[bind10-dev] minimum authoritative DNS server requirements ?
Jerry Scharf
scharf at isc.org
Tue Oct 19 15:00:51 UTC 2010
Would zone transfer access control be part of the minimum list?
I am assuming that configuration and management would be done from a
static file and that my work with the command tool would not cover this.
I would also assume that there would be nothing like rndc, the program
would respond to signals for any controls. Are these correct?
jerry s
On 10/18/2010 11:48 PM, Kazunori Fujiwara wrote:
> Is it a last time to say requirements?
>
> We discussed minimum authoritative DNS server last face 2 face
> meeting. The result was that minimum authoritative DNS server is
> b10-auth and it runs individually.
>
> # Currently, meeting minute is not available.
> # https://bind10.isc.org/wiki/2010-09-03
>
> I prefer minimum authoritative DNS server is one C or C++ program and
> as compact as possible.
>
> Then do we define minimum authoritative DNS server requirements ?
>
> My idea of minimum authoritative DNS server's functions are:
> - It acts as authoritative DNS server.
> - It reads zone files and act as master DNS server.
> - It manages slave zones (using timer/NOTIFY/AXFR/IXFR).
> - It acts as master DNS server and offer zone transfer function
> (NOTIFY/AXFR/IXFR).
>
> # NSD's function is near my idea of minimum authoritative DNS server,
> # but it does not have IXFR-out function.
>
> JPRS's case, we designed JP DNS servers hierarchically.
>
> Zone File---Shadow Master--------------Transfer-------------Auth DNS servers
> A/IXFR a few servers A/IXFR [a-g].dns.jp
> NOTIFY NOTIFY over 30 servers
>
> Shadow Master reads zone files and offer A/IXFR to Transfer servers.
>
> Transfer servers receives zones from Shadow Master and
> offer zones to [a-g].dns.jp DNS servers.
>
> Then, Transfer servers and Auth DNS servers need to have functions:
> - answering queries
> - slave zone management function using AXFR/IXFR/NOTIFY/SOA query.
> - offering zone information for slave DNS servers using AXFR/IXFR/NOTIFY.
>
> I want to use minimum authoritative server as "Auth DNS servers" and
> "Transfer servers".
>
>
More information about the bind10-dev
mailing list