debugging traces from <span><strong class="command">named</strong></span> become
7933d4a963def02417113b6798d87a36395053b0rse more verbose as the debug level increases.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dt><span class="term">-D <em class="replaceable"><code>string</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Specifies a string that is used to identify a instance of
7933d4a963def02417113b6798d87a36395053b0rse <span><strong class="command">named</strong></span> in a process listing. The contents
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse of <em class="replaceable"><code>string</code></em> are
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse not examined.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p></dd>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd>
7933d4a963def02417113b6798d87a36395053b0rse<p>
7933d4a963def02417113b6798d87a36395053b0rse When applicable, specifies the hardware to use for
7933d4a963def02417113b6798d87a36395053b0rse cryptographic operations, such as a secure key store used
7933d4a963def02417113b6798d87a36395053b0rse for signing.
7933d4a963def02417113b6798d87a36395053b0rse </p>
7933d4a963def02417113b6798d87a36395053b0rse<p>
7933d4a963def02417113b6798d87a36395053b0rse When BIND is built with OpenSSL PKCS#11 support, this defaults
7933d4a963def02417113b6798d87a36395053b0rse to the string "pkcs11", which identifies an OpenSSL engine
7933d4a963def02417113b6798d87a36395053b0rse that can drive a cryptographic accelerator or hardware service
7933d4a963def02417113b6798d87a36395053b0rse module. When BIND is built with native PKCS#11 cryptography
7933d4a963def02417113b6798d87a36395053b0rse (--enable-native-pkcs11), it defaults to the path of the PKCS#11
7933d4a963def02417113b6798d87a36395053b0rse provider library specified via "--with-pkcs11".
7933d4a963def02417113b6798d87a36395053b0rse </p>
7933d4a963def02417113b6798d87a36395053b0rse</dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-f</span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Run the server in the foreground (i.e. do not daemonize).
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-g</span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Run the server in the foreground and force all logging
7933d4a963def02417113b6798d87a36395053b0rse to <code class="filename">stderr</code>.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-L <em class="replaceable"><code>logfile</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Log to the file <code class="option">logfile</code> by default
7933d4a963def02417113b6798d87a36395053b0rse instead of the system log.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-M <em class="replaceable"><code>option</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Sets the default memory context options. Currently
7933d4a963def02417113b6798d87a36395053b0rse the only supported option is
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>external</code></em>,
7933d4a963def02417113b6798d87a36395053b0rse which causes the internal memory manager to be bypassed
7933d4a963def02417113b6798d87a36395053b0rse in favor of system-provided memory allocation functions.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
7933d4a963def02417113b6798d87a36395053b0rse<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd><p>
7933d4a963def02417113b6798d87a36395053b0rse Turn on memory usage debugging flags. Possible flags are
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>usage</code></em>,
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>trace</code></em>,
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>record</code></em>,
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>size</code></em>, and
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>mctx</code></em>.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse These correspond to the ISC_MEM_DEBUGXXXX flags described in
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse <code class="filename">&lt;isc/mem.h&gt;</code>.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p></dd>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm<dd><p>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm Create <em class="replaceable"><code>#cpus</code></em> worker threads
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm to take advantage of multiple CPUs. If not specified,
7933d4a963def02417113b6798d87a36395053b0rse <span><strong class="command">named</strong></span> will try to determine the
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse number of CPUs present and create one thread per CPU.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse If it is unable to determine the number of CPUs, a
7933d4a963def02417113b6798d87a36395053b0rse single worker thread will be created.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p></dd>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
8fdc55d1624c714391fe1f93ebafe98ace427f4adougm<dd><p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse specified, the default is port 53.
7933d4a963def02417113b6798d87a36395053b0rse </p></dd>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dt><span class="term">-s</span></dt>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<dd>
7933d4a963def02417113b6798d87a36395053b0rse<p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse Write memory usage statistics to <code class="filename">stdout</code> on exit.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p>
7933d4a963def02417113b6798d87a36395053b0rse<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<h3 class="title">Note</h3>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<p>
a72de14bfdbf0be9d935be9bdc2df631ca5e032bdougm This option is mainly of interest to BIND 9 developers
a72de14bfdbf0be9d935be9bdc2df631ca5e032bdougm and may be removed or changed in a future release.
a72de14bfdbf0be9d935be9bdc2df631ca5e032bdougm </p>
a72de14bfdbf0be9d935be9bdc2df631ca5e032bdougm</div>
a72de14bfdbf0be9d935be9bdc2df631ca5e032bdougm</dd>
a72de14bfdbf0be9d935be9bdc2df631ca5e032bdougm<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
7933d4a963def02417113b6798d87a36395053b0rse<dd>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse Allow <span><strong class="command">named</strong></span> to use up to
7933d4a963def02417113b6798d87a36395053b0rse <em class="replaceable"><code>#max-socks</code></em> sockets.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse The default value is 4096 on systems built with default
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse configuration options, and 21000 on systems built with
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse "configure --with-tuning=large".
