man.named.html revision de283bda6a902c2102a795192eeab3a769001c7d
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<!--
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - Copyright (C) 2000-2003 Internet Software Consortium.
3e14f97f673e8a630f076077de35afdd43dc1587Roger A. Faulkner -
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - Permission to use, copy, modify, and/or distribute this software for any
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - purpose with or without fee is hereby granted, provided that the above
7c2fbfb345896881c631598ee3852ce9ce33fb07April Chin - copyright notice and this permission notice appear in all copies.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin -
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin - PERFORMANCE OF THIS SOFTWARE.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin-->
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<!-- $Id$ -->
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<html>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<head>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<title>named</title>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</head>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="navheader">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<table width="100%" summary="Navigation header">
3e14f97f673e8a630f076077de35afdd43dc1587Roger A. Faulkner<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="20%" align="left">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<th width="60%" align="center">Manual pages</th>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</table>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<hr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="refentry" lang="en">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a name="man.named"></a><div class="titlepage"></div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="refnamediv">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<h2>Name</h2>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p><span class="application">named</span> &#8212; Internet domain name server</p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz</div>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<div class="refsynopsisdiv">
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<h2>Synopsis</h2>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-L <em class="replaceable"><code>logfile</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>lock-file</code></em></code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="refsect1" lang="en">
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<a name="id2653505"></a><h2>DESCRIPTION</h2>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<p><span><strong class="command">named</strong></span>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin is a Domain Name System (DNS) server,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin part of the BIND 9 distribution from ISC. For more
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz information on the DNS, see RFCs 1033, 1034, and 1035.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz When invoked without arguments, <span><strong class="command">named</strong></span>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin will
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin read the default configuration file
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <code class="filename">/etc/named.conf</code>, read any initial
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin data, and listen for queries.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="refsect1" lang="en">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a name="id2653536"></a><h2>OPTIONS</h2>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="variablelist"><dl>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-4</span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Use IPv4 only even if the host machine is capable of IPv6.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <code class="option">-4</code> and <code class="option">-6</code> are mutually
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin exclusive.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-6</span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Use IPv6 only even if the host machine is capable of IPv4.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <code class="option">-4</code> and <code class="option">-6</code> are mutually
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin exclusive.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Use <em class="replaceable"><code>config-file</code></em> as the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin configuration file instead of the default,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <code class="filename">/etc/named.conf</code>. To
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin ensure that reloading the configuration file continues
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to work after the server has changed its working
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin directory due to to a possible
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz <code class="option">directory</code> option in the configuration
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin file, <em class="replaceable"><code>config-file</code></em> should be
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin an absolute pathname.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Debugging traces from <span><strong class="command">named</strong></span> become
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin more verbose as the debug level increases.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-D <em class="replaceable"><code>string</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Specifies a string that is used to identify a instance of
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span><strong class="command">named</strong></span> in a process listing. The contents
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin of <em class="replaceable"><code>string</code></em> are
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin not examined.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin When applicable, specifies the hardware to use for
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin cryptographic operations, such as a secure key store used
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz for signing.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz When BIND is built with OpenSSL PKCS#11 support, this defaults
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz to the string "pkcs11", which identifies an OpenSSL engine
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz that can drive a cryptographic accelerator or hardware service
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz module. When BIND is built with native PKCS#11 cryptography
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz (--enable-native-pkcs11), it defaults to the path of the PKCS#11
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin provider library specified via "--with-pkcs11".
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</dd>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dt><span class="term">-f</span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Run the server in the foreground (i.e. do not daemonize).
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-g</span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Run the server in the foreground and force all logging
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to <code class="filename">stderr</code>.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-L <em class="replaceable"><code>logfile</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Log to the file <code class="option">logfile</code> by default
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin instead of the system log.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
3e14f97f673e8a630f076077de35afdd43dc1587Roger A. Faulkner<dd><p>
3e14f97f673e8a630f076077de35afdd43dc1587Roger A. Faulkner Turn on memory usage debugging flags. Possible flags are
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="replaceable"><code>usage</code></em>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="replaceable"><code>trace</code></em>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="replaceable"><code>record</code></em>,
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz <em class="replaceable"><code>size</code></em>, and
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="replaceable"><code>mctx</code></em>.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin These correspond to the ISC_MEM_DEBUGXXXX flags described in
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz <code class="filename">&lt;isc/mem.h&gt;</code>.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Create <em class="replaceable"><code>#cpus</code></em> worker threads
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to take advantage of multiple CPUs. If not specified,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span><strong class="command">named</strong></span> will try to determine the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin number of CPUs present and create one thread per CPU.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin If it is unable to determine the number of CPUs, a
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin single worker thread will be created.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin specified, the default is port 53.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-s</span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Write memory usage statistics to <code class="filename">stdout</code> on exit.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<h3 class="title">Note</h3>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin This option is mainly of interest to BIND 9 developers
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin and may be removed or changed in a future release.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</dd>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Allow <span><strong class="command">named</strong></span> to use up to
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="replaceable"><code>#max-socks</code></em> sockets.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin The default value is 4096 on systems built with default
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin configuration options, and 21000 on systems built with
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin "configure --with-tuning=large".
