man.named.html revision e21a6f5ec65fad1c18f6723f5495e55bcd15a53d
7968d3a131e5a684ec1ff0c6d88aae638549153dChristian Maeder<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
306763c67bb99228487345b32ab8c5c6cd41f23cChristian Maeder<!--
e6d40133bc9f858308654afb1262b8b483ec5922Till Mossakowski - Copyright (C) 2000-2015 Internet Systems Consortium, Inc. ("ISC")
7968d3a131e5a684ec1ff0c6d88aae638549153dChristian Maeder -
97018cf5fa25b494adffd7e9b4e87320dae6bf47Christian Maeder - This Source Code Form is subject to the terms of the Mozilla Public
2eeec5240b424984e3ee26296da1eeab6c6d739eChristian Maeder - License, v. 2.0. If a copy of the MPL was not distributed with this
306763c67bb99228487345b32ab8c5c6cd41f23cChristian Maeder - file, You can obtain one at http://mozilla.org/MPL/2.0/.
306763c67bb99228487345b32ab8c5c6cd41f23cChristian Maeder-->
95c3e5d11dcee331dc3876a9bf0c1d6daa38e2caChristian Maeder<html lang="en">
e6d40133bc9f858308654afb1262b8b483ec5922Till Mossakowski<head>
679d3f541f7a9ede4079e045f7758873bb901872Till Mossakowski<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
679d3f541f7a9ede4079e045f7758873bb901872Till Mossakowski<title>named</title>
306763c67bb99228487345b32ab8c5c6cd41f23cChristian Maeder<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
306763c67bb99228487345b32ab8c5c6cd41f23cChristian Maeder<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
4c8d3c5a9e938633f6147b5a595b9b93bfca99e6Christian Maeder<link rel="prev" href="man.lwresd.html" title="lwresd">
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<link rel="next" href="man.named.conf.html" title="named.conf">
0fe1b901cec27c06b8aad7548f56a7cab4dee6a4Till Mossakowski</head>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f69658e57cba7ecb37c0d84181f4c563215c2534Till Mossakowski<div class="navheader">
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder<table width="100%" summary="Navigation header">
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder<tr>
d420c2a27c4dfa0a9c8031449db2e1a89ad2cc3aChristian Maeder<td width="20%" align="left">
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder<a accesskey="p" href="man.lwresd.html">Prev</a>�</td>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder<th width="60%" align="center">Manual pages</th>
1842453990fed8a1bd7a5ac792d7982c1d2bfcd5Christian Maeder<td width="20%" align="right">�<a accesskey="n" href="man.named.conf.html">Next</a>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder</td>
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder</tr>
e182d0ec56025d97d74829cac75ee31eec12b093Maciek Makowski</table>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder<hr>
9603ad7198b72e812688ad7970e4eac4b553837aKlaus Luettich</div>
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder<div class="refentry">
58b671de3fe578346fef9642ffa3c5a0a0edb3cbTill Mossakowski<a name="man.named"></a><div class="titlepage"></div>
56cd0da55d058b262b1626ddcd78db6bd9a90551Christian Maeder<div class="refnamediv">
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder<h2>Name</h2>
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder<p><span class="application">named</span> &#8212; Internet domain name server</p>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder</div>
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder<div class="refsynopsisdiv">
ba904a15082557e939db689fcfba0c68c9a4f740Christian Maeder<h2>Synopsis</h2>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-L <em class="replaceable"><code>logfile</code></em></code>] [<code class="option">-M <em class="replaceable"><code>option</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>lock-file</code></em></code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
43b4c41fbb07705c9df321221ab9cb9832460407Christian Maeder</div>
43b4c41fbb07705c9df321221ab9cb9832460407Christian Maeder<div class="refsection">
4c8d3c5a9e938633f6147b5a595b9b93bfca99e6Christian Maeder<a name="id-1.14.19.7"></a><h2>DESCRIPTION</h2>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder<p><span class="command"><strong>named</strong></span>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder is a Domain Name System (DNS) server,
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder part of the BIND 9 distribution from ISC. For more
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder information on the DNS, see RFCs 1033, 1034, and 1035.
