BIND 9 Administrator Reference Manual

• 1. Introduction
  • 1.1. Scope of Document
  • 1.2. Organization of This Document
  • 1.3. Conventions Used in This Document
  • 1.4. The Domain Name System (DNS)
• 2. BIND Resource Requirements
  • 2.1. Hardware Requirements
  • 2.2. CPU Requirements
  • 2.3. Memory Requirements
  • 2.4. Name Server-Intensive Environment Issues
  • 2.5. Supported Platforms
  • 2.6. Unsupported Platforms
  • 2.7. Building BIND 9
• 3. Name Server Configuration
  • 3.1. Sample Configurations
  • 3.2. Load Balancing
  • 3.3. Name Server Operations
  • 3.4. Plugins
• 4. BIND 9 Configuration Reference
  • 4.1. Configuration File Elements
  • 4.2. Configuration File Grammar
  • 4.3. Zone File
  • 4.4. BIND 9 Statistics
• 5. DNSSEC
  • 5.1. Zone Signing
  • 5.2. Secure Delegation
  • 5.3. DNSSEC Validation
• 6. Advanced DNS Features
  • 6.1. Notify
  • 6.2. Dynamic Update
  • 6.3. Incremental Zone Transfers (IXFR)
  • 6.4. Split DNS
  • 6.5. TSIG
  • 6.6. TKEY
  • 6.7. SIG(0)
  • 6.8. Dynamic Trust Anchor Management
  • 6.9. PKCS#11 (Cryptoki) Support
  • 6.10. Dynamically Loadable Zones (DLZ)
  • 6.11. Dynamic Database (DynDB)
  • 6.12. Catalog Zones
  • 6.13. IPv6 Support in BIND 9
• 7. BIND 9 Security Considerations
  • 7.1. Access Control Lists
  • 7.2. Chroot and Setuid
  • 7.3. Dynamic Update Security
• 8. Troubleshooting
  • 8.1. Common Problems
  • 8.2. Incrementing and Changing the Serial Number
  • 8.3. Where Can I Get Help?

Appendices

• Release Notes
  • Introduction
  • Note on Version Numbering
  • Supported Platforms
  • Download
  • Known Issues
  • Notes for BIND 9.16.43
  • Notes for BIND 9.16.42
  • Notes for BIND 9.16.41
  • Notes for BIND 9.16.40
  • Notes for BIND 9.16.39
  • Notes for BIND 9.16.38
  • Notes for BIND 9.16.37
  • Notes for BIND 9.16.36
  • Notes for BIND 9.16.35
  • Notes for BIND 9.16.34
  • Notes for BIND 9.16.33
  • Notes for BIND 9.16.32
  • Notes for BIND 9.16.31
  • Notes for BIND 9.16.30
  • Notes for BIND 9.16.29
  • Notes for BIND 9.16.28
  • Notes for BIND 9.16.27
  • Notes for BIND 9.16.26
  • Notes for BIND 9.16.25
  • Notes for BIND 9.16.24
  • Notes for BIND 9.16.23
  • Notes for BIND 9.16.22
  • Notes for BIND 9.16.21
  • Notes for BIND 9.16.20
  • Notes for BIND 9.16.19
  • Notes for BIND 9.16.18
  • Notes for BIND 9.16.17
  • Notes for BIND 9.16.16
  • Notes for BIND 9.16.15
  • Notes for BIND 9.16.14
  • Notes for BIND 9.16.13
  • Notes for BIND 9.16.12
  • Notes for BIND 9.16.11
  • Notes for BIND 9.16.10
  • Notes for BIND 9.16.9
  • Notes for BIND 9.16.8
  • Notes for BIND 9.16.7
  • Notes for BIND 9.16.6
  • Notes for BIND 9.16.5
  • Notes for BIND 9.16.4
  • Notes for BIND 9.16.3
  • Notes for BIND 9.16.2
  • Notes for BIND 9.16.1
  • Notes for BIND 9.16.0
  • License
  • End of Life
  • Thank You
• DNSSEC Guide
  • Preface
  • Introduction
  • Getting Started
  • Validation
  • Signing
  • Basic DNSSEC Troubleshooting
  • Advanced Discussions
  • Recipes
  • Commonly Asked Questions
• A Brief History of the DNS and BIND
• General DNS Reference Information
  • Requests for Comment (RFCs)
  • Notes
  • Internet Drafts
• Manual Pages
  • arpaname - translate IP addresses to the corresponding ARPA names
  • ddns-confgen - TSIG key generation tool
  • delv - DNS lookup and validation utility
  • dig - DNS lookup utility
  • dnssec-cds - change DS records for a child zone based on CDS/CDNSKEY
  • dnssec-dsfromkey - DNSSEC DS RR generation tool
  • dnssec-importkey - import DNSKEY records from external systems so they can be managed
  • dnssec-checkds - DNSSEC delegation consistency checking tool
  • dnssec-coverage - checks future DNSKEY coverage for a zone
  • dnssec-keymgr - Ensures correct DNSKEY coverage based on a defined policy
  • dnssec-keyfromlabel - DNSSEC key generation tool
  • dnssec-keygen: DNSSEC key generation tool
  • dnssec-revoke - set the REVOKED bit on a DNSSEC key
  • dnssec-settime: set the key timing metadata for a DNSSEC key
  • dnssec-signzone - DNSSEC zone signing tool
  • dnssec-verify - DNSSEC zone verification tool
  • dnstap-read - print dnstap data in human-readable form
  • filter-aaaa.so - filter AAAA in DNS responses when A is present
  • host - DNS lookup utility
  • mdig - DNS pipelined lookup utility
  • named-checkconf - named configuration file syntax checking tool
  • named-checkzone - zone file validation tool
  • named-compilezone - zone file converting tool
  • named-journalprint - print zone journal in human-readable form
  • named-nzd2nzf - convert an NZD database to NZF text format
  • named-rrchecker - syntax checker for individual DNS resource records
  • named.conf - configuration file for named
  • named - Internet domain name server
  • nsec3hash - generate NSEC3 hash
  • nslookup - query Internet name servers interactively
  • nsupdate - dynamic DNS update utility
  • pkcs11-keygen - generate keys on a PKCS#11 device
  • pkcs11-list - list PKCS#11 objects
  • pkcs11-tokens - list PKCS#11 available tokens
  • rndc-confgen - rndc key generation tool
  • rndc.conf - rndc configuration file
  • rndc - name server control utility
  • tsig-keygen - TSIG key generation tool