Re: root servers + session-keyfile

--===============3935488471684948429==
Content-Type: multipart/alternative; boundary="0000000000002e51c806532faf93"

--0000000000002e51c806532faf93
Content-Type: text/plain; charset="UTF-8"

BIND hasn't needed an explicit hint zone for many years, even in 9.11, as
Internet root hints are built-in. The only time you would need to define a
different hint zone is if you are running on a network that is NOT the
internet, that has its own roots.
https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-session-keyfile
is still valid. If you needed it before, keep using it.

To answer your other question as well, BIND reads all files that are linked
from "named.conf" using "include" statements and treats them as a single
configuration. It is completely up to you whether you put some
configuration in separate files (Ubuntu does this, for example) or keep it
all in the one file. The end result is the same.

Cheers, Greg


On Mon, 1 Jun 2026 at 12:15, Renzo Marengo <[email protected]> wrote:

> I know In Bind 9.20.23 Stable version includes built-in root servers,
> keeping the hint zone in the configuration remains best practice to
> ensure it can be updated ?
> 1- I should create the zone "." into named.conf ?
>
> zone "." IN {
>         type hint;
>         file "named.ca";
> };
>
> 2- It's necessary to set session-keyfile ?
> e.g. session-keyfile "/run/named/session.key"
> I think 9.20.23 uses its standard (path+file), what do you think ?
>
> thanks
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list.
>

--0000000000002e51c806532faf93
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>BIND hasn&#39;t needed an explicit hint zone for many=
 years, even in=20
9.11, as Internet root hints are built-in. The only time you would need=20
to define a different hint zone is if you are running on a network that=20
is NOT the internet, that has its own roots.</div><div><a href=3D"https://b=
ind9.readthedocs.io/en/stable/reference.html#namedconf-statement-session-ke=
yfile" target=3D"_blank">https://bind9.readthedocs.io/en/stable/reference.h=
tml#namedconf-statement-session-keyfile</a> is still valid. If you needed i=
t before, keep using it.</div><div><br></div><div>To
 answer your other question as well, BIND reads all files that are=20
linked from &quot;named.conf&quot; using &quot;include&quot; statements and=
 treats them as a
 single configuration. It is completely up to you whether you put some=20
configuration in separate files (Ubuntu does this, for example) or keep=20
it all in the one file. The end result is the same.</div><div><br></div><di=
v>Cheers, Greg</div><br></div><br><div class=3D"gmail_quote gmail_quote_con=
tainer"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, 1 Jun 2026 at 12:15, =
Renzo Marengo &lt;<a href=3D"mailto:[email protected]">buckroger2011@=
gmail.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=
-left:1ex">I know In Bind 9.20.23 Stable version includes built-in root ser=
vers,<br>
keeping the hint zone in the configuration remains best practice to<br>
ensure it can be updated ?<br>
1- I should create the zone &quot;.&quot; into named.conf ?<br>
<br>
zone &quot;.&quot; IN {<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 type hint;<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 file &quot;<a href=3D"http://named.ca" rel=3D"n=
oreferrer" target=3D"_blank">named.ca</a>&quot;;<br>
};<br>
<br>
2- It&#39;s necessary to set session-keyfile ?<br>
e.g. session-keyfile &quot;/run/named/session.key&quot;<br>
I think 9.20.23 uses its standard (path+file), what do you think ?<br>
<br>
thanks<br>
-- <br>
Visit <a href=3D"https://lists.isc.org/mailman/listinfo/bind-users" rel=3D"=
noreferrer" target=3D"_blank">https://lists.isc.org/mailman/listinfo/bind-u=
sers</a> to unsubscribe from this list.<br>
</blockquote></div>

--0000000000002e51c806532faf93--

--===============3935488471684948429==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.

--===============3935488471684948429==--