dns/bind9-devel 9.21.27 FreeBSD

BIND DNS suite with updated DNSSEC and DNS64

System: FreeBSD
Repository: FreeBSD ports
Maintainer: [email protected]
Last update: 2026-10-21
Commit: 07723370c8
License: MPL20
Categories: dns, net
Package size: 9659.3 KiB, 27490.0 KiB installed

Description

BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND architecture. Some of the important features of BIND 9 are:

DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support

See the CHANGES file for more information on new features.

In the other systems

System

Port

Version

FreeBSD

dns/bind9-devel

9.21.27

MidnightBSD

dns/bind9-devel

9.21.27

Install

Binary package:

pkg install bind9-devel

From the ports tree:

cd /usr/ports/dns/bind9-devel/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	bind9-devel>0:dns/bind9-devel
LIB_DEPENDS=	libdns-9.21.27.so:dns/bind9-devel

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	aarch64	amd64	armv6	armv7	i386
FreeBSD:14:latest	9.21.26	9.21.26	-	9.21.11	9.21.26
FreeBSD:14:quarterly	9.21.26	9.21.26	n/a	9.21.11	9.21.26
FreeBSD:15:latest	9.21.26	9.21.26	n/a	9.21.10	9.21.11
FreeBSD:15:quarterly	9.21.26	9.21.26	n/a	n/a	n/a
FreeBSD:16:latest	9.21.26	9.21.26	n/a	n/a	n/a
FreeBSD:16:quarterly	n/a	n/a	n/a	n/a	n/a

Dependencies

As this port's Makefile names them.

Library 4

liblmdb0.so : databases/lmdb0
libnghttp2.so : www/libnghttp2
liburcu.so : sysutils/liburcu
libuv.so : devel/libuv

The full lists below include those, and their dependencies in turn.

Build dependencies 58

Run dependencies 18

No port depends on this one.

Configuration

Options name: dns_bind

Option

Default

Description

DNSTAP

Provides fast passive logging of DNS messages

DOCS

off

Build and/or install documentation

GEOIP

off

GeoIP IP location support

GSSAPI_BASE

off

Using ${${OSREL:R} < 15:?Heimdal in base (nsupdate is broken):MIT in base}

GSSAPI_HEIMDAL

off

Using security/heimdal (nsupdate is broken)

GSSAPI_MIT

off

Using security/krb5

GSSAPI_NONE

off

Disable

IDN

International Domain Names support

OVERRIDECACHE

off

Use the override-cache patch

QUERYTRACE

off

Enable the very verbose query tracelogging

START_LATE

off

Start BIND late in the boot process (see help)

STATS_JSON

Enable JSON statistics channel

STATS_XML

Enable XML statistics channel

USES: compiler:c11 cpe gnome libedit meson perl5 pkgconfig ssl tar:xz
Service scripts: none

Message after installing

BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart

The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.

+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Files

Manual pages 17

ddns-confgen(8)
filter-a(8)
filter-aaaa(8)
named(8)
named-checkconf(1)
named-checkzone(1)
named-compilezone(1)
named-journalprint(1)
named-makejournal(1)
named-nzd2nzf(1)
named-wireformat(1)
named.conf(5)
rndc(8)
rndc-confgen(8)
rndc.conf(5)
synthrecord(8)
tsig-keygen(8)