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<h3 class="title">Warning</h3>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin This option should be unnecessary for the vast majority
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin of users.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin The use of this option could even be harmful because the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin specified value may exceed the limitation of the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin underlying system API.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin It is therefore set only when the default configuration
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin causes exhaustion of file descriptors and the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin operational environment is known to support the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin specified number of sockets.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Note also that the actual maximum number is normally a little
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin fewer than the specified value because
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span><strong class="command">named</strong></span> reserves some file descriptors
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin for its internal use.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>Chroot
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to <em class="replaceable"><code>directory</code></em> after
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin processing the command line arguments, but before
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin reading the configuration file.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<h3 class="title">Warning</h3>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin This option should be used in conjunction with the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <code class="option">-u</code> option, as chrooting a process
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin running as root doesn't enhance security on most
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin systems; the way <code class="function">chroot(2)</code> is
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin defined allows a process with root privileges to
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin escape a chroot jail.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Use <em class="replaceable"><code>#listeners</code></em>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin worker threads to listen for incoming UDP packets on each
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin address. If not specified, <span><strong class="command">named</strong></span> will
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin calculate a default value based on the number of detected
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin detected CPUs divided by 2 for values higher than 4.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin If <code class="option">-n</code> has been set to a higher value than
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin the number of detected CPUs, then <code class="option">-U</code> may
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin be increased as high as that value, but no higher.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>Setuid
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to <em class="replaceable"><code>user</code></em> after completing
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin privileged operations, such as creating sockets that
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin listen on privileged ports.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<h3 class="title">Note</h3>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin On Linux, <span><strong class="command">named</strong></span> uses the kernel's
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin capability mechanism to drop all root privileges
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin except the ability to <code class="function">bind(2)</code> to
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin a
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin privileged port and set process resource limits.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Unfortunately, this means that the <code class="option">-u</code>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin option only works when <span><strong class="command">named</strong></span> is
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin run
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin later, since previous kernels did not allow privileges
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to be retained after <code class="function">setuid(2)</code>.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz</dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-v</span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz Report the version number and exit.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-V</span></dt>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Report the version number and build options, and exit.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-X <em class="replaceable"><code>lock-file</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Acquire a lock on the specified file at runtime; this
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin helps to prevent duplicate <span><strong class="command">named</strong></span> instances
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin from running simultaneously. If not specified via this option,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin the default lockfile is <code class="filename">/var/run/named/named.lock</code>.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin Load data from <em class="replaceable"><code>cache-file</code></em> into the
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin cache of the default view.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<h3 class="title">Warning</h3>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin This option must not be used. It is only of interest
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin to BIND 9 developers and may be removed or changed in a
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin future release.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz</dd>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz</dl></div>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz</div>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<div class="refsect1" lang="en">
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<a name="id2687787"></a><h2>SIGNALS</h2>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz In routine operation, signals should not be used to control
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz the nameserver; <span><strong class="command">rndc</strong></span> should be used
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz instead.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<div class="variablelist"><dl>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dt><span class="term">SIGHUP</span></dt>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dd><p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz Force a reload of the server.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p></dd>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dt><span class="term">SIGINT, SIGTERM</span></dt>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<dd><p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz Shut down the server.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</dl></div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin The result of sending any other signals to the server is undefined.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz</div>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<div class="refsect1" lang="en">
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<a name="id2687906"></a><h2>CONFIGURATION</h2>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz The <span><strong class="command">named</strong></span> configuration file is too complex
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz to describe in detail here. A complete description is provided
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz in the
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<p>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz (file creation mode mask) from the parent process. If files
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz created by <span><strong class="command">named</strong></span>, such as journal files,
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz need to have custom permissions, the <code class="function">umask</code>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz should be set explicitly in the script used to start the
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz <span><strong class="command">named</strong></span> process.
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
3e14f97f673e8a630f076077de35afdd43dc1587Roger A. Faulkner<div class="refsect1" lang="en">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a name="id2687955"></a><h2>FILES</h2>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="variablelist"><dl>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin The default configuration file.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<dd><p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin The default process-id file.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p></dd>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</dl></div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="refsect1" lang="en">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a name="id2687998"></a><h2>SEE ALSO</h2>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p><em class="citetitle">RFC 1033</em>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="citetitle">RFC 1034</em>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="citetitle">RFC 1035</em>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="refsect1" lang="en">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a name="id2688069"></a><h2>AUTHOR</h2>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p><span class="corpauthor">Internet Systems Consortium</span>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin </p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<div class="navfooter">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<hr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<table width="100%" summary="Navigation footer">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="40%" align="left">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="40%" align="left" valign="top">
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<span class="application">named-checkzone</span>�</td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
34f9b3eef6fdadbda0a846aa4d68691ac40eace5Roland Mainz<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</td>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</tr>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</table>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</div>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin<p style="text-align: center;">BIND 9.11.0pre-alpha</p>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</body>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin</html>
da2e3ebdc1edfbc5028edf1354e7dd2fa69a7968chin