What are the functional differences of Bind9 - pkcs11, resolvconf, service,

Discussion in 'Server Operation' started by adamjedgar, Apr 24, 2019.

  1. adamjedgar

    adamjedgar Member

    as the question asks,
    what are the roles in Bind9 for each of the following:
    bind9.service
    bind9-pkcs11.service
    bind9-resolvconf.service

    at bootup/startup, which one should be enabled?

    Also, if I am pointing A records at my debian server for websites, what happens if none of the above are running?

    could the following wordpress error on one of my websites (reported in another thread) be related..."Update Failed: Download failed. cURL error 6: Could not resolve host:..."

    sorry about mixing up threads...i am just not sure what is related and what is not, because i also get a warning "could not reliably determine hostname, using server1.<mydomain.com>" (which is actually the correct hostname as outlined in my etc/hosts file as posted on other thread on these forums)
     
    Last edited: Apr 24, 2019
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Helpful reading material:
    https://wiki.debian.org/Bind9
    Code:
    man -k pkcs11
    I have used bind for tens of years, and have never bothered with bind9-pkcs11.service or bind9-resolvconf.service. Of those processes, I have only started or stopped bind9.service, or checked its status.
    This Tutorial contains info on testing name service is working: https://www.howtoforge.com/tutorial/setting-up-your-own-name-service-with-ispconfig/#nbsptesting
    If bind9.service is not running, name service queries go to the second name server. If also that is not running, hostnames do not resolve after caches expire, and you get Host foobar.tld not found: 3(NXDOMAIN).
     
    ahrasis likes this.
  3. adamjedgar

    adamjedgar Member

    ok so if i am using external registrar "A records" pointing at my webserver ipaddress for all domains on my server, i can completely disable bind9?
     
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    If you do not run name service on that host, I would remove bind9 completely. It is best to not have unnecessary services running.
     
    adamjedgar and ahrasis like this.
  5. sudhanshu arora

    sudhanshu arora New Member

    Thanks for this information.
     

Share This Page