man.named.html revision f0da471019f224ba88dc2f4b3f2209c6102855f6
842ae4bd224140319ae7feec1872b93dfd491143fielding - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
842ae4bd224140319ae7feec1872b93dfd491143fielding - Copyright (C) 2000-2003 Internet Software Consortium.
842ae4bd224140319ae7feec1872b93dfd491143fielding - Permission to use, copy, modify, and/or distribute this software for any
842ae4bd224140319ae7feec1872b93dfd491143fielding - purpose with or without fee is hereby granted, provided that the above
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim - copyright notice and this permission notice appear in all copies.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim - PERFORMANCE OF THIS SOFTWARE.
cccd31fa4a72fe23cc3249c06db181b274a55a69gstein<!-- $Id: man.named.html,v 1.199 2011/06/10 01:14:38 tbox Exp $ -->
b82089c85a796d6e047ccf2c97e872adec1475d7trawick<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cccd31fa4a72fe23cc3249c06db181b274a55a69gstein<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
024cd9589e52cf11ce765dfddb5b5f0c6e421a48gstein<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
024cd9589e52cf11ce765dfddb5b5f0c6e421a48gstein<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
024cd9589e52cf11ce765dfddb5b5f0c6e421a48gstein<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
024cd9589e52cf11ce765dfddb5b5f0c6e421a48gstein<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
024cd9589e52cf11ce765dfddb5b5f0c6e421a48gstein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
024cd9589e52cf11ce765dfddb5b5f0c6e421a48gstein<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
cccd31fa4a72fe23cc3249c06db181b274a55a69gstein<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
546ab7ed4cd7df920aef1b4d6487d95d6036ebc6manoj<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
6ccc80786ac79c81965d9df753c1c19104954a95rbb<p><span class="application">named</span> — Internet domain name server</p>
d41217398f0e1031adbb6f5bd37f45737c805deftrawick<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
ac40075cd80237c61be9510a940b05debc7bac5etrawick<p><span><strong class="command">named</strong></span>
ac40075cd80237c61be9510a940b05debc7bac5etrawick is a Domain Name System (DNS) server,
cccd31fa4a72fe23cc3249c06db181b274a55a69gstein part of the BIND 9 distribution from ISC. For more
8a83839471ad6ee0fd34db83fab7e7740a231d70manoj information on the DNS, see RFCs 1033, 1034, and 1035.
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick When invoked without arguments, <span><strong class="command">named</strong></span>
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick read the default configuration file
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick <code class="filename">/etc/named.conf</code>, read any initial
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick data, and listen for queries.
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick Use IPv4 only even if the host machine is capable of IPv6.
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick <code class="option">-4</code> and <code class="option">-6</code> are mutually
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick Use IPv6 only even if the host machine is capable of IPv4.
5dce6b6dd8b82af80f9754ec4740ff61477a77b1gregames <code class="option">-4</code> and <code class="option">-6</code> are mutually
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick Use <em class="replaceable"><code>config-file</code></em> as the
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick configuration file instead of the default,
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim ensure that reloading the configuration file continues
2eb02c330b2c5344755b7e8dd42f5884b700af47brianp to work after the server has changed its working
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim directory due to to a possible
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim <code class="option">directory</code> option in the configuration
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim file, <em class="replaceable"><code>config-file</code></em> should be
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick an absolute pathname.
29a9516d4b69977a36f4c93119ffcbec9809b044trawick<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
55d986c77300fd39420b41f765b08c15b4c6418drbb Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick Debugging traces from <span><strong class="command">named</strong></span> become
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick more verbose as the debug level increases.
