Contact Us Contact Us


  Software Depot
Electronic download
Frequently asked questions
Product details and specifications

BIND (HP-UX NameServer)

Berkeley Internet Name Domain (BIND) (also referred as HP-UX NameServer) is a distributed database service that resolves host names and enables internetwork mail. It is a distributed network information lookup service that maps host names to Internet addresses, and maps Internet addresses to host names.

Obsolescence plan for BIND (HP-UX NameServer) 9.9.4 on HPUX 11i v3:

  • BIND (HP-UX NameServer) 9.9.4 on HP-UX 11i v3 has reached end of support (EoS) on February/28/2018.
  • HPE recommends migrating to the latest BIND (HP-UX NameServer) version 9.11.1.

NOTE: BIND (HP-UX NameServer) 9.7.3 on HP-UX 11i v3 has reached end of support (EoS) on August/31/2015.


  • BIND (HP-UX NameServer) 9.3.2 will not be supported on HP-UX 11i v3 after April 1, 2014, aligning to Fusion Release and this will only consist of fixes to critical defects.
  • BIND (HP-UX NameServer) 9.3.2 will continue to be supported on HP-UX 11i v1 and 11i v2 till their respective support time-lines or until further notice.

Table 1 lists the different web release versions of BIND (HP-UX NameServer) available on the HP-UX 11i v1, 11i v2, and 11i v3 operating systems.

Table 1: Latest BIND (HP-UX NameServer) details, Web releases, versions, and their numbers

Product version number Operating system Bundle version number Release date
9.11.1 HP-UX 11i v3 C. April 2019
9.9.4 HP-UX 11i v3 C. August 2017
9.3.2 HP-UX 11i v2 C. November 2015
9.7.3 HP-UX 11i v3 C. September 2015
9.3.2 HP-UX 11i v1 C. December 2015

BIND (HP-UX NameServer) 9.11.1 features:

  1. named:
    1. Catalog Zones : A new method of provisioning secondary servers.
    2. A new zone file format, "map", stores zone data in a format that can be mapped directly into memory.
    3. New options: prefetch, in-view, max-zone-ttl, etc.
    4. DNS Cookies to provide IP address identity, helping to prevent attacks using forged IP addresses.
  2. rndc:
    1. Addzone/Delzone Provisioning Improvements: rndc delzone, rndc
    2. Negative Trust Anchors(nta)
    3. scan etc.
  3. New DNS Resource record types: CSYNC, NINFO, RKEY, SINK, TA, TALINK
  4. dig: New options: +ednsopt, +ednsflags, +[no]ednsnegotiation, +subnet, etc.
  5. Log output to files can now be buffered by specifying buffered yes; when creating a channel.
  6. "named-checkconf -px" will print the contents of configuration files with the shared secrets obscured, making it easier to share configuration.
  7. "named-checkzone" and "named-compilezone" can read journal files, allowing them to process dynamic zones without the zones needing to be frozen first.
  8. Zone transfers now use smaller message sizes to improve message compression. This results in reduced network usage.
  9. nsupdate will now check the correctness of hostnames when adding records of type A, AAAA, MX, SOA, NS, SRV or PTR.

For a complete list of new features and details, see the BIND HPUX-NameServer 9.11.1 Release Notes.

Warning: Known issues with BIND (HP-UX NameServer) C.


named(8) daemon does not start automatically during reboot of the system, due to incorrect startup scripts K630named and S370named.


Both workaround and fix are available for this issue.

Workaround 1:

After rebooting the system, start named(8) daemon as below

# /sbin/init.d/named start

Workaround 2:

Remove startup scripts K630named and S370named and then recreate them as below. This helps in fixing the issue for subsequent reboot of system.

Step 1. Remove startup scripts

# rm /sbin/rc1.d/K630named /sbin/rc2.d/S370named

Step 2. Recreate startup scripts

# ln -s /sbin/init.d/named /sbin/rc1.d/K630named
# ln -s /sbin/init.d/named /sbin/rc2.d/S370named


This issue is fixed in BIND (HP-UX NameServer) C. version. It delivers startup scripts K630named and S370named appropriately.

BIND (HP-UX NameServer) 9.9.4 features:

  • DNS64 and DNS64 reverse support
  • Response Rate Limiting (RRL) support for the RFC 6742 ILNP record types (NID, LP, L32, and L64)
  • Response policy zones (RPZ)
  • New command dnssec-verify(1) to ensure correctness of signatures and of NSEC/NSEC3 ECDSA support
  • Support for the EUI48 and EUI64 RR types
  • New configuration option "max-rsa-exponent-size <value>;"
  • Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605
  • BIND (HP-UX NameServer) now recognizes the TLSA resource record type, created to support IETF DANE
  • RFC 1918 reverse zones have been added to the empty-zones table per RFC 6303 Uniform Resource Identifier (URI) resource records
  • "auto-dnssec" zones can now have NSEC3 parameters set prior to signing
  • New "rndc signing" command provides greater visibility and control of the automatic DNSSEC signing process
  • NXDOMAIN redirection
  • New "inline-signing" option to sign zone completely transparently
  • New zone type "static-stub"
  • Support for Response Policy Zones
  • Support IETF DANE (DNS-based Authentication of Named Entities)
  • Support for Elliptic Curve Digital Signature Algorithm keys and signatures in in DNSSEC per RFC 6605
  • Named now retains GSS-TSIG keys across restarts

BIND (HP-UX NameServer) 9.7.3 features:

