BIND 9 Administrator Reference Manual

Copyright © 2000, 2001 by Internet Software Consortium

Table of Contents
1. Introduction
1.1. Scope of Document
1.2. Organization of This Document
1.3. Conventions Used in This Document
1.4. The Domain Name System (DNS)
1.4.1. DNS Fundamentals
1.4.2. Domains and Domain Names
1.4.3. Zones
1.4.4. Authoritative Name Servers
1.4.5. Caching Name Servers
1.4.6. Name Servers in Multiple Roles
2. BIND Resource Requirements
2.1. Hardware requirements
2.2. CPU Requirements
2.3. Memory Requirements
2.4. Nameserver Intensive Environment Issues
2.5. Supported Operating Systems
3. Nameserver Configuration
3.1. Sample Configurations
3.1.1. A Caching-only Nameserver
3.1.2. An Authoritative-only Nameserver
3.2. Load Balancing
3.3. Notify
3.4. Nameserver Operations
3.4.1. Tools for Use With the Nameserver Daemon
3.4.2. Signals
4. Advanced Concepts
4.1. Dynamic Update
4.1.1. The journal file
4.2. Incremental Zone Transfers (IXFR)
4.3. Split DNS
4.4. TSIG
4.4.1. Generate Shared Keys for Each Pair of Hosts
4.4.2. Copying the Shared Secret to Both Machines
4.4.3. Informing the Servers of the Key's Existence
4.4.4. Instructing the Server to Use the Key
4.4.5. TSIG Key Based Access Control
4.4.6. Errors
4.5. TKEY
4.6. SIG(0)
4.7. DNSSEC
4.7.1. Generating Keys
4.7.2. Creating a Keyset
4.7.3. Signing the Child's Keyset
4.7.4. Signing the Zone
4.7.5. Configuring Servers
4.8. IPv6 Support in BIND 9
4.8.1. Address Lookups Using AAAA Records
4.8.2. Address Lookups Using A6 Records
4.8.3. Address to Name Lookups Using Nibble Format
4.8.4. Address to Name Lookups Using Bitstring Format
4.8.5. Using DNAME for Delegation of IPv6 Reverse Addresses
5. The BIND 9 Lightweight Resolver
5.1. The Lightweight Resolver Library
5.2. Running a Resolver Daemon
6. BIND 9 Configuration Reference
6.1. Configuration File Elements
6.1.1. Address Match Lists
6.1.2. Comment Syntax
6.2. Configuration File Grammar
6.2.1. acl Statement Grammar
6.2.2. acl Statement Definition and Usage
6.2.3. controls Statement Grammar
6.2.4. controls Statement Definition and Usage
6.2.5. include Statement Grammar
6.2.6. include Statement Definition and Usage
6.2.7. key Statement Grammar
6.2.8. key Statement Definition and Usage
6.2.9. logging Statement Grammar
6.2.10. logging Statement Definition and Usage
6.2.11. lwres Statement Grammar
6.2.12. lwres Statement Definition and Usage
6.2.13. options Statement Grammar
6.2.14. options Statement Definition and Usage
6.2.15. server Statement Grammar
6.2.16. server Statement Definition and Usage
6.2.17. trusted-keys Statement Grammar
6.2.18. trusted-keys Statement Definition and Usage
6.2.19. view Statement Grammar
6.2.20. view Statement Definition and Usage
6.2.21. zone Statement Grammar
6.2.22. zone Statement Definition and Usage
6.3. Zone File
6.3.1. Types of Resource Records and When to Use Them
6.3.2. Discussion of MX Records
6.3.3. Setting TTLs
6.3.4. Inverse Mapping in IPv4
6.3.5. Other Zone File Directives
6.3.6. BIND Master File Extension: the $GENERATE Directive
7. BIND 9 Security Considerations
7.1. Access Control Lists
7.2. chroot and setuid (for UNIX servers)
7.2.1. The chroot Environment
7.2.2. Using the setuid Function
7.3. Dynamic Update Security
8. Troubleshooting
8.1. Common Problems
8.1.1. It's not working; how can I figure out what's wrong?
8.2. Incrementing and Changing the Serial Number
8.3. Where Can I Get Help?
A. Appendices
A.1. Acknowledgements
A.1.1. A Brief History of the DNS and BIND
A.2. Historical DNS Information
A.2.1. Classes of Resource Records
A.3. General DNS Reference Information
A.3.1. IPv6 addresses (A6)
A.4. Bibliography (and Suggested Reading)
A.4.1. Request for Comments (RFCs)
A.4.2. Internet Drafts
A.4.3. Other Documents About BIND
  Next
  Introduction