Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?

2023-04-21 Thread Havard Eidnes via bind-users
Hi,

a partial response:

> If it's possible, can anyone confirm zone transfers from master
> to slave would still work even if the servers ran different
> major versions?

Yes, "of course", because the details of that transfer is
specified by the DNS protocol standards.

Regards,

- Håvard
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?

2023-04-21 Thread Saleck
Hi,

thank you Ondřej and Stacy, we'll start testing next week.

Kind regards,
David Bruha

Dne pátek 21. dubna 2023 10:03:26 CEST, Ondřej Surý napsal(a):
> Hi,
> 
> I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no
> need for the intermediate step. As usual, it’s recommended to do a test
> migration first if you want to be extra careful.
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel
> obligated to reply outside your normal working hours.
> > On 21. 4. 2023, at 9:41, Stacey Marshall 
> > wrote:
> > 
> > 
> > If it helps, my assessment was that one could skip 9.16 too.
> > 
> > I recognise that this is thanks to the hard effort that ISC work to
> > provide backward compatibility, and not by some accident.
> > 
> > On Solaris 11.4 current shipping versions of BIND are
> > 
> > $ pkg list -fa service/network/dns/bind
> > NAME (PUBLISHER) VERSION IFO
> > service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 ---
> > service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 ---
> > service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 ---
> > service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 ---
> > service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 ---
> > service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 ---
> > service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 ---
> > ...
> > 
> > 
> > It is possible to update from Solaris 11.4.45.0.1.119.0 to
> > 11.4.55.0.1.138.1 and thereby skip 9.16 altogether.
> > 
> > Regards,
> > 
> > Stacey
> > 
> > * 9.18.11 uses OpenSSL v3
> > 
> > On 20 Apr 2023, at 17:26, Saleck wrote:
> > 
> > Hi,
> > 
> > we are currently running several bind 9.11 servers on Debian buster
> > machines. We would like to upgrade and wonder if we could skip version
> > 9.16 altogether or if it's a necessary middle step.
> > 
> > We have read both
> > 
> > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
> > 
> > and
> > 
> > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-t
> > o-918
> > 
> > and it looks like there should be nothing that would break (we use only
> > text and raw zone file types) if we did the direct 9.11 to 9.18 upgrade.
> > But better be safe then sorry. Therefore we are seeking advice. ;)
> > 
> > If it's possible, can anyone confirm zone transfers from master to slave
> > would still work even if the servers ran different major versions? I know
> > we won't be able to use TLS until both servers would run 9.18 but would
> > the regular transfers still work?
> > 
> > It would help us a great deal if anyone could confirm this or (and) warn
> > us if there is something that we are missing in our assessment.
> > 
> > Kind regards,
> > David Bruha




signature.asc
Description: This is a digitally signed message part.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?

2023-04-21 Thread Ondřej Surý
Hi,

I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no 
need for the intermediate step. As usual, it’s recommended to do a test 
migration first if you want to be extra careful.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 21. 4. 2023, at 9:41, Stacey Marshall  wrote:
> 
> 
> If it helps, my assessment was that one could skip 9.16 too.
> 
> I recognise that this is thanks to the hard effort that ISC work to provide 
> backward compatibility, and not by some accident.
> 
> On Solaris 11.4 current shipping versions of BIND are
> 
> $ pkg list -fa service/network/dns/bind 
> NAME (PUBLISHER) VERSION IFO 
> service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 --- 
> service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 --- 
> service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 --- 
> service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 --- 
> service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 --- 
> service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 --- 
> service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 --- 
> ...
> 
> 
> It is possible to update from Solaris 11.4.45.0.1.119.0 to 11.4.55.0.1.138.1 
> and thereby skip 9.16 altogether.
> 
> Regards,
> 
> Stacey
> 
> * 9.18.11 uses OpenSSL v3
> 
> On 20 Apr 2023, at 17:26, Saleck wrote:
> 
> Hi,
> 
> we are currently running several bind 9.11 servers on Debian buster machines. 
> We would like to upgrade and wonder if we could skip version 9.16 altogether 
> or if it's a necessary middle step.
> 
> We have read both
> 
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
> 
> and
> 
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
> 
> and it looks like there should be nothing that would break (we use only text 
> and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. But 
> better be safe then sorry. Therefore we are seeking advice. ;)
> 
> If it's possible, can anyone confirm zone transfers from master to slave 
> would still work even if the servers ran different major versions? I know we 
> won't be able to use TLS until both servers would run 9.18 but would the 
> regular transfers still work?
> 
> It would help us a great deal if anyone could confirm this or (and) warn us 
> if there is something that we are missing in our assessment.
> 
> Kind regards,
> David Bruha
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> bind-users mailing list 
> bind-users@lists.isc.org 
> https://lists.isc.org/mailman/listinfo/bind-users
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?

