BIND hasn't needed an explicit hint zone for many years, even in 9.11, as Internet root hints are built-in. The only time you would need to define a different hint zone is if you are running on a network that is NOT the internet, that has its own roots. https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-session-keyfile is still valid. If you needed it before, keep using it.
To answer your other question as well, BIND reads all files that are linked from "named.conf" using "include" statements and treats them as a single configuration. It is completely up to you whether you put some configuration in separate files (Ubuntu does this, for example) or keep it all in the one file. The end result is the same. Cheers, Greg On Mon, 1 Jun 2026 at 12:15, Renzo Marengo <[email protected]> wrote: > I know In Bind 9.20.23 Stable version includes built-in root servers, > keeping the hint zone in the configuration remains best practice to > ensure it can be updated ? > 1- I should create the zone "." into named.conf ? > > zone "." IN { > type hint; > file "named.ca"; > }; > > 2- It's necessary to set session-keyfile ? > e.g. session-keyfile "/run/named/session.key" > I think 9.20.23 uses its standard (path+file), what do you think ? > > thanks > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list. >
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
