Hi, I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no need for the intermediate step. As usual, it’s recommended to do a test migration first if you want to be extra careful.
Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 21. 4. 2023, at 9:41, Stacey Marshall <stacey.marsh...@gmail.com> wrote: > > > If it helps, my assessment was that one could skip 9.16 too. > > I recognise that this is thanks to the hard effort that ISC work to provide > backward compatibility, and not by some accident. > > On Solaris 11.4 current shipping versions of BIND are > > $ pkg list -fa service/network/dns/bind > NAME (PUBLISHER) VERSION IFO > service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 --- > service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 --- > service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 --- > service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 --- > service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 --- > service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 --- > service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 --- > ... > > > It is possible to update from Solaris 11.4.45.0.1.119.0 to 11.4.55.0.1.138.1 > and thereby skip 9.16 altogether. > > Regards, > > Stacey > > * 9.18.11 uses OpenSSL v3 > > On 20 Apr 2023, at 17:26, Saleck wrote: > > Hi, > > we are currently running several bind 9.11 servers on Debian buster machines. > We would like to upgrade and wonder if we could skip version 9.16 altogether > or if it's a necessary middle step. > > We have read both > > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916 > > and > > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918 > > and it looks like there should be nothing that would break (we use only text > and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. But > better be safe then sorry. Therefore we are seeking advice. ;) > > If it's possible, can anyone confirm zone transfers from master to slave > would still work even if the servers ran different major versions? I know we > won't be able to use TLS until both servers would run 9.18 but would the > regular transfers still work? > > It would help us a great deal if anyone could confirm this or (and) warn us > if there is something that we are missing in our assessment. > > Kind regards, > David Bruha > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users