2023-04-21 Thread Stacey Marshall

If it helps, my assessment was that one could skip 9.16 too.

I recognise that this is thanks to the hard effort that ISC work to 
provide backward compatibility, and not by some accident.


On Solaris 11.4 current shipping versions of BIND are

$ pkg list -fa service/network/dns/bind
NAME (PUBLISHER)  VERSION
IFO
service/network/dns/bind  
9.18.11.0.0-11.4.55.0.1.138.1 ---
service/network/dns/bind  
9.16.33.0.0-11.4.54.0.1.138.0 ---
service/network/dns/bind  
9.16.33.0.0-11.4.51.0.1.132.0 ---
service/network/dns/bind  
9.16.33.0.0-11.4.50.0.1.126.2 ---
service/network/dns/bind  
9.16.29.0.0-11.4.48.0.1.126.0 ---
service/network/dns/bind  
9.11.37.0.0-11.4.45.0.1.119.0 ---
service/network/dns/bind  
9.11.36.0.0-11.4.42.0.1.113.0 ---

...


It is possible to update from Solaris 11.4.45.0.1.119.0 to 
11.4.55.0.1.138.1 and thereby skip 9.16 altogether.


Regards,

Stacey

* 9.18.11 uses OpenSSL v3

On 20 Apr 2023, at 17:26, Saleck wrote:


Hi,

we are currently running several bind 9.11 servers on Debian buster 
machines. We would
like to upgrade and wonder if we could skip version 9.16 altogether or 
if it's a necessary

middle step.

We have read both

https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916[1]

and

https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918[2]

and it looks like there should be nothing that would break (we use 
only text and raw zone
file types) if we did the direct 9.11 to 9.18 upgrade. But better be 
safe then sorry.

Therefore we are seeking advice. ;)

If it's possible, can anyone confirm zone transfers from master to 
slave would still work
even if the servers ran different major versions? I know we won't be 
able to use TLS until
both servers would run 9.18 but would the regular transfers still 
work?


It would help us a great deal if anyone could confirm this or (and) 
warn us if there is

something that we are missing in our assessment.

Kind regards,
David Bruha


[1] 
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
[2] 
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918



--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list


ISC funds the development of this software with paid support 
subscriptions. Contact us at https://www.isc.org/contact/ for more 
information.



bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Is it possible to upgrade bind from 9.11 to 9.18 directly?

2023-04-20 Thread Saleck
Hi,

we are currently running several bind 9.11 servers on Debian buster machines. 
We would 
like to upgrade and wonder if we could skip version 9.16 altogether or if it's 
a necessary 
middle step.

We have read both

https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916[1]

and

https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918[2]

and it looks like there should be nothing that would break (we use only text 
and raw zone 
file types) if we did the direct 9.11 to 9.18 upgrade. But better be safe then 
sorry. 
Therefore we are seeking advice. ;)

If it's possible, can anyone confirm zone transfers from master to slave would 
still work 
even if the servers ran different major versions? I know we won't be able to 
use TLS until 
both servers would run 9.18 but would the regular transfers still work?

It would help us a great deal if anyone could confirm this or (and) warn us if 
there is 
something that we are missing in our assessment.

Kind regards,
David Bruha


[1] https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
[2] 
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918


signature.asc
Description: This is a digitally signed message part.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users