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse </p>
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse<h3 class="title">Warning</h3>
7933d4a963def02417113b6798d87a36395053b0rse<p>
0839d91ee551a0e19ea9577bb00976b97308dfddmartin This option should be unnecessary for the vast majority
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse of users.
7933d4a963def02417113b6798d87a36395053b0rse The use of this option could even be harmful because the
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse specified value may exceed the limitation of the
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse underlying system API.
7933d4a963def02417113b6798d87a36395053b0rse It is therefore set only when the default configuration
0839d91ee551a0e19ea9577bb00976b97308dfddmartin causes exhaustion of file descriptors and the
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse operational environment is known to support the
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse specified number of sockets.
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse Note also that the actual maximum number is normally a little
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse fewer than the specified value because
cc003103e52ff9d5fe9bed567ef9438613ab4fbfrse <span><strong class="command">named</strong></span> reserves some file descriptors
7933d4a963def02417113b6798d87a36395053b0rse for its internal use.
7933d4a963def02417113b6798d87a36395053b0rse </p>
7933d4a963def02417113b6798d87a36395053b0rse</div>
d1bb6e2664788e0437acc18e877562c9a796d7cerse</dd>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dd>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<p>Chroot
7933d4a963def02417113b6798d87a36395053b0rse to <em class="replaceable"><code>directory</code></em> after
af5dd1c93d2185f7e37f8783c593b64fd35ea8a6wrowe processing the command line arguments, but before
af5dd1c93d2185f7e37f8783c593b64fd35ea8a6wrowe reading the configuration file.
af5dd1c93d2185f7e37f8783c593b64fd35ea8a6wrowe </p>
af5dd1c93d2185f7e37f8783c593b64fd35ea8a6wrowe<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
b79b480213d7452db127eec054e52eb2b4fa6153wrowe<h3 class="title">Warning</h3>
af5dd1c93d2185f7e37f8783c593b64fd35ea8a6wrowe<p>
417f504d4d11631c0d062be85347f82a26c88677aaron This option should be used in conjunction with the
417f504d4d11631c0d062be85347f82a26c88677aaron <code class="option">-u</code> option, as chrooting a process
7933d4a963def02417113b6798d87a36395053b0rse running as root doesn't enhance security on most
7933d4a963def02417113b6798d87a36395053b0rse systems; the way <code class="function">chroot(2)</code> is
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm defined allows a process with root privileges to
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm escape a chroot jail.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm </p>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm</div>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm</dd>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm<dd><p>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm Use <em class="replaceable"><code>#listeners</code></em>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm worker threads to listen for incoming UDP packets on each
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm address. If not specified, <span><strong class="command">named</strong></span> will
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm calculate a default value based on the number of detected
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm detected CPUs divided by 2 for values higher than 4.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm If <code class="option">-n</code> has been set to a higher value than
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm the number of detected CPUs, then <code class="option">-U</code> may
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm be increased as high as that value, but no higher.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm </p></dd>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm<dd>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm<p>Setuid
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm to <em class="replaceable"><code>user</code></em> after completing
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm privileged operations, such as creating sockets that
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm listen on privileged ports.
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm </p>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm<h3 class="title">Note</h3>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm<p>
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm On Linux, <span><strong class="command">named</strong></span> uses the kernel's
cde1010d880fb6230f80c9d697842ea0b1cb79c7dougm capability mechanism to drop all root privileges
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm except the ability to <code class="function">bind(2)</code> to
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm a
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm privileged port and set process resource limits.
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm Unfortunately, this means that the <code class="option">-u</code>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm option only works when <span><strong class="command">named</strong></span> is
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm run
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm later, since previous kernels did not allow privileges
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm to be retained after <code class="function">setuid(2)</code>.
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm </p>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm</div>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm</dd>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<dt><span class="term">-v</span></dt>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<dd><p>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm Report the version number and exit.
