man.named.html revision ca67ebfe9eef0b8f04179f7e511a19e0337a5422
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - Permission to use, copy, modify, and distribute this software for any
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - purpose with or without fee is hereby granted, provided that the above
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - copyright notice and this permission notice appear in all copies.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - PERFORMANCE OF THIS SOFTWARE.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<!-- $Id: man.named.html,v 1.123 2009/06/17 23:12:09 tbox Exp $ -->
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="next" href="man.nsupdate.html" title="nsupdate">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<table width="100%" summary="Navigation header">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<th width="60%" align="center">Manual pages</th>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="20%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<a name="man.named"></a><div class="titlepage"></div>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p><span class="application">named</span> — Internet domain name server</p>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p><span><strong class="command">named</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is a Domain Name System (DNS) server,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews part of the BIND 9 distribution from ISC. For more
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews information on the DNS, see RFCs 1033, 1034, and 1035.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews When invoked without arguments, <span><strong class="command">named</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews read the default configuration file
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/named.conf</code>, read any initial
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews data, and listen for queries.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use IPv4 only even if the host machine is capable of IPv6.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">-4</code> and <code class="option">-6</code> are mutually
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use IPv6 only even if the host machine is capable of IPv4.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">-4</code> and <code class="option">-6</code> are mutually
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use <em class="replaceable"><code>config-file</code></em> as the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews configuration file instead of the default,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/named.conf</code>. To
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews ensure that reloading the configuration file continues
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to work after the server has changed its working
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews directory due to to a possible
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">directory</code> option in the configuration
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews file, <em class="replaceable"><code>config-file</code></em> should be
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews an absolute pathname.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Debugging traces from <span><strong class="command">named</strong></span> become
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews more verbose as the debug level increases.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Run the server in the foreground (i.e. do not daemonize).
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Run the server in the foreground and force all logging
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Turn on memory usage debugging flags. Possible flags are
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="replaceable"><code>usage</code></em>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="replaceable"><code>trace</code></em>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="replaceable"><code>record</code></em>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="replaceable"><code>size</code></em>, and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="replaceable"><code>mctx</code></em>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews These correspond to the ISC_MEM_DEBUGXXXX flags described in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename"><isc/mem.h></code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Create <em class="replaceable"><code>#cpus</code></em> worker threads
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to take advantage of multiple CPUs. If not specified,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">named</strong></span> will try to determine the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews number of CPUs present and create one thread per CPU.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews If it is unable to determine the number of CPUs, a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews single worker thread will be created.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews specified, the default is port 53.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Write memory usage statistics to <code class="filename">stdout</code> on exit.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews This option is mainly of interest to BIND 9 developers
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and may be removed or changed in a future release.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Allow <span><strong class="command">named</strong></span> to use up to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="replaceable"><code>#max-socks</code></em> sockets.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews This option should be unnecessary for the vast majority
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The use of this option could even be harmful because the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews specified value may exceed the limitation of the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews underlying system API.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews It is therefore set only when the default configuration
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews causes exhaustion of file descriptors and the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews operational environment is known to support the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews specified number of sockets.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Note also that the actual maximum number is normally a little
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews fewer than the specified value because
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">named</strong></span> reserves some file descriptors
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews for its internal use.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to <em class="replaceable"><code>directory</code></em> after
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews processing the command line arguments, but before
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews reading the configuration file.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews This option should be used in conjunction with the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">-u</code> option, as chrooting a process
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews running as root doesn't enhance security on most
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews systems; the way <code class="function">chroot(2)</code> is
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews defined allows a process with root privileges to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews escape a chroot jail.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to <em class="replaceable"><code>user</code></em> after completing
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews privileged operations, such as creating sockets that
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews listen on privileged ports.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews On Linux, <span><strong class="command">named</strong></span> uses the kernel's
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews capability mechanism to drop all root privileges
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews except the ability to <code class="function">bind(2)</code> to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews privileged port and set process resource limits.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Unfortunately, this means that the <code class="option">-u</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews option only works when <span><strong class="command">named</strong></span> is
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews later, since previous kernels did not allow privileges
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to be retained after <code class="function">setuid(2)</code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Report the version number and exit.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Report the version number and build options, and exit.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Load data from <em class="replaceable"><code>cache-file</code></em> into the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews cache of the default view.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews This option must not be used. It is only of interest
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to BIND 9 developers and may be removed or changed in a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews future release.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews In routine operation, signals should not be used to control
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the nameserver; <span><strong class="command">rndc</strong></span> should be used
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Force a reload of the server.