Is it possible to upgrade bind from 9.11 to 9.18 directly?

[Saleck]

Hi,

thank you Ondřej and Stacy, we'll start testing next week.

Kind regards,
David Bruha

Dne pátek 21. dubna 2023 10:03:26 CEST, Ondřej Surý napsal(a):
> Hi,
> 
> I can confirm that it’s ok to skip 9.16 and go straight to 9.18. There’s no
> need for the intermediate step. As usual, it’s recommended to do a test
> migration first if you want to be extra careful.
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel
> obligated to reply outside your normal working hours.
> > On 21. 4. 2023, at 9:41, Stacey Marshall <stacey.marshall at gmail.com>
> > wrote:
> > 
> > 
> > If it helps, my assessment was that one could skip 9.16 too.
> > 
> > I recognise that this is thanks to the hard effort that ISC work to
> > provide backward compatibility, and not by some accident.
> > 
> > On Solaris 11.4 current shipping versions of BIND are
> > 
> > $ pkg list -fa service/network/dns/bind
> > NAME (PUBLISHER) VERSION IFO
> > service/network/dns/bind 9.18.11.0.0-11.4.55.0.1.138.1 ---
> > service/network/dns/bind 9.16.33.0.0-11.4.54.0.1.138.0 ---
> > service/network/dns/bind 9.16.33.0.0-11.4.51.0.1.132.0 ---
> > service/network/dns/bind 9.16.33.0.0-11.4.50.0.1.126.2 ---
> > service/network/dns/bind 9.16.29.0.0-11.4.48.0.1.126.0 ---
> > service/network/dns/bind 9.11.37.0.0-11.4.45.0.1.119.0 ---
> > service/network/dns/bind 9.11.36.0.0-11.4.42.0.1.113.0 ---
> > ...
> > 
> > 
> > It is possible to update from Solaris 11.4.45.0.1.119.0 to
> > 11.4.55.0.1.138.1 and thereby skip 9.16 altogether.
> > 
> > Regards,
> > 
> > Stacey
> > 
> > * 9.18.11 uses OpenSSL v3
> > 
> > On 20 Apr 2023, at 17:26, Saleck wrote:
> > 
> > Hi,
> > 
> > we are currently running several bind 9.11 servers on Debian buster
> > machines. We would like to upgrade and wonder if we could skip version
> > 9.16 altogether or if it's a necessary middle step.
> > 
> > We have read both
> > 
> > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
> > 
> > and
> > 
> > https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-t
> > o-918
> > 
> > and it looks like there should be nothing that would break (we use only
> > text and raw zone file types) if we did the direct 9.11 to 9.18 upgrade.
> > But better be safe then sorry. Therefore we are seeking advice. ;)
> > 
> > If it's possible, can anyone confirm zone transfers from master to slave
> > would still work even if the servers ran different major versions? I know
> > we won't be able to use TLS until both servers would run 9.18 but would
> > the regular transfers still work?
> > 
> > It would help us a great deal if anyone could confirm this or (and) warn
> > us if there is something that we are missing in our assessment.
> > 
> > Kind regards,
> > David Bruha


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230421/05b03a2d/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230421/05b03a2d/attachment.sig>