<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Thanks Chriztoffer!<br>
<br>
Sorry, got busy and just now coming back to this...<br>
<br>
So, one thing you didn't answer was - is this even a good idea?<br>
<br>
It sounds great in theory, but sometimes reality works out very
differently.<br>
<br>
I'm specifically wondering about performance and resource usage.<br>
<br>
E.g., would Unbound need the entire zone to be fully loaded into
RAM? If so, how much RAM would be needed?<br>
<br>
Thanks again for the links for how to do this!<br>
<br>
Charles<br>
<br>
<br>
<div class="moz-cite-prefix">On 5/21/2021 10:33 AM, Chriztoffer
Hansen wrote<br>
</div>
<blockquote type="cite"
cite="mid:CA+cYV6vb3OV7E0p4S3RO==9xrCYV3OeGstn_7T8Cc3xJojh-oQ@mail.gmail.com">
<pre class="moz-quote-pre" wrap="">On Fri, 21 May 2021 at 15:27, Charles Sharp via Unbound-users
<a class="moz-txt-link-rfc2396E" href="mailto:unbound-users@lists.nlnetlabs.nl"><unbound-users@lists.nlnetlabs.nl></a> wrote:
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">wait a bit for the zone transfers to take place and then have a look
at the zones, using such a config your DNS will basically act as a
"slave root" DNS that is, will keep a copy of the forward and
reverse root zones
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
So... will this actually work as it appears, and if so, is it a good idea?
Also - is it possible to do the same thing in Unbound, and if so, how?
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Sure it is possible!
What you are asking is AXFR transfer of the root zone file. A select
number of the root servers support AXFR zone transfer with your local
DNS server setup with a read-only copy (stub node).
<a class="moz-txt-link-freetext" href="https://github.com/NLnetLabs/unbound/blob/master/doc/example.conf.in#L1002-L1031">https://github.com/NLnetLabs/unbound/blob/master/doc/example.conf.in#L1002-L1031</a>
<a class="moz-txt-link-freetext" href="https://www.isc.org/docs/Apricot2017.pdf">https://www.isc.org/docs/Apricot2017.pdf</a>
<a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/html/rfc7706#appendix-B">https://datatracker.ietf.org/doc/html/rfc7706#appendix-B</a>
<a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/html/rfc8806#appendix-B">https://datatracker.ietf.org/doc/html/rfc8806#appendix-B</a>
Another way to go about it is by downloading the root.hints file from
internic.net using a local cron job instead of AXFR zone transfer.
<a class="moz-txt-link-freetext" href="https://www.internic.net/domain/named.cache">https://www.internic.net/domain/named.cache</a>
<a class="moz-txt-link-freetext" href="https://wiki.archlinux.org/title/Unbound#Root_hints">https://wiki.archlinux.org/title/Unbound#Root_hints</a>
</pre>
</blockquote>
<br>
</body>
</html>