DNS Configuration and Management Manual (G06.27+, H06.05+, J06.03+)

HP DNS Configuration and Management Manual—529432-003
3-1
3
DNS Configuration on the NonStop
Server
This section provides background information, procedures, and examples for
configuring the lightweight resolver, security and other tasks specific to NonStop
systems. Topics in this section include:
•
Starting the named Demon on page 3-1
•
Using the Lightweight Resolver on page 3-1
•
Understanding DNS Security Threats on page 3-3
•
Implementing DNS Security Solutions on page 3-8
•
Managing Persistence for the named Process on page 3-22
•
Specifying a TCP/IP Process by Using a Runtime Option on page 3-23
•
Specifying a Different resolv.conf File on page 3-23
•
Specifying Multiple Names in the Resolver by Using Sections on page 3-24
•
Tips and Important Tasks on page 3-26
Starting the named Demon
The syntax for the named command is:
For information about the parameters to the named command, see the man pages in
OSS. (See Table 2-1, OSS Commands to Access man Pages, on page 2-3.)
Using the Lightweight Resolver
IPv6 introduces a new complexity into the host name resolution process, such as
following A6 chains and DNAME records and simultaneous lookup of IPv4 and IPv6
addresses. These features are difficult to implement in a traditional stub resolver.
Instead, BIND 9 (and higher) provides resolution services to local clients using a
combination of a lightweight resolver library and lightweight resolver demon process
named [-4] [-6] [-c config-file] [-d debug-level] [-f] [-g]
[-p port] [-s] [-t directory] [-T tcpip-process-name] [-u ]
[-v] [-x cache-file]
Example 3-1. Starting named
$ named -g -c /etc/dns_secure/named.conf