Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?
Hi, a partial response: > If it's possible, can anyone confirm zone transfers from master > to slave would still work even if the servers ran different > major versions? Yes, "of course", because the details of that transfer is specified by the DNS protocol standards. Regards, - Håvard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?
Hi, thank you Ondřej and Stacy, we'll start testing next week. Kind regards, David Bruha Dne pátek 21. dubna 2023 10:03:26 CEST, Ondřej Surý napsal(a): > Hi, > > I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no > need for the intermediate step. As usual, it’s recommended to do a test > migration first if you want to be extra careful. > > Ondrej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > > On 21. 4. 2023, at 9:41, Stacey Marshall > > wrote: > > > > > > If it helps, my assessment was that one could skip 9.16 too. > > > > I recognise that this is thanks to the hard effort that ISC work to > > provide backward compatibility, and not by some accident. > > > > On Solaris 11.4 current shipping versions of BIND are > > > > $ pkg list -fa service/network/dns/bind > > NAME (PUBLISHER) VERSION IFO > > service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 --- > > service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 --- > > service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 --- > > service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 --- > > service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 --- > > service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 --- > > service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 --- > > ... > > > > > > It is possible to update from Solaris 11.4.45.0.1.119.0 to > > 11.4.55.0.1.138.1 and thereby skip 9.16 altogether. > > > > Regards, > > > > Stacey > > > > * 9.18.11 uses OpenSSL v3 > > > > On 20 Apr 2023, at 17:26, Saleck wrote: > > > > Hi, > > > > we are currently running several bind 9.11 servers on Debian buster > > machines. We would like to upgrade and wonder if we could skip version > > 9.16 altogether or if it's a necessary middle step. > > > > We have read both > > > > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916 > > > > and > > > > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-t > > o-918 > > > > and it looks like there should be nothing that would break (we use only > > text and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. > > But better be safe then sorry. Therefore we are seeking advice. ;) > > > > If it's possible, can anyone confirm zone transfers from master to slave > > would still work even if the servers ran different major versions? I know > > we won't be able to use TLS until both servers would run 9.18 but would > > the regular transfers still work? > > > > It would help us a great deal if anyone could confirm this or (and) warn > > us if there is something that we are missing in our assessment. > > > > Kind regards, > > David Bruha signature.asc Description: This is a digitally signed message part. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?
Hi, I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no need for the intermediate step. As usual, it’s recommended to do a test migration first if you want to be extra careful. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 21. 4. 2023, at 9:41, Stacey Marshall wrote: > > > If it helps, my assessment was that one could skip 9.16 too. > > I recognise that this is thanks to the hard effort that ISC work to provide > backward compatibility, and not by some accident. > > On Solaris 11.4 current shipping versions of BIND are > > $ pkg list -fa service/network/dns/bind > NAME (PUBLISHER) VERSION IFO > service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 --- > service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 --- > service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 --- > service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 --- > service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 --- > service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 --- > service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 --- > ... > > > It is possible to update from Solaris 11.4.45.0.1.119.0 to 11.4.55.0.1.138.1 > and thereby skip 9.16 altogether. > > Regards, > > Stacey > > * 9.18.11 uses OpenSSL v3 > > On 20 Apr 2023, at 17:26, Saleck wrote: > > Hi, > > we are currently running several bind 9.11 servers on Debian buster machines. > We would like to upgrade and wonder if we could skip version 9.16 altogether > or if it's a necessary middle step. > > We have read both > > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916 > > and > > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918 > > and it looks like there should be nothing that would break (we use only text > and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. But > better be safe then sorry. Therefore we are seeking advice. ;) > > If it's possible, can anyone confirm zone transfers from master to slave > would still work even if the servers ran different major versions? I know we > won't be able to use TLS until both servers would run 9.18 but would the > regular transfers still work? > > It would help us a great deal if anyone could confirm this or (and) warn us > if there is something that we are missing in our assessment. > > Kind regards, > David Bruha > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?
If it helps, my assessment was that one could skip 9.16 too. I recognise that this is thanks to the hard effort that ISC work to provide backward compatibility, and not by some accident. On Solaris 11.4 current shipping versions of BIND are $ pkg list -fa service/network/dns/bind NAME (PUBLISHER) VERSION IFO service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 --- service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 --- service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 --- service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 --- service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 --- service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 --- service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 --- ... It is possible to update from Solaris 11.4.45.0.1.119.0 to 11.4.55.0.1.138.1 and thereby skip 9.16 altogether. Regards, Stacey * 9.18.11 uses OpenSSL v3 On 20 Apr 2023, at 17:26, Saleck wrote: Hi, we are currently running several bind 9.11 servers on Debian buster machines. We would like to upgrade and wonder if we could skip version 9.16 altogether or if it's a necessary middle step. We have read both https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916[1] and https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918[2] and it looks like there should be nothing that would break (we use only text and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. But better be safe then sorry. Therefore we are seeking advice. ;) If it's possible, can anyone confirm zone transfers from master to slave would still work even if the servers ran different major versions? I know we won't be able to use TLS until both servers would run 9.18 but would the regular transfers still work? It would help us a great deal if anyone could confirm this or (and) warn us if there is something that we are missing in our assessment. Kind regards, David Bruha [1] https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916 [2] https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918 -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