b9804822fb178b0fc27ce967a6a8cedc42c5bf90Christian Maeder </p>
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder<p>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder When invoked without arguments, <span class="command"><strong>named</strong></span>
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder will
697e63e30aa3c309a1ef1f9357745111f8dfc5a9Christian Maeder read the default configuration file
c4040537e6f2153af475dd8b07260a1ee9a56ac0Christian Maeder <code class="filename">/etc/named.conf</code>, read any initial
c4040537e6f2153af475dd8b07260a1ee9a56ac0Christian Maeder data, and listen for queries.
b0294d73dcefc502ddaa13e18b46103a5916971fTill Mossakowski </p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder</div>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<div class="refsection">
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<a name="id-1.14.19.8"></a><h2>OPTIONS</h2>
1b05bdb88b90d3c947351f262d7ae7d68f0a4a6fTill Mossakowski<div class="variablelist"><dl class="variablelist">
1b05bdb88b90d3c947351f262d7ae7d68f0a4a6fTill Mossakowski<dt><span class="term">-4</span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder Use IPv4 only even if the host machine is capable of IPv6.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <code class="option">-4</code> and <code class="option">-6</code> are mutually
1e3950d5c1f0e041dd7677856e43f07796567d5bChristian Maeder exclusive.
21dae7237ac384abdb94a81e00b3f099873ec623Till Mossakowski </p></dd>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dt><span class="term">-6</span></dt>
3bcd9d942601d59dd55a6069d8b2d1c33d7ced0eChristian Maeder<dd><p>
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder Use IPv6 only even if the host machine is capable of IPv4.
a1c6679d00e15a949730ab640159e0adc5b0e3e7Christian Maeder <code class="option">-4</code> and <code class="option">-6</code> are mutually
2604ffeb18ba727a1c9a683f86629c4ce01b06acChristian Maeder exclusive.
dc8100ead1e97ea34c9ff3fe4af14d37510bf8aeChristian Maeder </p></dd>
4fc3dccf009f8ad9522960e54ab7a5c3d601e342Klaus Luettich<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
dc8100ead1e97ea34c9ff3fe4af14d37510bf8aeChristian Maeder<dd><p>
1e3950d5c1f0e041dd7677856e43f07796567d5bChristian Maeder Use <em class="replaceable"><code>config-file</code></em> as the
4fc3dccf009f8ad9522960e54ab7a5c3d601e342Klaus Luettich configuration file instead of the default,
4fc3dccf009f8ad9522960e54ab7a5c3d601e342Klaus Luettich <code class="filename">/etc/named.conf</code>. To
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder ensure that reloading the configuration file continues
4fc3dccf009f8ad9522960e54ab7a5c3d601e342Klaus Luettich to work after the server has changed its working
4fc3dccf009f8ad9522960e54ab7a5c3d601e342Klaus Luettich directory due to to a possible
4fc3dccf009f8ad9522960e54ab7a5c3d601e342Klaus Luettich <code class="option">directory</code> option in the configuration
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder file, <em class="replaceable"><code>config-file</code></em> should be
f0e85ee7e4accfc01f46aa0363acc59fcd248e8aTill Mossakowski an absolute pathname.
f0e85ee7e4accfc01f46aa0363acc59fcd248e8aTill Mossakowski </p></dd>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
c4040537e6f2153af475dd8b07260a1ee9a56ac0Christian Maeder Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder Debugging traces from <span class="command"><strong>named</strong></span> become
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder more verbose as the debug level increases.
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder </p></dd>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder<dt><span class="term">-D <em class="replaceable"><code>string</code></em></span></dt>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder<dd><p>
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder Specifies a string that is used to identify a instance of
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder <span class="command"><strong>named</strong></span> in a process listing. The contents
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder of <em class="replaceable"><code>string</code></em> are
a3a7d8b3cdf05c8040c62dbcf9a15dc5042cd721Christian Maeder not examined.