pkg-plist 275

bin/named-checkconf
bin/named-checkzone
bin/named-compilezone
bin/named-journalprint
bin/named-makejournal
bin/named-nzd2nzf
bin/named-wireformat
@sample etc/mtree/BIND.chroot.dist.sample
@sample etc/mtree/BIND.chroot.local.dist.sample
@sample etc/bind9-devel/named.conf.sample
etc/bind9-devel/named.root
etc/bind9-devel/primary/empty.db
etc/bind9-devel/primary/localhost-forward.db
etc/bind9-devel/primary/localhost-reverse.db
include/dns/acl.h
include/dns/adb.h
include/dns/badcache.h
include/dns/bit.h
include/dns/byaddr.h
include/dns/cache.h
include/dns/callbacks.h
include/dns/catz.h
include/dns/cert.h
include/dns/client.h
include/dns/clientinfo.h
include/dns/compress.h
include/dns/db.h
include/dns/dbiterator.h
include/dns/deleg.h
include/dns/diff.h
include/dns/dispatch.h
include/dns/dlz.h
include/dns/dlz_dlopen.h
include/dns/dns64.h
include/dns/dnssec.h
include/dns/dnstap.h
include/dns/ds.h
include/dns/dsdigest.h
include/dns/dsync.h
include/dns/dyndb.h
include/dns/ecs.h
include/dns/ede.h
include/dns/edns.h
include/dns/fixedname.h
include/dns/forward.h
include/dns/geoip.h
include/dns/ipkeylist.h
include/dns/iptable.h
include/dns/journal.h
include/dns/kasp.h
include/dns/keydata.h
include/dns/keyflags.h
include/dns/keymgr.h
include/dns/keystore.h
include/dns/keytable.h
include/dns/keyvalues.h
include/dns/lib.h
include/dns/master.h
include/dns/masterdump.h
include/dns/message.h
include/dns/name.h
include/dns/nametree.h
include/dns/ncache.h
include/dns/notify.h
include/dns/nsec.h
include/dns/nsec3.h
include/dns/nta.h
include/dns/opcode.h
include/dns/order.h
include/dns/peer.h
include/dns/private.h
include/dns/qp.h
include/dns/rcode.h
include/dns/rdata.h
include/dns/rdataclass.h
include/dns/rdatalist.h
include/dns/rdataset.h
include/dns/rdatasetiter.h
include/dns/rdataslab.h
include/dns/rdatatype.h
include/dns/rdatavec.h
include/dns/remote.h
include/dns/request.h
include/dns/resolver.h
include/dns/result.h
include/dns/rootns.h
include/dns/rpz.h
include/dns/rriterator.h
include/dns/rrl.h
include/dns/sdlz.h
include/dns/secalg.h
include/dns/secproto.h
include/dns/skr.h
include/dns/soa.h
include/dns/ssu.h
include/dns/stats.h
include/dns/time.h
include/dns/tkey.h
include/dns/trace.h
include/dns/transport.h

The first 100 are listed.

distinfo 1

File

Size

SHA256

bind-9.21.27.tar.xz

5.601244e+06

a579fee35da9042b656edcc41580f822c08604d9a5710cec958e8490d7eba306

Master sites 1

ISC/bind9/9.21.27

Commit history 8

Date Commit Credits Log message

2026-10-21

07723370c8

Mathieu Arnold

dns/bind9-devel: update to 9.21.27

Changes: https://downloads.isc.org/isc/bind9/9.21.27/doc/arm/html/notes.html#notes-for-bind-9-21-27 Security: CVE-2026-19630 CVE-2026-94300 CVE-2026-96888 CVE-2026-97313

2026-10-20

85ba298b7e

Baptiste Daroussin

databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are incompatibles as well. Rename or relocate everything databases/lmdb0 installs so that it no longer overlaps with databases/lmdb: - the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0 - the header is include/lmdb0/lmdb.h - the linker name is liblmdb0.so, the shared object keeps its ABI name liblmdb.so.0 so already linked programs are unaffected - the pkg-config file is lmdb0.pc A compatibility prefix holding the previous layout is also installed under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that build systems which expect to find lmdb.h and -llmdb relative to a single directory only need a path change. Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease …

2026-09-28 0768760099 Mathieu Arnold *: pet portfmt

2026-09-16

076689801f

Mathieu Arnold

dns/bind9-devel: update to 9.21.26

Changes: https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html Security: CVE-2026-19668 CVE-2026-19033 CVE-2026-77119 CVE-2026-19941 CVE-2026-19666 CVE-2026-19667 CVE-2026-75029 CVE-2026-77692 CVE-2026-81736 CVE-2026-76163 CVE-2026-78301 CVE-2026-80274 CVE-2026-81563

2026-08-19 0760935063 Mathieu Arnold dns/bind9*: building with heimdal is broken on 15+

The latest 5 of 8 in the history this site was built from.