bind10 zone updates

Jelte Jansen jelte at isc.org
Tue Dec 13 14:45:24 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/13/2011 03:36 PM, Spain, Dr. Jeffry A. wrote:
> 
> I infer that b10-loadzone could be used to update a zone by modifying
> the zone file and reloading it, since this would replace all the
> previous data for the zone in the SQLite3 database.
> 

That is correct.

>  
> 
> My question is whether or not the bind9 nsupdate utility can be used to
> update a bind10 zone. For this to work, I assume that there would need
> to be some type of ACL configuration for the b10-auth module that is the
> equivalent of the bind9 “allow-update” and/or “update-policy”. I further
> assume that there would need to be a way to secure the update queries
> with TSIG.
> 
> 
> Does this functionality exist in bind10 at present, and if so, how is it
> configured?
> 

Not yet, nsupdate is a front-end client to create and send a dynamic dns
update packet; DDNS is not yet supported by BIND 10.

As it happens, we are working on that right now, and the current plan is
to have support for it in the next development release. So if all goes
according to plan, there will be a way to use nsupdate in the near
future (if not, it'll definitely be in the next one). We will indeed
have some basic ACL support for that from the start.

Jelte
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7nZQEACgkQ4nZCKsdOncXZRwCgupMDirBKIAxya4EpgpmX8HoS
rD0An2sc3WQ4c/61m8naPJDXX06Cv0MQ
=d8ZL
-----END PGP SIGNATURE-----



More information about the bind10-users mailing list