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder </p></dd>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
e97bcfa4f74907e1a5ccfc3bc1509d1849cda603Christian Maeder<dd>
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder<p>
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder When applicable, specifies the hardware to use for
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder cryptographic operations, such as a secure key store used
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder for signing.
ade09f8be34b77402276c524bf29f2e5df666a94Christian Maeder </p>
ade09f8be34b77402276c524bf29f2e5df666a94Christian Maeder<p>
ff21411cdf7c6d8d3acebbdebeade1d5ac502b83Christian Maeder When BIND is built with OpenSSL PKCS#11 support, this defaults
e97bcfa4f74907e1a5ccfc3bc1509d1849cda603Christian Maeder to the string "pkcs11", which identifies an OpenSSL engine
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder that can drive a cryptographic accelerator or hardware service
f3e815e0f960f2c002904b18ad75c149a3827d9fChristian Maeder module. When BIND is built with native PKCS#11 cryptography
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder (--enable-native-pkcs11), it defaults to the path of the PKCS#11
e97bcfa4f74907e1a5ccfc3bc1509d1849cda603Christian Maeder provider library specified via "--with-pkcs11".
2afae0880da7ca73c9376fd4d653ab19833fe858Christian Maeder </p>
a3a7d8b3cdf05c8040c62dbcf9a15dc5042cd721Christian Maeder</dd>
0ea2cddb8715a770e646895e16b7b8085f49167cChristian Maeder<dt><span class="term">-f</span></dt>
2afae0880da7ca73c9376fd4d653ab19833fe858Christian Maeder<dd><p>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder Run the server in the foreground (i.e. do not daemonize).
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder </p></dd>
21dae7237ac384abdb94a81e00b3f099873ec623Till Mossakowski<dt><span class="term">-g</span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder Run the server in the foreground and force all logging
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder to <code class="filename">stderr</code>.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p></dd>
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder<dt><span class="term">-L <em class="replaceable"><code>logfile</code></em></span></dt>
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder<dd><p>
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder Log to the file <code class="option">logfile</code> by default
42972ddff400840d46eb54422b60083228b2996cChristian Maeder instead of the system log.
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder </p></dd>
42972ddff400840d46eb54422b60083228b2996cChristian Maeder<dt><span class="term">-M <em class="replaceable"><code>option</code></em></span></dt>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder<dd><p>
99aecbb3a3f935dd4663a45760a703faabdd04fbChristian Maeder Sets the default memory context options. Currently
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder the only supported option is
42972ddff400840d46eb54422b60083228b2996cChristian Maeder <em class="replaceable"><code>external</code></em>,
42972ddff400840d46eb54422b60083228b2996cChristian Maeder which causes the internal memory manager to be bypassed
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder in favor of system-provided memory allocation functions.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p></dd>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder Turn on memory usage debugging flags. Possible flags are
be8b8876edf3d7138ddd39a4ec07d857dde5bbb5Christian Maeder <em class="replaceable"><code>usage</code></em>,
be8b8876edf3d7138ddd39a4ec07d857dde5bbb5Christian Maeder <em class="replaceable"><code>trace</code></em>,
be8b8876edf3d7138ddd39a4ec07d857dde5bbb5Christian Maeder <em class="replaceable"><code>record</code></em>,
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder <em class="replaceable"><code>size</code></em>, and
254df6f22d01eacf7c57b85729e0445747b630d9Christian Maeder <em class="replaceable"><code>mctx</code></em>.
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder These correspond to the ISC_MEM_DEBUGXXXX flags described in
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder <code class="filename">&lt;isc/mem.h&gt;</code>.
be8b8876edf3d7138ddd39a4ec07d857dde5bbb5Christian Maeder </p></dd>
a55b09f4ef6e58ad617b59899d93c63bb4d6f287Christian Maeder<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
b83ff3749d99d03b641adee264b781039a551addChristian Maeder Create <em class="replaceable"><code>#cpus</code></em> worker threads
b83ff3749d99d03b641adee264b781039a551addChristian Maeder to take advantage of multiple CPUs. If not specified,
7297175957c5ad3c0498032190b1dee9ec5fb873Christian Maeder <span class="command"><strong>named</strong></span> will try to determine the
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder number of CPUs present and create one thread per CPU.
