BIND 9 Administrator Reference Manual

• 1. Introduction
  • 1.1. Scope of Document
  • 1.2. Organization of This Document
  • 1.3. Conventions Used in This Document
  • 1.4. The Domain Name System (DNS)
• 2. BIND Resource Requirements
  • 2.1. Hardware Requirements
  • 2.2. CPU Requirements
  • 2.3. Memory Requirements
  • 2.4. Name Server-Intensive Environment Issues
  • 2.5. Supported Operating Systems
• 3. Name Server Configuration
  • 3.1. Sample Configurations
  • 3.2. Load Balancing
  • 3.3. Name Server Operations
  • 3.4. Plugins
• 4. BIND 9 Configuration Reference
  • 4.1. Configuration File Elements
  • 4.2. Configuration File Grammar
  • 4.3. Zone File
  • 4.4. BIND 9 Statistics
• 5. Advanced DNS Features
  • 5.1. Notify
  • 5.2. Dynamic Update
  • 5.3. Incremental Zone Transfers (IXFR)
  • 5.4. Split DNS
  • 5.5. TSIG
  • 5.6. TKEY
  • 5.7. SIG(0)
  • 5.8. DNSSEC
  • 5.9. DNSSEC, Dynamic Zones, and Automatic Signing
  • 5.10. Dynamic Trust Anchor Management
  • 5.11. PKCS#11 (Cryptoki) Support
  • 5.12. Dynamically Loadable Zones (DLZ)
  • 5.13. Dynamic Database (DynDB)
  • 5.14. Catalog Zones
  • 5.15. IPv6 Support in BIND 9
• 6. BIND 9 Security Considerations
  • 6.1. Access Control Lists
  • 6.2. Chroot and Setuid
  • 6.3. Dynamic Update Security
• 7. Troubleshooting
  • 7.1. Common Problems
  • 7.2. Incrementing and Changing the Serial Number
  • 7.3. Where Can I Get Help?

Appendices

• Release Notes
  • Introduction
  • Supported Platforms
  • Download
  • Notes for BIND 9.17.3
  • Notes for BIND 9.17.2
  • Notes for BIND 9.17.1
  • Notes for BIND 9.17.0
  • License
  • End of Life
  • Thank You
• A Brief History of the DNS and BIND
• General DNS Reference Information
  • IPv6 Addresses (AAAA)
  • Bibliography (and Suggested Reading)
  • Internet Standards
  • Proposed Standards
  • Informational RFCs
  • Experimental RFCs
  • Best Current Practice RFCs
  • Historic RFCs
  • RFCs of Type “Unknown”
  • Obsoleted and Unimplemented Experimental RFCs
  • RFCs No Longer Supported in BIND 9
• Manual Pages
  • arpaname - translate IP addresses to the corresponding ARPA names
  • ddns-confgen - ddns key generation tool
  • delv - DNS lookup and validation utility
  • dig - DNS lookup utility
  • dnssec-cds - change DS records for a child zone based on CDS/CDNSKEY
  • dnssec-dsfromkey - DNSSEC DS RR generation tool
  • dnssec-importkey - import DNSKEY records from external systems so they can be managed
  • dnssec-keyfromlabel - DNSSEC key generation tool
  • dnssec-keygen: DNSSEC key generation tool
  • dnssec-revoke - set the REVOKED bit on a DNSSEC key
  • dnssec-settime: set the key timing metadata for a DNSSEC key
  • dnssec-signzone - DNSSEC zone signing tool
  • dnssec-verify - DNSSEC zone verification tool
  • dnstap-read - print dnstap data in human-readable form
  • filter-aaaa.so - filter AAAA in DNS responses when A is present
  • host - DNS lookup utility
  • mdig - DNS pipelined lookup utility
  • named-checkconf - named configuration file syntax checking tool
  • named-checkzone, named-compilezone - zone file validity checking or converting tool
  • named-journalprint - print zone journal in human-readable form
  • named-nzd2nzf - convert an NZD database to NZF text format
  • named-rrchecker - syntax checker for individual DNS resource records
  • named.conf - configuration file for named
  • named - Internet domain name server
  • nsec3hash - generate NSEC3 hash
  • nslookup - query Internet name servers interactively
  • nsupdate - dynamic DNS update utility
  • pkcs11-keygen - generate keys on a PKCS#11 device
  • pkcs11-list - list PKCS#11 objects
  • pkcs11-tokens - list PKCS#11 available tokens
  • rndc-confgen - rndc key generation tool
  • rndc.conf - rndc configuration file
  • rndc - name server control utility