  • Fully automatic signing of zones by named
  • Simplified configuration of DNSSEC Look-aside Validation (DLV)
  • Simplified configuration of Dynamic DNS, using the ddns-confgen command line tool or the local update-policy option
  • New named option attach-cache that allows multiple views to share a single cache
  • DNS rebinding attack prevention
  • New default values for dnssec-keygen parameters
  • Support for RFC 5011 automated trust anchor maintenance
  • Smart signing: simplified tools for zone signing and key maintenance
  • Named and other binaries can now print out a stack back-trace on assertion failure, to aid in debugging
  • Full NSEC3 support
  • Automatic zone re-signing
  • Randomize server selection on queries
  • Specify max sockets on named command line
  • Convenient syntax for already existing options like query-source, server statement in rndc.conf
  • More detailed statistics counters
  • Faster ACL processing and efficient LRU cache cleaning mechanism
  • GSS-TSIG support (RFC 3645)
  • Implementation of additional section caching
  • New acl option allow-query-cache
  • Additional fields for already existing options like ixfr-from-differences
  • Journal file names are configurable
  • New control options for rndc like notify, sign, validation and query-log
  • Error messages are now more informative
  • Scope of some ACL (example, allow-update) was changed in named.conf
  • New options to control behavior of DNS NOTIFY
  • UNIX domain controls channel are now supported
  • Introduction of new zone-file format to enhance loading performance
  • Extended post zone load checks. New configuration options for same
  • Dig now has new options
  • Recursive clients for same query can now be controlled with new configuration options
  • Automatic empty zone are now fully covered as mentioned in RFC 1918 zones
  • New update-policy fields added
  • New algorithms support
  • The EDNS response/reply sizes can now be configured
  • Defaults have been changed for some configuration and binary options
  • DNSSEC validation is set by default and can be unset explicitly
  • SPF (Sender Policy Framework) support
  • Support for new resource records
  • New binaries have been added

BIND (HP-UX NameServer) 9.3.2 features:

  • DNS Security (DNSSEC) implementation based on RFC 4033, 4034, and 4035
  • Support for the domain
  • New method of listing master servers
  • New options in the Options statement
  • New option to configure the ordering of records
  • New option to set the advertised EDNS UDP buffer size
  • New option to restrict the character set of domain names
  • New options to enable and disable incremental zone transfer (IXFR)
  • Transition support for IPv4 and IPv6
  • New command in the rndc utility
  • New option in the zone statement
  • New command-line options
  • Supports RFC 4193 (Unique Local IPv6 Unicast Addresses)


Table 2 lists the Manpages that are distributed with the BIND (HP-UX NameServer) software depot.

Table 2: BIND (HP-UX NameServer) Manpages




Domain information groper


Key generation tool for DNSSEC


Program used to produce a set of DNS keys


DNSSEC key-set signing tool


Tool to sign the DNSSEC zone


DNS lookup utility


Program used to translate host table to name server file format


Lightweight resolver daemon


The named configuration file syntax checking tool


Zone validity checking tool


Configuration file for named daemon


Internet domain name server


Program used to query name servers interactively (BIND 9.3.2 only)


Dynamic DNS update utility


The rndc key generation tool


Name server control utility


The rndc configuration file


Program used to send signals to the name server


Utility to translate IP addresses (IPv4 and IPv6) the corresponding IN-ADDR.ARPA or IP6.ARPA names.


Tool to generate a key for use by nsupdate and named.


DNSSEC DS RR generation tool


Tool to set the key timing meta-data for a DNSSEC key


Tool to set the REVOKED bit on a DNSSEC key

dnssec-verify*** Tool to verify DNSSEC zones


Tool to generate a file containing random data


Fixes HMAC keys generated by older versions of BIND (HP-UX NameServer)


Zone validity checking tool


Utility to print zone journal in human-readable form


Tool to generate an NSEC3 hash based on a set of NSEC3 parameters


DNS lookup and validation utility


DNSSEC key generation tool


ddns key generation tool


DNS piplined lookup utility


syntax checker for individual DNS resource records


Utility to import DNSKEY records from external systems so they can be managed

* Not available in BIND (HP-UX NameServer) 9.3.2

** Newly added Manpages in BIND (HP-UX NameServer) 9.7.3

*** Newly added Manpages in BIND (HP-UX NameServer) 9.9.4

**** Newly added Manpages in BIND (HP-UX NameServer) 9.11.1

For additional information on Internet protocol administration, see the HP-UX IP Address and Client Management Administrator Guide at

Note: For a complete list of new features, changes and defect fixes available in different versions of BIND, see the respective release notes as listed below:

  • BIND (HP-UX NameServer) 9.11.1 Release Notes
  • BIND (HP-UX NameServer) 9.9.4 Release Notes
  • BIND (HP-UX NameServer) 9.7.3 Release Notes
  • BIND (HP-UX NameServer) 9.3.2 Release Notes

These release notes are available at this location on HPESC.

Information about Administrator Guides

The Administrator Guides for both BIND 9.11.1 and BIND 9.9.4 are included along with this bundle.

Additional product information
Product #: BIND
Version: 9.3.2/9.7.3/9.9.4/9.11.1
Software specification: HP-UX 11.31 (HPUX-NameServer_C.
HP-UX 11.31 (HPUX-NameServer_C.
HP-UX 11.31 (HPUX-NameServer_C.
HP-UX 11.31 (HPUX-NameServer_C.
BIND HPUX-NameServer 9.7.3 Release Notes (834957-002.pdf)
BIND 9.11 Administrator Reference Manual (BIND911AFM.pdf)
BIND HPUX-NameServer 9.9.4 Release Notes (P01082-001.pdf)
BIND 9.9 Administrator Reference Manual (BIND_9_Administrator_Reference.pdf)
BIND DNSUPGRADE 9.3.2 Release Notes (839997-003.pdf)