17d4f8c5576d93f36cafe68161cdb960ec49ce7cChristian Maeder If it is unable to determine the number of CPUs, a
17d4f8c5576d93f36cafe68161cdb960ec49ce7cChristian Maeder single worker thread will be created.
17d4f8c5576d93f36cafe68161cdb960ec49ce7cChristian Maeder </p></dd>
f1d04fe5072b827d9cc490ebdbca78108241a392Christian Maeder<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder<dd><p>
f1d04fe5072b827d9cc490ebdbca78108241a392Christian Maeder Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder specified, the default is port 53.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p></dd>
17d4f8c5576d93f36cafe68161cdb960ec49ce7cChristian Maeder<dt><span class="term">-s</span></dt>
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder<dd>
2afae0880da7ca73c9376fd4d653ab19833fe858Christian Maeder<p>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder Write memory usage statistics to <code class="filename">stdout</code> on exit.
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder </p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
26ed2a19326560786ff94dfc462309d6d5d862a8Heng Jiang<h3 class="title">Note</h3>
1b05bdb88b90d3c947351f262d7ae7d68f0a4a6fTill Mossakowski<p>
21dae7237ac384abdb94a81e00b3f099873ec623Till Mossakowski This option is mainly of interest to BIND 9 developers
1b05bdb88b90d3c947351f262d7ae7d68f0a4a6fTill Mossakowski and may be removed or changed in a future release.
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder </p>
15bceb77af626f79747d46d35979640f229a4c71Christian Maeder</div>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder</dd>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<dd>
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder<p>
758cf077c1349a62f0541808d8fa9582bc263704Christian Maeder Allow <span class="command"><strong>named</strong></span> to use up to
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder <em class="replaceable"><code>#max-socks</code></em> sockets.
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder The default value is 4096 on systems built with default
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder configuration options, and 21000 on systems built with
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder "configure --with-tuning=large".
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder </p>
95c3e5d11dcee331dc3876a9bf0c1d6daa38e2caChristian Maeder<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder<h3 class="title">Warning</h3>
3ea571db6dd6e0c42d02de4e56648c7cd86a3734Christian Maeder<p>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder This option should be unnecessary for the vast majority
3ea571db6dd6e0c42d02de4e56648c7cd86a3734Christian Maeder of users.
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder The use of this option could even be harmful because the
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder specified value may exceed the limitation of the
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder underlying system API.
26ed2a19326560786ff94dfc462309d6d5d862a8Heng Jiang It is therefore set only when the default configuration
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder causes exhaustion of file descriptors and the
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder operational environment is known to support the
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder specified number of sockets.
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder Note also that the actual maximum number is normally a little
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder fewer than the specified value because
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder <span class="command"><strong>named</strong></span> reserves some file descriptors
26ed2a19326560786ff94dfc462309d6d5d862a8Heng Jiang for its internal use.
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder </p>
7297175957c5ad3c0498032190b1dee9ec5fb873Christian Maeder</div>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder</dd>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
1b05bdb88b90d3c947351f262d7ae7d68f0a4a6fTill Mossakowski<dd>
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder<p>Chroot
948f37fdb71c544ff4c907bc5863702648cf36e4Christian Maeder to <em class="replaceable"><code>directory</code></em> after
948f37fdb71c544ff4c907bc5863702648cf36e4Christian Maeder processing the command line arguments, but before
1e3950d5c1f0e041dd7677856e43f07796567d5bChristian Maeder reading the configuration file.
7f7460e7095628f3437b116ee78d3043d11f8febChristian Maeder </p>
948f37fdb71c544ff4c907bc5863702648cf36e4Christian Maeder<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder<h3 class="title">Warning</h3>
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder<p>
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder This option should be used in conjunction with the
1e3950d5c1f0e041dd7677856e43f07796567d5bChristian Maeder <code class="option">-u</code> option, as chrooting a process
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder running as root doesn't enhance security on most
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder systems; the way <code class="function">chroot(2)</code> is
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder defined allows a process with root privileges to
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder escape a chroot jail.
