If it helps, my assessment was that one could skip 9.16 too.
I recognise that this is thanks to the hard effort that ISC work to
provide backward compatibility, and not by some accident.
On Solaris 11.4 current shipping versions of BIND are
$ pkg list -fa service/network/dns/bind
NAME (PUBLISHER) VERSION
IFO
service/network/dns/bind
9.18.11.0.0-11.4.55.0.1.138.1 ---
service/network/dns/bind
9.16.33.0.0-11.4.54.0.1.138.0 ---
service/network/dns/bind
9.16.33.0.0-11.4.51.0.1.132.0 ---
service/network/dns/bind
9.16.33.0.0-11.4.50.0.1.126.2 ---
service/network/dns/bind
9.16.29.0.0-11.4.48.0.1.126.0 ---
service/network/dns/bind
9.11.37.0.0-11.4.45.0.1.119.0 ---
service/network/dns/bind
9.11.36.0.0-11.4.42.0.1.113.0 ---
...
It is possible to update from Solaris 11.4.45.0.1.119.0 to
11.4.55.0.1.138.1 and thereby skip 9.16 altogether.
Regards,
Stacey
* 9.18.11 uses OpenSSL v3
On 20 Apr 2023, at 17:26, Saleck wrote:
Hi,
we are currently running several bind 9.11 servers on Debian buster
machines. We would
like to upgrade and wonder if we could skip version 9.16 altogether or
if it's a necessary
middle step.
We have read both
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916[1]
and
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918[2]
and it looks like there should be nothing that would break (we use
only text and raw zone
file types) if we did the direct 9.11 to 9.18 upgrade. But better be
safe then sorry.
Therefore we are seeking advice. ;)
If it's possible, can anyone confirm zone transfers from master to
slave would still work
even if the servers ran different major versions? I know we won't be
able to use TLS until
both servers would run 9.18 but would the regular transfers still
work?
It would help us a great deal if anyone could confirm this or (and)
warn us if there is
something that we are missing in our assessment.
Kind regards,
David Bruha
--------
[1]
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
[2]
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support
subscriptions. Contact us at https://www.isc.org/contact/ for more
information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