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick Use a crypto hardware (OpenSSL engine) for the crypto operations
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick it supports, for instance re-signing with private keys from
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick a secure key store. When compiled with PKCS#11 support
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick <em class="replaceable"><code>engine-name</code></em>
9543daa1bf345c36853642d45b2b64bf0a6b6dddtrawick defaults to pkcs11, the empty name resets it to no engine.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim Run the server in the foreground (i.e. do not daemonize).
dd028aa8111afb6534fece555e8c2d408894671etrawick Run the server in the foreground and force all logging
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz Turn on memory usage debugging flags. Possible flags are
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim These correspond to the ISC_MEM_DEBUGXXXX flags described in
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
a454c1041a1303a566d19e2c3d0d954635dadbddnd Create <em class="replaceable"><code>#cpus</code></em> worker threads
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim to take advantage of multiple CPUs. If not specified,
a454c1041a1303a566d19e2c3d0d954635dadbddnd <span><strong class="command">named</strong></span> will try to determine the
f4434a8c7b59509850470dfc3ebe2b79c9548649gregames number of CPUs present and create one thread per CPU.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim If it is unable to determine the number of CPUs, a
dd028aa8111afb6534fece555e8c2d408894671etrawick single worker thread will be created.
fbe914c128c69aff8822e30898e4eca2c8f17458jorton<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
e8f95a682820a599fe41b22977010636be5c2717jim specified, the default is port 53.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim Write memory usage statistics to <code class="filename">stdout</code> on exit.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim This option is mainly of interest to BIND 9 developers
d44472957ac24ca210655dc3255257bf0534bf90rbb and may be removed or changed in a future release.
783334f576bfb7ef44623faf7af44a65cf13b9b4jim<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
a454c1041a1303a566d19e2c3d0d954635dadbddnd Allow <span><strong class="command">named</strong></span> to use up to
783334f576bfb7ef44623faf7af44a65cf13b9b4jim <em class="replaceable"><code>#max-socks</code></em> sockets.
783334f576bfb7ef44623faf7af44a65cf13b9b4jim<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
a18a308d7a942230edcde1bf00d7ae9b4b143c90trawick This option should be unnecessary for the vast majority
a454c1041a1303a566d19e2c3d0d954635dadbddnd The use of this option could even be harmful because the
a454c1041a1303a566d19e2c3d0d954635dadbddnd specified value may exceed the limitation of the
a454c1041a1303a566d19e2c3d0d954635dadbddnd underlying system API.
a454c1041a1303a566d19e2c3d0d954635dadbddnd It is therefore set only when the default configuration
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim causes exhaustion of file descriptors and the
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim operational environment is known to support the
a454c1041a1303a566d19e2c3d0d954635dadbddnd specified number of sockets.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim Note also that the actual maximum number is normally a little
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim fewer than the specified value because
0f101a4a0aecdcb213cdad2d80664d342f8e9222dougm <span><strong class="command">named</strong></span> reserves some file descriptors
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim for its internal use.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim to <em class="replaceable"><code>directory</code></em> after
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim processing the command line arguments, but before
29a9516d4b69977a36f4c93119ffcbec9809b044trawick reading the configuration file.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
55d986c77300fd39420b41f765b08c15b4c6418drbb This option should be used in conjunction with the
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim <code class="option">-u</code> option, as chrooting a process
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim running as root doesn't enhance security on most
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim systems; the way <code class="function">chroot(2)</code> is
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim defined allows a process with root privileges to
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim escape a chroot jail.
46603605c2edcc1cc84fa45634e19a395134078atrawick<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
46603605c2edcc1cc84fa45634e19a395134078atrawick to <em class="replaceable"><code>user</code></em> after completing
4bb7ba7c1f9972b443562faf99151ccec854446fjorton privileged operations, such as creating sockets that
46603605c2edcc1cc84fa45634e19a395134078atrawick listen on privileged ports.
