# Install kea with Homebrew, apk, apt, dnf, Nix, pacman, zypper

DHCP server. Version 3.2.0 via Homebrew; verified 2026-06-27.

## Install

```sh
sudo av install brew:kea
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install kea
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add kea
```

  Evidence: Alpine Linux edge package indexes: kea from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install kea
```

  Evidence: Debian stable package indexes: kea from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install kea
```

  Evidence: Fedora Rawhide package metadata: kea from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#kea
```

  Evidence: nixpkgs package indexes: pkgs/by-name/ke/kea/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S kea
```

  Evidence: Arch Linux sync databases: kea from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install kea
```

  Evidence: openSUSE Tumbleweed package metadata: kea from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

## Package facts

- **Package key:** brew:kea
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/kea>
- **Version:** 3.2.0
- **Source summary:** DHCP server
- **Homepage:** <https://www.isc.org/kea/>
- **Repository:** <https://gitlab.isc.org/isc-projects/kea>
- **Upstream docs:** <https://kea.readthedocs.io/>
- **License:** MPL-2.0
- **Source archive:** <https://downloads.isc.org/isc/kea/3.2.0/kea-3.2.0.tar.xz>
- **Last updated:** 2026-06-27T22:35:12Z
- **Generated:** 2026-07-08T18:08:21+00:00

## Executables

- kea-admin (cli)
- kea-ctrl-agent (cli)
- kea-dhcp-ddns (cli)
- kea-dhcp4 (cli)
- kea-dhcp6 (cli)
- kea-lfc (cli)
- kea-msg-compiler (cli)
- kea-shell (cli)
- keactrl (cli)
- perfdhcp (cli)
- kea-admin (alias)
- kea-ctrl-agent (alias)
- kea-dhcp-ddns (alias)
- kea-dhcp4 (alias)
- kea-dhcp6 (alias)
- kea-lfc (alias)
- kea-msg-compiler (alias)
- kea-shell (alias)
- keactrl (alias)
- perfdhcp (alias)

## Dependencies

- boost
- log4cplus
- openssl@3

## Build dependencies

- bison
- meson
- ninja
- pkgconf
- python@3.14

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 3.2.0
- Package-manager updated: 2026-06-27
- Local data: ok
- Upstream repository: https://www.isc.org/kea/
- info: Release/tag comparison is only available for GitHub repositories.
## Project history and usage

Kea is Internet Systems Consortium's modern open-source DHCP server suite. It provides DHCPv4, DHCPv6, DHCP-DDNS, control, database-maintenance, REST client, and benchmarking tools, and it was designed as ISC's next-generation successor path for the older ISC DHCP server.

### Project history

Kea grew out of the BIND 10-era DHCP work inside ISC. The official manual pages record the first DHCPv6 daemon code in June 2011 and the first DHCPv4 daemon code in November 2011 by Tomek Mrugalski, followed by the DHCP-DDNS process in May 2013 by Thomas Markwalder. In mid-2014, Kea was decoupled from the BIND 10 framework and became a standalone DHCP server with renamed kea-dhcp4, kea-dhcp6, and kea-dhcp-ddns binaries.

ISC announced Kea 1.0.0 on 2015-12-29. ISC's 2015 open-source accomplishments post described Kea 1.0 as a major update with lease expiration, client classification, DHCPv4 and DHCPv6 DECLINE support, PXE and iPXE boot support, and limited MySQL host-reservation storage. The 1.1 release in 2016 expanded host reservations to MySQL and PostgreSQL and positioned Kea for datacenter, ISP, and enterprise DHCP automation.

### Adoption history

Kea adoption is driven by operators who need a maintained DHCP server with database-backed leases, hooks, a control plane, and automation hooks beyond the flat-file heritage of ISC DHCP. ISC's DHCP history page frames Kea as a new implementation intended to replace the aging ISC DHCP, and ISC's Kea product page presents it as widely deployed open-source DHCP server software for Linux and Unix-like systems.

Kea also became important to appliance, ISP, and enterprise packaging because ISC DHCP reached end-of-life status while Kea continued to receive active releases and commercial support. That transition made Kea a default answer for packagers maintaining DHCP service stacks.

### How it is used

Kea is normally deployed as one or more cooperating daemons: kea-dhcp4 for IPv4 leases, kea-dhcp6 for IPv6 leases and prefix delegation, kea-dhcp-ddns for DNS update requests, keactrl for service control, and kea-shell for interacting with the REST control interface. Administrators configure it through JSON configuration files and can integrate SQL backends and hook libraries for larger operational environments.

### Why package nerds care

Kea matters to package nerds because it is the rare infrastructure daemon where the package boundary exposes a whole operational architecture: multiple daemons, sample configs, database schema tooling, hooks, and migration pressure from a famous predecessor. It is also a case study in how a foundational Unix network service gets replaced without changing the underlying IETF protocol.

### Timeline

- 2011-06: The b10-dhcp6 daemon was first coded.
- 2011-11: The b10-dhcp4 daemon was first coded.
- 2013-05: The b10-dhcp-ddns process was first coded.
- 2014-07: Kea was decoupled from BIND 10 and its DHCP-DDNS binary was renamed.
- 2015-12-29: Kea 1.0.0 was announced.
- 2016: Kea 1.1 expanded database-backed host reservations.
- 2019: ISC released a migration utility to help translate ISC DHCP configuration to Kea syntax.

### Related projects

- Kea is directly related to ISC DHCP, BIND 10, Stork for graphical management, DHCPv4 and DHCPv6 IETF standards, SQL database backends, and ISC's broader BIND and network-operations ecosystem.

### Sources

- <https://kea.readthedocs.io/en/stable/arm/intro.html>
- <https://kea.readthedocs.io/en/stable/man/kea-dhcp-ddns.8.html>
- <https://kea.readthedocs.io/en/stable/man/kea-dhcp4.8.html>
- <https://kea.readthedocs.io/en/stable/man/kea-dhcp6.8.html>
- <https://lists.isc.org/pipermail/kea-announce/2015-December/000014.html>
