Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages


home | help
NAMED(8)			    BIND 9			      NAMED(8)

       named - Internet	domain name server

       engine-name] [-f] [-g] [-L logfile] [-M option] [-m  flag]  [-n	#cpus]

       bution  from  ISC.  For	more information on the	DNS, see RFC 1033, RFC
       1034, and RFC 1035.

       When invoked without arguments, named will read the default  configura-
       tion  file /usr/local/etc/namedb/named.conf, read any initial data, and
       listen for queries.

	      and -6 are mutually exclusive.

	      and -6 are mutually exclusive.

       -c config-file
	      fault,  /usr/local/etc/namedb/named.conf.	To ensure that reload-
	      ing the configuration file continues to work  after  the	server
	      has changed its working directory	due to to a possible directory
	      lute pathname.

       -d debug-level
	      Set  the	daemon's  debug	level to debug-level. Debugging	traces
	      from named become	more verbose as	the debug level	increases.

       -D string
	      Specifies	a string that is used to identify a instance of	 named

       -E engine-name
	      When applicable, specifies the hardware to use for cryptographic
	      operations, such as a secure key store used for signing.

	      can drive	a cryptographic	accelerator or hardware	 service  mod-
	      ule.  When BIND is built with native PKCS#11 cryptography	(--en-
	      able-native-pkcs11), it defaults to  the	path  of  the  PKCS#11
	      provider library specified via "--with-pkcs11".



       -L logfile

       -M option
	      Sets the default memory context options.	If  set	 to  external,
	      this  causes the internal	memory manager to be bypassed in favor
	      of system-provided memory	allocation functions. If set to	 fill,
	      blocks  of  memory will be filled	with tag values	when allocated
	      or freed,	to assist debugging of memory problems.	 (nofill  dis-
	      ables  this  behavior,  and is the default unless	named has been
	      compiled with developer options.)

       -m flag
	      Turn on memory usage debugging flags. Possible flags are	usage,
	      ISC_MEM_DEBUGXXXX	flags described	in <isc/mem.h>.

       -n #cpus
	      Create #cpus worker threads to take advantage of multiple	 CPUs.
	      present and create one thread per	CPU. If	it is unable to	deter-
	      mine the number of CPUs, a single	worker thread will be created.

       -p port
	      is port 53.

       -s     Write memory usage statistics to stdout on exit.

	  removed or changed in	a future release.

       -S #max-socks
	      is 21000 on systems built	with  default  configuration  options,
	      and 4096 on systems built	with "configure	--with-tuning=small".

	  This	option	should	be unnecessary for the vast majority of	users.
	  The use of this option could even be harmful because	the  specified
	  therefore set	only when the default configuration causes  exhaustion
	  of file descriptors and the operational environment is known to sup-
	  port the specified number of sockets.	Note also that the actual max-
	  imum	number is normally a little fewer than the specified value be-
	  cause	named reserves some file descriptors for its internal use.

       -t directory
	      Chroot to	directory after	processing the command line arguments,
	      but before reading the configuration file.

	  This option should be	used in	conjunction with the -u	option,	as ch-
	  rooting a process running as root doesn't enhance security  on  most
	  privileges to	escape a chroot	jail.

       -U #listeners
	      Use #listeners worker threads to listen for incoming UDP packets
	      on  each	address.  If not specified, named will calculate a de-
	      fault value based	on the number of detected CPUs:	1 for  1  CPU,
	      and the number of	detected CPUs minus one	for machines with more
	      that value, but no higher. On Windows, the number	of UDP listen-
	      ers is hardwired to 1 and	this option has	no effect.

       -u user
	      Setuid to	user after completing privileged operations,  such  as
	      creating sockets that listen on privileged ports.

	  On  Linux,  named uses the kernel's capability mechanism to drop all
	  and  set process resource limits. Unfortunately, this	means that the
	  privileges to	be retained after setuid(2).

       -v     Report the version number	and exit.


       -X lock-file
	      prevent  duplicate  named	instances from running simultaneously.
	      If set to	none, the lock file check is disabled.

       -x cache-file

	  This	option	must not be used. It is	only of	interest to BIND 9 de-
	  velopers and may be removed or changed in a future release.

       server; rndc should be used instead.

       SIGHUP Force a reload of	the server.

	      Shut down	the server.


       A complete description is provided in the BIND 9	 Administrator	Refer-
       ence Manual.

       custom  permissions,  the  umask	should be set explicitly in the	script
       used to start the named process.

	      The default configuration	file.

	      The default process-id file.

       rndc(8),	 :manpage:`named.conf(5),  BIND	9 Administrator	Reference Man-

       Internet	Systems	Consortium

       2020, Internet Systems Consortium

9.16.6				  2020-08-10			      NAMED(8)


Want to link to this manual page? Use this URL:

home | help