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm </p></dd>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<dt><span class="term">-V</span></dt>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<dd><p>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm Report the version number and build options, and exit.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm </p></dd>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm<dt><span class="term">-X <em class="replaceable"><code>lock-file</code></em></span></dt>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm<dd><p>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm Acquire a lock on the specified file at runtime; this
affe4f2ea22fca7ce90166044af0c5fdba608ec3rbb helps to prevent duplicate <span><strong class="command">named</strong></span> instances
7933d4a963def02417113b6798d87a36395053b0rse from running simultaneously.
a943533fd4d91d114af622731a405407990c4fb1rse Use of this option overrides the <span><strong class="command">lock-file</strong></span>
a943533fd4d91d114af622731a405407990c4fb1rse option in <code class="filename">named.conf</code>.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm If set to <code class="literal">none</code>, the lock file check
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm is disabled.
a943533fd4d91d114af622731a405407990c4fb1rse </p></dd>
a943533fd4d91d114af622731a405407990c4fb1rse<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
a943533fd4d91d114af622731a405407990c4fb1rse<dd>
a943533fd4d91d114af622731a405407990c4fb1rse<p>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm Load data from <em class="replaceable"><code>cache-file</code></em> into the
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm cache of the default view.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm </p>
a943533fd4d91d114af622731a405407990c4fb1rse<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<h3 class="title">Warning</h3>
a943533fd4d91d114af622731a405407990c4fb1rse<p>
2e79bb3add3d91814269824f948945d45b2b3260dougm This option must not be used. It is only of interest
2e79bb3add3d91814269824f948945d45b2b3260dougm to BIND 9 developers and may be removed or changed in a
2e79bb3add3d91814269824f948945d45b2b3260dougm future release.
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm </p>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm</div>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm</dd>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm</dl></div>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm</div>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<div class="refsect1" lang="en">
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<a name="id2683084"></a><h2>SIGNALS</h2>
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm<p>
93e04e27f5508c78897599cc15abd27ffbbd5424dougm In routine operation, signals should not be used to control
2e79bb3add3d91814269824f948945d45b2b3260dougm the nameserver; <span><strong class="command">rndc</strong></span> should be used
a943533fd4d91d114af622731a405407990c4fb1rse instead.
a943533fd4d91d114af622731a405407990c4fb1rse </p>
a943533fd4d91d114af622731a405407990c4fb1rse<div class="variablelist"><dl>
a943533fd4d91d114af622731a405407990c4fb1rse<dt><span class="term">SIGHUP</span></dt>
72d7c23997c59e4195fe3ebc8ef48895773be0bcdougm<dd><p>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm Force a reload of the server.
71c00f988beb28388702e14cb7fe06f08bd792bbdougm </p></dd>
93e04e27f5508c78897599cc15abd27ffbbd5424dougm<dt><span class="term">SIGINT, SIGTERM</span></dt>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dd><p>
a943533fd4d91d114af622731a405407990c4fb1rse Shut down the server.
a943533fd4d91d114af622731a405407990c4fb1rse </p></dd>
a943533fd4d91d114af622731a405407990c4fb1rse</dl></div>
a943533fd4d91d114af622731a405407990c4fb1rse<p>
a943533fd4d91d114af622731a405407990c4fb1rse The result of sending any other signals to the server is undefined.
a943533fd4d91d114af622731a405407990c4fb1rse </p>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm</div>
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm<div class="refsect1" lang="en">
a943533fd4d91d114af622731a405407990c4fb1rse<a name="id2683134"></a><h2>CONFIGURATION</h2>
a943533fd4d91d114af622731a405407990c4fb1rse<p>
a943533fd4d91d114af622731a405407990c4fb1rse The <span><strong class="command">named</strong></span> configuration file is too complex
a943533fd4d91d114af622731a405407990c4fb1rse to describe in detail here. A complete description is provided
a943533fd4d91d114af622731a405407990c4fb1rse in the
9cb81d96f6b556cec1aa456191f43f7932aabaaedougm <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
a943533fd4d91d114af622731a405407990c4fb1rse </p>
a943533fd4d91d114af622731a405407990c4fb1rse<p>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
a943533fd4d91d114af622731a405407990c4fb1rse (file creation mode mask) from the parent process. If files
71c00f988beb28388702e14cb7fe06f08bd792bbdougm created by <span><strong class="command">named</strong></span>, such as journal files,
a943533fd4d91d114af622731a405407990c4fb1rse need to have custom permissions, the <code class="function">umask</code>
a943533fd4d91d114af622731a405407990c4fb1rse should be set explicitly in the script used to start the
6d7efb8c76b56eaebd6032096771c9e44b247f3fdougm <span><strong class="command">named</strong></span> process.
931ac1238a9dc3b8e46725cfef16c852e577e588dougm </p>
93e04e27f5508c78897599cc15abd27ffbbd5424dougm</div>
93e04e27f5508c78897599cc15abd27ffbbd5424dougm<div class="refsect1" lang="en">
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<a name="id2683252"></a><h2>FILES</h2>
a943533fd4d91d114af622731a405407990c4fb1rse<div class="variablelist"><dl>
93e04e27f5508c78897599cc15abd27ffbbd5424dougm<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<dd><p>
a943533fd4d91d114af622731a405407990c4fb1rse The default configuration file.
