Contact Us Contact Us

BIND

  Software Depot
Electronic download
Frequently asked questions
HP Inc. Software Depot
Product details and specifications
Select
Overview
  

BIND (HP-UX NameServer)

Berkeley Internet Name Domain (BIND) (also referred as HP-UX NameServer) is a distributed database service that resolves host names and enables internetwork mail. It is a distributed network information lookup service that maps host names to Internet addresses, and maps Internet addresses to host names.


Obsolescence plan for BIND (HP-UX NameServer) 9.9.4 on HPUX 11i v3:

  • BIND (HP-UX NameServer) 9.9.4 on HP-UX 11i v3 will reach end of support (EoS) on February/28/2018.
  • HPE recommends migrating to the latest BIND (HP-UX NameServer) version 9.11.1.

NOTE: BIND (HP-UX NameServer) 9.7.3 on HP-UX 11i v3 has reached end of support (EoS) on August/31/2015.

Important:

  • BIND (HP-UX NameServer) 9.3.2 will not be supported on HP-UX 11i v3 after April 1, 2014, aligning to Fusion Release and this will only consist of fixes to critical defects.
  • BIND (HP-UX NameServer) 9.3.2 will continue to be supported on HP-UX 11i v1 and 11i v2 till their respective support time-lines or until further notice.

Table 1 lists the different web release versions of BIND (HP-UX NameServer) available on the HP-UX 11i v1, 11i v2, and 11i v3 operating systems.

Table 1: Latest BIND (HP-UX NameServer) details, Web releases, versions, and their numbers

Product version number Operating system Bundle version number Release date
9.11.1 HP-UX 11i v3 C.9.11.1.1.0 May 2017
9.9.4 HP-UX 11i v3 C.9.9.4.10.0 May 2017
9.3.2 HP-UX 11i v2 C.9.3.2.15.0 November 2015
9.7.3 HP-UX 11i v3 C.9.7.3.8.0 September 2015
9.3.2 HP-UX 11i v1 C.9.3.2.15.0 December 2015

BIND (HP-UX NameServer) 9.11.1 features:

  1. named:
    1. Catalog Zones : A new method of provisioning secondary servers.
    2. A new zone file format, "map", stores zone data in a format that can be mapped directly into memory.
    3. New options: prefetch, in-view, max-zone-ttl, etc.
    4. DNS Cookies to provide IP address identity, helping to prevent attacks using forged IP addresses.
  2. rndc:
    1. Addzone/Delzone Provisioning Improvements: rndc delzone, rndc
    2. Negative Trust Anchors(nta)
    3. scan etc.
  3. New DNS Resource record types: CSYNC, NINFO, RKEY, SINK, TA, TALINK
  4. dig: New options: +ednsopt, +ednsflags, +[no]ednsnegotiation, +subnet, etc.
  5. Log output to files can now be buffered by specifying buffered yes; when creating a channel.
  6. "named-checkconf -px" will print the contents of configuration files with the shared secrets obscured, making it easier to share configuration.
  7. "named-checkzone" and "named-compilezone" can read journal files, allowing them to process dynamic zones without the zones needing to be frozen first.
  8. Zone transfers now use smaller message sizes to improve message compression. This results in reduced network usage.
  9. nsupdate will now check the correctness of hostnames when adding records of type A, AAAA, MX, SOA, NS, SRV or PTR.

For a complete list of new features and details, see the BIND HPUX-NameServer 9.11.1 Release Notes.

BIND (HP-UX NameServer) 9.9.4 features:

  • DNS64 and DNS64 reverse support
  • Response Rate Limiting (RRL) support for the RFC 6742 ILNP record types (NID, LP, L32, and L64)
  • Response policy zones (RPZ)
  • New command dnssec-verify(1) to ensure correctness of signatures and of NSEC/NSEC3 ECDSA support
  • Support for the EUI48 and EUI64 RR types
  • New configuration option "max-rsa-exponent-size <value>;"
  • Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605
  • BIND (HP-UX NameServer) now recognizes the TLSA resource record type, created to support IETF DANE
  • RFC 1918 reverse zones have been added to the empty-zones table per RFC 6303 Uniform Resource Identifier (URI) resource records
  • "auto-dnssec" zones can now have NSEC3 parameters set prior to signing
  • New "rndc signing" command provides greater visibility and control of the automatic DNSSEC signing process
  • NXDOMAIN redirection
  • New "inline-signing" option to sign zone completely transparently
  • New zone type "static-stub"
  • Support for Response Policy Zones
  • Support IETF DANE (DNS-based Authentication of Named Entities)
  • Support for Elliptic Curve Digital Signature Algorithm keys and signatures in in DNSSEC per RFC 6605
  • Named now retains GSS-TSIG keys across restarts

BIND (HP-UX NameServer) 9.7.3 features:

  • Fully automatic signing of zones by named
  • Simplified configuration of DNSSEC Look-aside Validation (DLV)
  • Simplified configuration of Dynamic DNS, using the ddns-confgen command line tool or the local update-policy option
  • New named option attach-cache that allows multiple views to share a single cache
  • DNS rebinding attack prevention
  • New default values for dnssec-keygen parameters
  • Support for RFC 5011 automated trust anchor maintenance
  • Smart signing: simplified tools for zone signing and key maintenance
  • Named and other binaries can now print out a stack back-trace on assertion failure, to aid in debugging
  • Full NSEC3 support
  • Automatic zone re-signing
  • Randomize server selection on queries
  • Specify max sockets on named command line
  • Convenient syntax for already existing options like query-source, server statement in rndc.conf
  • More detailed statistics counters
  • Faster ACL processing and efficient LRU cache cleaning mechanism
  • GSS-TSIG support (RFC 3645)
  • Implementation of additional section caching
  • New acl option allow-query-cache
  • Additional fields for already existing options like ixfr-from-differences
  • Journal file names are configurable
  • New control options for rndc like notify, sign, validation and query-log
  • Error messages are now more informative
  • Scope of some ACL (example, allow-update) was changed in named.conf
  • New options to control behavior of DNS NOTIFY
  • UNIX domain controls channel are now supported
  • Introduction of new zone-file format to enhance loading performance
  • Extended post zone load checks. New configuration options for same
  • Dig now has new options
  • Recursive clients for same query can now be controlled with new configuration options
  • Automatic empty zone are now fully covered as mentioned in RFC 1918 zones
  • New update-policy fields added
  • New algorithms support
  • The EDNS response/reply sizes can now be configured
  • Defaults have been changed for some configuration and binary options
  • DNSSEC validation is set by default and can be unset explicitly
  • SPF (Sender Policy Framework) support
  • Support for new resource records
  • New binaries have been added

BIND (HP-UX NameServer) 9.3.2 features:

  • DNS Security (DNSSEC) implementation based on RFC 4033, 4034, and 4035
  • Support for the ip6.arpa domain
  • New method of listing master servers
  • New options in the Options statement
  • New option to configure the ordering of records
  • New option to set the advertised EDNS UDP buffer size
  • New option to restrict the character set of domain names
  • New options to enable and disable incremental zone transfer (IXFR)
  • Transition support for IPv4 and IPv6
  • New command in the rndc utility
  • New option in the zone statement
  • New command-line options
  • Supports RFC 4193 (Unique Local IPv6 Unicast Addresses)

Documentation

Table 2 lists the Manpages that are distributed with the BIND (HP-UX NameServer) software depot.

Table 2: BIND (HP-UX NameServer) Manpages

Manpages

Description

dig

Domain information groper

dnssec-keygen

Key generation tool for DNSSEC

dnssec-makekeyset*

Program used to produce a set of DNS keys

dnssec-signkey*

DNSSEC key-set signing tool

dnssec-signzone

Tool to sign the DNSSEC zone

host

DNS lookup utility

hosts_to_na

Program used to translate host table to name server file format

lwresd

Lightweight resolver daemon

named-checkconf

The named configuration file syntax checking tool

named-checkzone

Zone validity checking tool

named-conf

Configuration file for named daemon

named

Internet domain name server

nslookup

Program used to query name servers interactively (BIND 9.3.2 only)

nsupdate

Dynamic DNS update utility

rndc-confgen

The rndc key generation tool

rndc

Name server control utility

rndc.conf

The rndc configuration file

sig-named

Program used to send signals to the name server

arpaname**

Utility to translate IP addresses (IPv4 and IPv6) the corresponding IN-ADDR.ARPA or IP6.ARPA names.

