<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Hi,<div><br></div><div>I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no need for the intermediate step. As usual, it’s recommended to do a test migration first if you want to be extra careful.<br><br>Ondrej<br><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 21. 4. 2023, at 9:41, Stacey Marshall <stacey.marshall@gmail.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
<div style="font-family: sans-serif;"><div class="plaintext" style="white-space: normal;"><p dir="auto">If it helps, my assessment was that one could skip 9.16 too.</p>
<p dir="auto">I recognise that this is thanks to the hard effort that ISC work to provide backward compatibility, and not by some accident.</p>
<p dir="auto">On Solaris 11.4 current shipping versions of BIND are</p>
<p dir="auto">$ pkg list -fa service/network/dns/bind
<br>
NAME (PUBLISHER) VERSION IFO
<br>
service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 ---
<br>
service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 ---
<br>
service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 ---
<br>
service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 ---
<br>
service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 ---
<br>
service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 ---
<br>
service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 ---
<br>
...</p>
<br><p dir="auto">It is possible to update from Solaris 11.4.45.0.1.119.0 to 11.4.55.0.1.138.1 and thereby skip 9.16 altogether.</p>
<p dir="auto">Regards,</p>
<p dir="auto">Stacey</p>
<p dir="auto">* 9.18.11 uses OpenSSL v3</p>
<p dir="auto">On 20 Apr 2023, at 17:26, Saleck wrote:</p>
</div><blockquote class="embedded" style="margin: 0 0 5px; padding-left: 5px; border-left: 2px solid #777777; color: #777777;"><div id="1277F1D2-8E7D-4871-99F4-72D07F3F80F0">
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Hi,</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">we are currently running several bind 9.11 servers on Debian buster machines. We would like to upgrade and wonder if we could skip version 9.16 altogether or if it's a necessary middle step.</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">We have read both</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;"><a href="https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916">https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916</a></p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">and</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;"><a href="https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918">https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918</a></p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">and it looks like there should be nothing that would break (we use only text and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. But better be safe then sorry. Therefore we are seeking advice. ;)</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">If it's possible, can anyone confirm zone transfers from master to slave would still work even if the servers ran different major versions? I know we won't be able to use TLS until both servers would run 9.18 but would the regular transfers still work?</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">It would help us a great deal if anyone could confirm this or (and) warn us if there is something that we are missing in our assessment.</p>
<br>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Kind regards,</p>
<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">David Bruha</p></div></blockquote>
<div class="plaintext" style="white-space: normal;">
<blockquote style="margin: 0 0 5px; padding-left: 5px; border-left: 2px solid #777777; color: #777777;"><p dir="auto">--
<br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" style="color: #777777;">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list</p>
<p dir="auto">ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" style="color: #777777;">https://www.isc.org/contact/</a> for more information.</p>
<p dir="auto">bind-users mailing list
<br>
bind-users@lists.isc.org
<br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" style="color: #777777;">https://lists.isc.org/mailman/listinfo/bind-users</a></p>
</blockquote></div>
</div>
<span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></div></body></html>