Is it possible to upgrade bind from 9.11 to 9.18 directly?

[Ondřej Surý]

Hi,

I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no need for the intermediate step. As usual, it’s recommended to do a test migration first if you want to be extra careful.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 21. 4. 2023, at 9:41, Stacey Marshall <stacey.marshall at gmail.com> wrote:
> 
> 
> If it helps, my assessment was that one could skip 9.16 too.
> 
> I recognise that this is thanks to the hard effort that ISC work to provide backward compatibility, and not by some accident.
> 
> On Solaris 11.4 current shipping versions of BIND are
> 
> $ pkg list -fa service/network/dns/bind 
> NAME (PUBLISHER) VERSION IFO 
> service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 --- 
> service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 --- 
> service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 --- 
> service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 --- 
> service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 --- 
> service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 --- 
> service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 --- 
> ...
> 
> 
> It is possible to update from Solaris 11.4.45.0.1.119.0 to 11.4.55.0.1.138.1 and thereby skip 9.16 altogether.
> 
> Regards,
> 
> Stacey
> 
> * 9.18.11 uses OpenSSL v3
> 
> On 20 Apr 2023, at 17:26, Saleck wrote:
> 
> Hi,
> 
> we are currently running several bind 9.11 servers on Debian buster machines. We would like to upgrade and wonder if we could skip version 9.16 altogether or if it's a necessary middle step.
> 
> We have read both
> 
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
> 
> and
> 
> https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
> 
> and it looks like there should be nothing that would break (we use only text and raw zone file types) if we did the direct 9.11 to 9.18 upgrade. But better be safe then sorry. Therefore we are seeking advice. ;)
> 
> If it's possible, can anyone confirm zone transfers from master to slave would still work even if the servers ran different major versions? I know we won't be able to use TLS until both servers would run 9.18 but would the regular transfers still work?
> 
> It would help us a great deal if anyone could confirm this or (and) warn us if there is something that we are missing in our assessment.
> 
> Kind regards,
> David Bruha
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> bind-users mailing list 
> bind-users at lists.isc.org 
> https://lists.isc.org/mailman/listinfo/bind-users
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230421/9defd01d/attachment-0001.htm>