- <https://www.isc.org/blogs/2015-isc-open-source-accomplishments/>
- <https://www.isc.org/blogs/kea-1-1-released/>
- <https://www.isc.org/dhcphistory/>
- <https://www.isc.org/kea/>


## Security Notes

broad file, network, media, or database tool signal. generalized runtime or code generation signal.

- **Geiger risk:** yellow / medium
- broad file, network, media, or database tool signal
- generalized runtime or code generation signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: /etc/kea/kea-dhcp4.conf, /etc/kea/kea-dhcp6.conf, /etc/kea/kea-dhcp-ddns.conf, /etc/kea/kea-ctrl-agent.conf, /etc/kea/keactrl.conf
- Unix: [kea-install-dir]/etc/kea/kea-dhcp4.conf, [kea-install-dir]/etc/kea/kea-dhcp6.conf, [kea-install-dir]/etc/kea/kea-dhcp-ddns.conf, [kea-install-dir]/etc/kea/kea-ctrl-agent.conf, [kea-install-dir]/etc/kea/keactrl.conf
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** kea
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Debian apt - kea - 2.6.3-1: normalized package name match | Debian stable package indexes: kea from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | DHCP server [meta] | http://kea.isc.org/
- Nix - kea: normalized package name match | nixpkgs package indexes: pkgs/by-name/ke/kea/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - kea - 2.4.1-3build3: normalized package name match | Ubuntu 24.04 LTS package indexes: kea from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | DHCP server [meta] | http://kea.isc.org/
- apk - kea - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | DHCPv4 and DHCPv6 server from ISC | https://kea.isc.org/
- apk - kea-admin - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-admin from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Databases administration tools for Kea DHCP server | https://kea.isc.org/
- apk - kea-common - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-common from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Common files and libraries for Kea DHCP Server | https://kea.isc.org/
- apk - kea-ctrl-agent - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-ctrl-agent from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea Control Agent - REST service for controlling Kea DHCP server | https://kea.isc.org/
- apk - kea-dev - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | DHCPv4 and DHCPv6 server from ISC (development files) | https://kea.isc.org/
- apk - kea-dhcp-ddns - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-dhcp-ddns from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea DHCP Dynamic DNS Server | https://kea.isc.org/
- apk - kea-dhcp4 - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-dhcp4 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea IPv4 DHCP Server | https://kea.isc.org/
- apk - kea-dhcp6 - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-dhcp6 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea IPv6 DHCP Server | https://kea.isc.org/
- apk - kea-doc - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | DHCPv4 and DHCPv6 server from ISC (documentation) | https://kea.isc.org/
- apk - kea-hook-bootp - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-hook-bootp from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea hook for handling BOOTP client support | https://kea.isc.org/
- apk - kea-hook-class-cmds - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-hook-class-cmds from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea hook providing runtime commands for managing client classes | https://kea.isc.org/
- apk - kea-hook-ddns-tuning - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-hook-ddns-tuning from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea hook for adjusting and fine-tuning DHCP-DDNS update behavior | https://kea.isc.org/
- apk - kea-hook-flex-id - 3.0.3-r0: normalized package name match | Alpine Linux edge package indexes: kea-hook-flex-id from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Kea hook for generating client identifiers using flexible expressions | https://kea.isc.org/


## Related links

- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew.
- [bison](https://www.automicvault.com/pkg/brew/bison/) - Build dependency declared by Homebrew.
- [meson](https://www.automicvault.com/pkg/brew/meson/) - Build dependency declared by Homebrew.
- [ninja](https://www.automicvault.com/pkg/brew/ninja/) - Build dependency declared by Homebrew.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew.
- [ahcpd](https://www.automicvault.com/pkg/brew/ahcpd/) - Shares av.db curated category or tags: cli, ipv6, networking.
- [bind](https://www.automicvault.com/pkg/brew/bind/) - Shares av.db curated category or tags: cli, networking, server.
- [dante](https://www.automicvault.com/pkg/brew/dante/) - Shares av.db curated category or tags: cli, networking, server.
- [freediameter](https://www.automicvault.com/pkg/brew/freediameter/) - Shares av.db curated category or tags: cli, networking, server.
- [grepip](https://www.automicvault.com/pkg/brew/grepip/) - Shares av.db curated category or tags: cli, ipv6, networking.
- [inspircd](https://www.automicvault.com/pkg/brew/inspircd/) - Shares av.db curated category or tags: cli, networking, server.
- [ipv6calc](https://www.automicvault.com/pkg/brew/ipv6calc/) - Shares av.db curated category or tags: cli, ipv6, networking.
- [ircd-hybrid](https://www.automicvault.com/pkg/brew/ircd-hybrid/) - Shares av.db curated category or tags: cli, networking, server.
- [proxygen](https://www.automicvault.com/pkg/brew/proxygen/) - Local metadata places this package in an adjacent workflow. Shared terms: boost, cli, networking, openssl, openssl-3.
- [znc](https://www.automicvault.com/pkg/brew/znc/) - Local metadata places this package in an adjacent workflow. Shared terms: boost, cli, networking, openssl, openssl-3.

## Combined YAML source

View the package source record on GitHub. [combined/kea.yml](https://github.com/automic-vault/db/blob/main/combined/kea.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
