<div dir="ltr"><div>Hi,</div><div><br></div><div>I'm new to NSD and would really appreciate if someone can point me to the right direction.</div><div><br></div><div>I have like 8 NSD servers (secondary) serving around 30,000 zones.</div><div>Zone updates are transferred from the primary DNS servers by AXFR/IXFR.</div><div><br></div><div>The 8 NSD servers do not save the zones file on disk but are only held in memory.</div><div>Therefore after NSD service is restarted zone transfer requests are being send to the master DNS servers.</div><div><br></div><div>My questions are as follows</div><div>1) When zone data is not saved on file and only held in memory NSD initiates zone transfer after NSD service is restarted.</div><div><br></div><div>Would like to know if there is a time limit from when zone transfer is requested until data gets saved in memory.</div><div><br></div><div>2) When NSD service is 'reloaded' for example by running 'systemctl reload nsd' does NSD check the serial number (SOA) for each record and tries to initiate a zone transfer?</div><div><br></div><div>After performing a service reload the following entries are logged.</div><div><br></div><div>nsd[1704236]: error: xfrd: zone <a href="http://testnsdexp01.tk" target="_blank">testnsdexp01.tk</a> received error code SERVER NOT AUTHORITATIVE FOR ZONE from xx.xx.xx.xx<br>nsd[1704236]: error: xfrd: zone <a href="http://testnsdexp01.tk" target="_blank">testnsdexp01.tk</a>, from xx.xx.xx.xx: no tsig in first packet of reply<br>nsd[1704236]: info: xfrd: zone <a href="http://testnsdexp01.tk" target="_blank">testnsdexp01.tk</a> bad transfer 0 from xx.xx.xx.xx</div><div> </div><div>The zone records for <a href="http://testnsdexp01.tk" target="_blank">testnsdexp01.tk</a>
is not present on the master DNS servers therefore it returns error but it seems like NSD is doing some sort of checks during the reload process hence its trying to get the records for '<a href="http://testnsdexp01.tk" target="_blank">testnsdexp01.tk</a>'.</div><div><br></div><div><br></div><div>Best Regards.<br></div></div>