46603605c2edcc1cc84fa45634e19a395134078atrawick<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
46603605c2edcc1cc84fa45634e19a395134078atrawick On Linux, <span><strong class="command">named</strong></span> uses the kernel's
57ea0ae988501d6801b2d19d43753cd960fefd42trawick capability mechanism to drop all root privileges
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim except the ability to <code class="function">bind(2)</code> to
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim privileged port and set process resource limits.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim Unfortunately, this means that the <code class="option">-u</code>
2eb02c330b2c5344755b7e8dd42f5884b700af47brianp option only works when <span><strong class="command">named</strong></span> is
46603605c2edcc1cc84fa45634e19a395134078atrawick on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
46603605c2edcc1cc84fa45634e19a395134078atrawick later, since previous kernels did not allow privileges
dd028aa8111afb6534fece555e8c2d408894671etrawick to be retained after <code class="function">setuid(2)</code>.
46603605c2edcc1cc84fa45634e19a395134078atrawick Report the version number and exit.
46603605c2edcc1cc84fa45634e19a395134078atrawick Report the version number and build options, and exit.
57ea0ae988501d6801b2d19d43753cd960fefd42trawick<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim Load data from <em class="replaceable"><code>cache-file</code></em> into the
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim cache of the default view.
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
dc9d4f49d36e64c0157d930cb22ca82a6291c0cbdgaudet This option must not be used. It is only of interest
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim to BIND 9 developers and may be removed or changed in a
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim future release.
badbab787974c883f2fff0341b4b249bbf6d57a2trawick In routine operation, signals should not be used to control
a454c1041a1303a566d19e2c3d0d954635dadbddnd the nameserver; <span><strong class="command">rndc</strong></span> should be used
a454c1041a1303a566d19e2c3d0d954635dadbddnd Force a reload of the server.
a454c1041a1303a566d19e2c3d0d954635dadbddnd Shut down the server.
badbab787974c883f2fff0341b4b249bbf6d57a2trawick The result of sending any other signals to the server is undefined.
badbab787974c883f2fff0341b4b249bbf6d57a2trawick The <span><strong class="command">named</strong></span> configuration file is too complex
a454c1041a1303a566d19e2c3d0d954635dadbddnd to describe in detail here. A complete description is provided
badbab787974c883f2fff0341b4b249bbf6d57a2trawick <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
badbab787974c883f2fff0341b4b249bbf6d57a2trawick <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
a454c1041a1303a566d19e2c3d0d954635dadbddnd (file creation mode mask) from the parent process. If files
a454c1041a1303a566d19e2c3d0d954635dadbddnd created by <span><strong class="command">named</strong></span>, such as journal files,
badbab787974c883f2fff0341b4b249bbf6d57a2trawick need to have custom permissions, the <code class="function">umask</code>
a454c1041a1303a566d19e2c3d0d954635dadbddnd should be set explicitly in the script used to start the
a454c1041a1303a566d19e2c3d0d954635dadbddnd <span><strong class="command">named</strong></span> process.
dd028aa8111afb6534fece555e8c2d408894671etrawick<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
badbab787974c883f2fff0341b4b249bbf6d57a2trawick The default configuration file.
badbab787974c883f2fff0341b4b249bbf6d57a2trawick<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
badbab787974c883f2fff0341b4b249bbf6d57a2trawick The default process-id file.
aae6ae5e5557b23552f5771aa385c5b6bb203229trawick <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
aae6ae5e5557b23552f5771aa385c5b6bb203229trawick <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
aae6ae5e5557b23552f5771aa385c5b6bb203229trawick <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
aae6ae5e5557b23552f5771aa385c5b6bb203229trawick <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
aae6ae5e5557b23552f5771aa385c5b6bb203229trawick <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
05552d1205ee9de24e6a003f2b51985f2431250drederpj<p><span class="corpauthor">Internet Systems Consortium</span>
3e31296f734b08ad1e536cf6a1198b8cdb6d0d22colm<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
f60a3ec9d55938e4ef8828e80c8a1f2439ddf77ccolm<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
f60a3ec9d55938e4ef8828e80c8a1f2439ddf77ccolm<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
3a3d6060948b6fd3a0e127db51177a05a2d7941fjim<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>