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder </p>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder</div>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder</dd>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<dd><p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder Use <em class="replaceable"><code>#listeners</code></em>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder worker threads to listen for incoming UDP packets on each
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder address. If not specified, <span class="command"><strong>named</strong></span> will
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder calculate a default value based on the number of detected
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder CPUs: 1 for 1 CPU, and the number of detected CPUs
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder minus one for machines with more than 1 CPU. This cannot
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder be increased to a value higher than the number of CPUs.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder If <code class="option">-n</code> has been set to a higher value than
996a56a455d65cfac4ddedd44fd90cfc1ea849aeChristian Maeder the number of detected CPUs, then <code class="option">-U</code> may
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder be increased as high as that value, but no higher.
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder On Windows, the number of UDP listeners is hardwired to 1
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder and this option has no effect.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder </p></dd>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<dd>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<p>Setuid
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder to <em class="replaceable"><code>user</code></em> after completing
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder privileged operations, such as creating sockets that
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder listen on privileged ports.
9192fdd8f0e682ac0f0183dd854d5210fbfa4ec5Christian Maeder </p>
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<h3 class="title">Note</h3>
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder<p>
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder On Linux, <span class="command"><strong>named</strong></span> uses the kernel's
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder capability mechanism to drop all root privileges
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder except the ability to <code class="function">bind(2)</code> to
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder a
7688e20f844fe88f75c04016841ebb5e5e3d927fChristian Maeder privileged port and set process resource limits.
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder Unfortunately, this means that the <code class="option">-u</code>
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder option only works when <span class="command"><strong>named</strong></span> is
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder run
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
996a56a455d65cfac4ddedd44fd90cfc1ea849aeChristian Maeder later, since previous kernels did not allow privileges
74b841a4b332085d5fd79975a13313c2681ae595Christian Maeder to be retained after <code class="function">setuid(2)</code>.
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder </p>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder</div>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder</dd>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<dt><span class="term">-v</span></dt>
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder<dd><p>
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder Report the version number and exit.
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder </p></dd>
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder<dt><span class="term">-V</span></dt>
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder<dd><p>
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder Report the version number and build options, and exit.
996a56a455d65cfac4ddedd44fd90cfc1ea849aeChristian Maeder </p></dd>
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder<dt><span class="term">-X <em class="replaceable"><code>lock-file</code></em></span></dt>
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder<dd><p>
f3faf4e4346b6224a3aaeeac11bac8b5c8932a29Christian Maeder Acquire a lock on the specified file at runtime; this
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder helps to prevent duplicate <span class="command"><strong>named</strong></span> instances
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder from running simultaneously.
