Removing possibly unneeded modules in authoritative servers
Spain, Dr. Jeffry A.
spainj at countryday.net
Mon Feb 6 19:45:09 UTC 2012
I have set up a system of bind10-devel-20120119 servers, with a bind9.9.0rc2 server used for DNSSEC inline signing, so that I can have DNSSEC-enabled authoritative name service for my test zones. One bind10 server (NSB0) is used as a hidden master. It serves five unsigned test zones to the bind9.9 server (NSB0S) for inline signing. NSB0S then serves the signed zones to two other bind10 slave servers (NSB1 and NSB2), which are the publicly available authoritative servers for the test zones (ns1.jaspain.net and ns2.jaspain.net).
My questions are as follows: On NSB0 in bindctl, can I execute 'config remove Boss/components b10-xfrin' since the hidden master is only doing outgoing transfers to NSB0S? Similarly on NSB1 and NSB2, can I execute 'config remove Boss/components b10-xfrout' since these servers are only doing incoming zone transfers from NSB0S? Or is there some interdependency between Xfrin and Xfrout that will cause things to not go well if I remove one of them? Thanks.
Jeffry A. Spain
Network Administrator
Cincinnati Country Day School
More information about the bind10-users
mailing list