ddns-confgen**

Tool to generate a key for use by nsupdate and named.

dnssec-dsfromkey**

DNSSEC DS RR generation tool

dnssec-settime**

Tool to set the key timing meta-data for a DNSSEC key

dnssec-revoke**

Tool to set the REVOKED bit on a DNSSEC key

dnssec-verify*** Tool to verify DNSSEC zones

genrandom**

Tool to generate a file containing random data

isc-hmac-fixup**

Fixes HMAC keys generated by older versions of BIND (HP-UX NameServer)

named-compilezone**

Zone validity checking tool

named-journalprint**

Utility to print zone journal in human-readable form

nsec3hash**

Tool to generate an NSEC3 hash based on a set of NSEC3 parameters

delv****

DNS lookup and validation utility

dnssec-keyfromlabel****

DNSSEC key generation tool

tsig-keygen****

ddns key generation tool

mdig****

DNS piplined lookup utility

named-rrchecker****

syntax checker for individual DNS resource records

dnssec-importkey****

Utility to import DNSKEY records from external systems so they can be managed

* Not available in BIND (HP-UX NameServer) 9.3.2

** Newly added Manpages in BIND (HP-UX NameServer) 9.7.3

*** Newly added Manpages in BIND (HP-UX NameServer) 9.9.4

**** Newly added Manpages in BIND (HP-UX NameServer) 9.11.1

For additional information on Internet protocol administration, see the HP-UX IP Address and Client Management Administrator Guide at http://www.hpe.com/info/hpux-networking-docs-11iv3.

Note: For a complete list of new features, changes and defect fixes available in different versions of BIND, see the respective release notes as listed below:

  • BIND (HP-UX NameServer) 9.11.1 Release Notes
  • BIND (HP-UX NameServer) 9.9.4 Release Notes
  • BIND (HP-UX NameServer) 9.7.3 Release Notes
  • BIND (HP-UX NameServer) 9.3.2 Release Notes

These release notes are available at this location on HPESC.

Information about Administrator Guides

The Administrator Guides for both BIND 9.11.1 and BIND 9.9.4 are included along with this bundle.

Content Updated: May 2017 (WEB1705).

 
Additional product information
Product #: BIND
Version: 9.3.2/9.7.3/9.9.4/9.11.1
Software specification: HP-UX 11.31 (HPUX-NameServer_C.9.11.1.1.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.9.4.10.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.11 (DNSUPGRADE_C.9.3.2.15.0_HP-UX_B.11.11_32_64.depot)
HP-UX 11.23 (DNSUPGRADE_C.9.3.2.15.0_HP-UX_B.11.23_IA_PA.depot)
HP-UX 11.11 (DNSUPGRADE_C.9.3.2.14.0_HP-UX_B.11.11_32_64.depot)
HP-UX 11.23 (DNSUPGRADE_C.9.3.2.14.0_HP-UX_B.11.23_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.7.3.7.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.7.3.8.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.9.4.9.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.9.4.8.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.9.4.7.0_HP-UX_B.11.31_IA_PA.depot)
HP-UX 11.31 (HPUX-NameServer_C.9.9.4.6.0_HP-UX_B.11.31_IA_PA.depot)
BIND HPUX-NameServer 9.7.3 Release Notes (834957-002.pdf)
BIND HPUX-NameServer 9.11.1 Release Notes (881133-002.pdf)
BIND 9.11 Administrator Reference Manual (BIND911AFM.pdf)
BIND HPUX-NameServer 9.9.4 Release Notes (881133-001.pdf)
BIND 9.9 Administrator Reference Manual (BIND_9_Administrator_Reference.pdf)
BIND DNSUPGRADE 9.3.2 Release Notes (839997-003.pdf)
Installation
Select