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder Use of this option overrides the <span class="command"><strong>lock-file</strong></span>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder option in <code class="filename">named.conf</code>.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder If set to <code class="literal">none</code>, the lock file check
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder is disabled.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder </p></dd>
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<dd>
4a8f990902448d0562fbe1a98ce685ddbd531d38Christian Maeder<p>
4a8f990902448d0562fbe1a98ce685ddbd531d38Christian Maeder Load data from <em class="replaceable"><code>cache-file</code></em> into the
4a8f990902448d0562fbe1a98ce685ddbd531d38Christian Maeder cache of the default view.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder </p>
46947810076241f06f3e2919edb2289ed84d6c15Christian Maeder<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<h3 class="title">Warning</h3>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<p>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder This option must not be used. It is only of interest
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder to BIND 9 developers and may be removed or changed in a
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder future release.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p>
7688e20f844fe88f75c04016841ebb5e5e3d927fChristian Maeder</div>
7688e20f844fe88f75c04016841ebb5e5e3d927fChristian Maeder</dd>
7688e20f844fe88f75c04016841ebb5e5e3d927fChristian Maeder</dl></div>
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder</div>
7688e20f844fe88f75c04016841ebb5e5e3d927fChristian Maeder<div class="refsection">
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<a name="id-1.14.19.9"></a><h2>SIGNALS</h2>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<p>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder In routine operation, signals should not be used to control
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder the nameserver; <span class="command"><strong>rndc</strong></span> should be used
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder instead.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder </p>
996a56a455d65cfac4ddedd44fd90cfc1ea849aeChristian Maeder<div class="variablelist"><dl class="variablelist">
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<dt><span class="term">SIGHUP</span></dt>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<dd><p>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder Force a reload of the server.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p></dd>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<dt><span class="term">SIGINT, SIGTERM</span></dt>
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder<dd><p>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder Shut down the server.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder </p></dd>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder</dl></div>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<p>
1f315f2e146d15c0aec01f7ae076708bbac29796Christian Maeder The result of sending any other signals to the server is undefined.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p>
996a56a455d65cfac4ddedd44fd90cfc1ea849aeChristian Maeder</div>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<div class="refsection">
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<a name="id-1.14.19.10"></a><h2>CONFIGURATION</h2>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder The <span class="command"><strong>named</strong></span> configuration file is too complex
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder to describe in detail here. A complete description is provided
b03274844ecd270f9e9331f51cc4236a33e2e671Christian Maeder in the
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder </p>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<p>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder <span class="command"><strong>named</strong></span> inherits the <code class="function">umask</code>
89ab08979dc23d72e9e09c8990a8c44847041d6fChristian Maeder (file creation mode mask) from the parent process. If files
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder created by <span class="command"><strong>named</strong></span>, such as journal files,
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder need to have custom permissions, the <code class="function">umask</code>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder should be set explicitly in the script used to start the
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <span class="command"><strong>named</strong></span> process.
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder </p>
3ea571db6dd6e0c42d02de4e56648c7cd86a3734Christian Maeder</div>
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<div class="refsection">
ddd8734e5b3802a1a6c908af6b1e870af76c932dChristian Maeder<a name="id-1.14.19.11"></a><h2>FILES</h2>
4b0e0613129ebfc53e3e87985c20a537da91d18dChristian Maeder<div class="variablelist"><dl class="variablelist">
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder The default configuration file.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p></dd>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<dd><p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder The default process-id file.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p></dd>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder</dl></div>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder</div>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<div class="refsection">
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<a name="id-1.14.19.12"></a><h2>SEE ALSO</h2>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder<p><em class="citetitle">RFC 1033</em>,
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <em class="citetitle">RFC 1034</em>,
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <em class="citetitle">RFC 1035</em>,
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder </p>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder</div>
54fb645be0a806e7fd3c0eed5691c2153eb8d518Christian Maeder</div>
1b05bdb88b90d3c947351f262d7ae7d68f0a4a6fTill Mossakowski<div class="navfooter">
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder<hr>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<table width="100%" summary="Navigation footer">
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<tr>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<td width="40%" align="left">
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<a accesskey="p" href="man.lwresd.html">Prev</a>�</td>
3d4e57e86d8aee818b589cd1029838e0accade55Christian Maeder<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder<td width="40%" align="right">�<a accesskey="n" href="man.named.conf.html">Next</a>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder</td>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder</tr>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder<tr>
16023c23c9d17743033afd994ad11c386d17b376Christian Maeder<td width="40%" align="left" valign="top">
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder<span class="application">lwresd</span>�</td>
c092fcac4b8f5c524c22ca579189c4487c13edf7Christian Maeder<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder<td width="40%" align="right" valign="top">�<code class="filename">named.conf</code>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder</td>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder</tr>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder</table>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder</div>
996a56a455d65cfac4ddedd44fd90cfc1ea849aeChristian Maeder<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0rc3</p>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder</body>
ef2affdc0cdf3acd5c051597c04ab9b08a346a7dChristian Maeder</html>
fb7c3ffc41767729db506ad0ac1262ecfb5febf8Christian Maeder