Precautions for upgrading from 9.7.7 to 9.9.2-P2

Lawrence K. Chen, P.Eng. lkchen at
Thu Mar 28 22:12:20 UTC 2013

Hmmm, I forget just what all I muttered when I upgraded from 9.7 to 9.9.2-P1.  I think the main beef I had was doing it the day before I left for LISA'12.... guess I didn't join this list until around that time.

As, I recall...the main thing that tripped me up was change in empty-zones behavior.  It needs to be explicitly disabled (either totally or just for the zones you use).

There were a lot of cosmetic saying you've requested NSEC3, but don't have such a key, or lots of RSA_verify failed messages....

The switch to raw slave zone files was also scary the first time I saw it...and later having to name slave zone files consistently, so that they can be easily read now.

This switch also broke some zones that I'm slave for, where I had lost contact with the master.  Strange that one of the zones, took almost 3 months before they finally asked why they weren't resolving off of our servers anymore ... they hadn't been using the domain for email for years, but it was the only contact info we had for them (and it matched their SOA.)

----- Original Message -----
> Wang, Yu <ywang10 at> wrote:
> >
> > I am in the process of preparing bind upgrade from 9.7.7 to
> > 9.9.2-p2. I
> > am reading release notes from 9.8.0 up to see if there are new
> > things/features that might cause issues. I would welcome and
> > appreciate
> > advice on precautions I should take before, during, and after
> > upgrade.
> The main thing that you are likely to trip over is the change in the
> default format of slaved zones, from text to raw. named should move
> the
> old files out of the way and retransfer the zones, and complain about
> it
> in the log. You probably want to remove the old slave zone files,
> either
> before upgrading (to avoid upsetting named) or afterwards (to keep
> things
> tidy).

Who: Lawrence K. Chen, P.Eng. - W0LKC - Senior Unix Systems Administrator
For: Enterprise Server Technologies (EST) -- & SafeZone Ally
Snail: Computing and Telecommunications Services (CTS)
Kansas State University, 109 East Stadium, Manhattan, KS 66506-3102
Phone: (785) 532-4916 - Fax: (785) 532-3515 - Email: lkchen at
Web: - Where: 11 Hale Library

More information about the bind-users mailing list