Bind 8 in HP-UX 11.0 (Upgrade from Bind 4)

[Mad_1]

Dear all

In my current environment, all servers are running in HP-UX 10.20 with named 4.8.3. One of the server is running as the Primary DNS server, and the other are running as Secondary DNS server.

There will be a upgrade exercise to upgrade all servers to HP-UX 11.0. The concern is the upgrade exercise will last for several months, that means there will be a period HP-UX 10.20 and HP-UX 11.0 are co-existing.

I have the following 2 questions:

1. What version of BIND should I choose to upgrade?
2. Most probably, the Primary DNS server will upgrade first, is there any problem introduce if the Primary DNS server is HP-UX 11.0 with BIND 8 (or BIND 9) but those Secondary DNS server is still HP-UX 10.20 with BIND 4.8.3?

Thank

[Brian Hackley · Accepted solution]

Ryan,

First of all, HPUX 10.20 and 11.0 both current BIND patches are BIND 4.9.7. You should at least get your 10.20 BIND systems patched up so that you incorporate all the various security fixes.
10.20 patch PHNE_23277 11.0 is PHNE_23274.

Currently there is no BIND 8.X nor 9.X available for 10.20. As of today, we have an HP-supported BIND 8.1.2 available for download for 11.0. Look at http://www.software.hp.com/products/DNS_BIND/index.html
for details. You'll find an excellent link on upgrading to the 8.X/9.X DNS from 4.9.X is included there.

You most certainly can mix BIND 4.9.7 secondaries with BIND 8.1.X master servers.

The latest BIND from ISC that HP has is 9.2. We are in the process of getting the HPUX 11.0 part released for download from http://www.software.hp.com
The 11.11 port is available and the 11.0 port is still a couple of months away from GR.

I hope this helps you with your migration plans,

-> Brian Hackley

[Mad_1]

Thank you Brian, your reply is definitely help in our concerns.

Furthermore, do you know will HP do some work on 8.2.x or 8.3.x? As some discussions in this forum mentioned that 8.1.x still has some security issues. Is it safe to use 8.1.2?