71c00f988beb28388702e14cb7fe06f08bd792bbdougm </p></dd>
a943533fd4d91d114af622731a405407990c4fb1rse<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
a943533fd4d91d114af622731a405407990c4fb1rse<dd><p>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm The default process-id file.
a943533fd4d91d114af622731a405407990c4fb1rse </p></dd>
d28d7091912b3d911bdbe18df2d37d315681054bdougm</dl></div>
a943533fd4d91d114af622731a405407990c4fb1rse</div>
931b4fd1cc9dd3da096c45f4bf7ddcc14e0985c1dougm<div class="refsect1" lang="en">
a943533fd4d91d114af622731a405407990c4fb1rse<a name="id2683296"></a><h2>SEE ALSO</h2>
a943533fd4d91d114af622731a405407990c4fb1rse<p><em class="citetitle">RFC 1033</em>,
a943533fd4d91d114af622731a405407990c4fb1rse <em class="citetitle">RFC 1034</em>,
a943533fd4d91d114af622731a405407990c4fb1rse <em class="citetitle">RFC 1035</em>,
a943533fd4d91d114af622731a405407990c4fb1rse <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
a943533fd4d91d114af622731a405407990c4fb1rse <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
c947acd3d1a604a0acad6a53ef685312d4410fc5dougm <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
a943533fd4d91d114af622731a405407990c4fb1rse <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
a943533fd4d91d114af622731a405407990c4fb1rse <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
a943533fd4d91d114af622731a405407990c4fb1rse <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
a943533fd4d91d114af622731a405407990c4fb1rse </p>
a943533fd4d91d114af622731a405407990c4fb1rse</div>
7933d4a963def02417113b6798d87a36395053b0rse<div class="refsect1" lang="en">
7933d4a963def02417113b6798d87a36395053b0rse<a name="id2683366"></a><h2>AUTHOR</h2>
ae7ce6cd81b337be9b24aa9ba75b149f14ec9212dougm<p><span class="corpauthor">Internet Systems Consortium</span>
caaa9b08da1d1cc30fe9160109b883561e574932dougm </p>
931b4fd1cc9dd3da096c45f4bf7ddcc14e0985c1dougm</div>
caaa9b08da1d1cc30fe9160109b883561e574932dougm</div>
caaa9b08da1d1cc30fe9160109b883561e574932dougm<div class="navfooter">
caaa9b08da1d1cc30fe9160109b883561e574932dougm<hr>
caaa9b08da1d1cc30fe9160109b883561e574932dougm<table width="100%" summary="Navigation footer">
caaa9b08da1d1cc30fe9160109b883561e574932dougm<tr>
caaa9b08da1d1cc30fe9160109b883561e574932dougm<td width="40%" align="left">
caaa9b08da1d1cc30fe9160109b883561e574932dougm<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
caaa9b08da1d1cc30fe9160109b883561e574932dougm<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
ae7ce6cd81b337be9b24aa9ba75b149f14ec9212dougm<td width="40%" align="right">�<a accesskey="n" href="man.named.conf.html">Next</a>
ae7ce6cd81b337be9b24aa9ba75b149f14ec9212dougm</td>
ae7ce6cd81b337be9b24aa9ba75b149f14ec9212dougm</tr>
71c00f988beb28388702e14cb7fe06f08bd792bbdougm<tr>
ae7ce6cd81b337be9b24aa9ba75b149f14ec9212dougm<td width="40%" align="left" valign="top">
931b4fd1cc9dd3da096c45f4bf7ddcc14e0985c1dougm<span class="application">named-checkzone</span>�</td>
caaa9b08da1d1cc30fe9160109b883561e574932dougm<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
caaa9b08da1d1cc30fe9160109b883561e574932dougm<td width="40%" align="right" valign="top">�<code class="filename">named.conf</code>
caaa9b08da1d1cc30fe9160109b883561e574932dougm</td>
caaa9b08da1d1cc30fe9160109b883561e574932dougm</tr>
caaa9b08da1d1cc30fe9160109b883561e574932dougm</table>
a943533fd4d91d114af622731a405407990c4fb1rse</div>
a943533fd4d91d114af622731a405407990c4fb1rse<p style="text-align: center;">BIND 9.11.0pre-alpha</p>
a943533fd4d91d114af622731a405407990c4fb1rse</body>
a943533fd4d91d114af622731a405407990c4fb1rse</html>
a943533fd4d91d114af622731a405407990c4fb1rse