Is it possible to upgrade bind from 9.11 to 9.18 directly?

[Stacey Marshall]

If it helps, my assessment was that one could skip 9.16 too.

I recognise that this is thanks to the hard effort that ISC work to 
provide backward compatibility, and not by some accident.

On Solaris 11.4 current shipping versions of BIND are

$ pkg list -fa service/network/dns/bind
NAME (PUBLISHER)                                  VERSION                
     IFO
service/network/dns/bind                          
9.18.11.0.0-11.4.55.0.1.138.1 ---
service/network/dns/bind                          
9.16.33.0.0-11.4.54.0.1.138.0 ---
service/network/dns/bind                          
9.16.33.0.0-11.4.51.0.1.132.0 ---
service/network/dns/bind                          
9.16.33.0.0-11.4.50.0.1.126.2 ---
service/network/dns/bind                          
9.16.29.0.0-11.4.48.0.1.126.0 ---
service/network/dns/bind                          
9.11.37.0.0-11.4.45.0.1.119.0 ---
service/network/dns/bind                          
9.11.36.0.0-11.4.42.0.1.113.0 ---
...


It is possible to update from Solaris 11.4.45.0.1.119.0 to 
11.4.55.0.1.138.1 and thereby skip 9.16 altogether.

Regards,

Stacey

* 9.18.11 uses OpenSSL v3

On 20 Apr 2023, at 17:26, Saleck wrote:

> Hi,
>
> we are currently running several bind 9.11 servers on Debian buster 
> machines. We would
> like to upgrade and wonder if we could skip version 9.16 altogether or 
> if it's a necessary
> middle step.
>
> We have read both
>
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916[1]
>
> and
>
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918[2]
>
> and it looks like there should be nothing that would break (we use 
> only text and raw zone
> file types) if we did the direct 9.11 to 9.18 upgrade. But better be 
> safe then sorry.
> Therefore we are seeking advice. ;)
>
> If it's possible, can anyone confirm zone transfers from master to 
> slave would still work
> even if the servers ran different major versions? I know we won't be 
> able to use TLS until
> both servers would run 9.18 but would the regular transfers still 
> work?
>
> It would help us a great deal if anyone could confirm this or (and) 
> warn us if there is
> something that we are missing in our assessment.
>
> Kind regards,
> David Bruha
>
> --------
> [1] 
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
> [2] 
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918

> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
>
> ISC funds the development of this software with paid support 
> subscriptions. Contact us at https://www.isc.org/contact/ for more 
> information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230421/4c551a0f/attachment.htm>