<div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;">Dear colleagues,</div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;"><br></div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;">that means that zones are not created and removed but only updated by AXFR, is that correct?</div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;"><br></div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;">So when I have a new zone I have to create it on both master and slave. I thought it is enough to create it on the master and then the new created zone is automatically transferred to the slave.</div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;"><br></div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;">Kind Regards,</div><div style="font-family: Arial; text-align: left; font-size: 14px; color: #000000;">Kaulkwappe<br><br><br><hr style="border: 0; border-bottom: 1px solid #DADADA;"><b>From:</b> Peter Hudec <<a href="/email/new/1/phudec@cnc.sk">phudec@cnc.sk</a>><br><b>Sent:</b> Friday, 29. Jun 2018 – 09:56 CEST +0200<br><b>To:</b> <a href="/email/new/1/nsd-users@NLnetLabs.nl">nsd-users@NLnetLabs.nl</a><br><br><b>Subject:</b> Re: [nsd-users] How to dynamically add and remove zones?<br><br></div><div>
<style>
body {
font-family: "Arial";
font-size: 100% !important;
margin: 0;
line-height: 1.2rem;
}
</style>
<pre style="white-space: pre-wrap; color: #173860;">-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hi,
as it was written to add/remove zone could be nsd-control used.
To be full automatic, try to combine
https://dotat.at/prog/nsnotifyd/
there is a nice post about it on
https://jpmens.net/2015/06/16/alert-on-dns-notify/
And another link to the same site ;) greetings Jan-Piet
https://jpmens.net/2013/02/13/automatic-provisioning-of-slave-dns-server
s/
Depends on the master you have, but the idea on slave NSD is as follow
run nsnotify on the slave on port 5353
from master add nofify also on this port
notify: slave@53
notify: slave@5353
the nsnotifyd script should be like
- find if zone exists
nsd-control zonestatus | grep ^zone | awk '{print $2}' | grep
"^${ZONE}$"
- if not ad the zone
nsd-control addzone ${ZONE} pattern
For removing the zone could the the meta.meta zone used as described
on the post above.
If need could help, free of charge of course ;)
regards
Peter
On 28/06/2018 21:50, Anand Buddhdev wrote:
> On 28/06/2018 21:37, kaulkwappe@prvy.eu wrote:
>
> Hi,
>
>> May I ask another question? I want to have two or three
>> nameservers, so one Master and one or two Slaves. There are some
>> opportunities like AXFR but I'm afraid of loosing synchronicity.
>> As I want all servers to provide the same data the same time what
>> would be the best approach for doing this? Is it a good approach
>> to directly transfer files automatically over SSH from the Master
>> to the Slaves when there are changes or should I use AXFR?
>
> You can set up your slaves in master mode. Then you can copy your
> zone files from the master to the slaves using scp or rsync, and
> reload NSD to make it re-read the updated zone files. However, this
> is more cumbersome and increases the chance of failure.
>
> AXFR is a perfectly fine mechanism to use for keeping slaves
> synchronised with the master, and I recommend it. If you send
> NOTIFY messages from the master to the slaves, then they should
> update almost immediately after the master is updated.
>
> Regards, Anand _______________________________________________
> nsd-users mailing list nsd-users@NLnetLabs.nl
> https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
>
- --
*Peter Hudec*
Infraštruktúrny architekt
phudec@cnc.sk <mailto:phudec@cnc.sk>
*CNC, a.s.*
Borská 6, 841 04 Bratislava
Recepcia: +421 2 35 000 100
Mobil:+421 905 997 203
*www.cnc.sk* <https: www.cnc.sk="">
-----BEGIN PGP SIGNATURE-----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=Cz4q
-----END PGP SIGNATURE-----
_______________________________________________
nsd-users mailing list
nsd-users@NLnetLabs.nl
https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
</https:></mailto:phudec@cnc.sk></pre>
</div>