nsd running as slave

Ted Lindgreen ted at NLnetLabs.nl
Thu Jul 10 08:49:46 UTC 2003


[Quoting Alexis Yushin, on Jul  9, 17:22, in "Re: nsd running as s ..."]
> Once Ted Lindgreen wrote:
> ...
> >There were good reasons to do it like this (keep the daemon light weight".
> >
> >However, people are looking into a plugin, reacting properly
> >on incoming notifies. Plugings are supported as of version 1.2.
> 
> Which would only be useful if NSD database is split into zones, as
> opposed to one flat namespace we have now.

Perhaps I mis something, but what I thought that people want is,
just to run "nsdc update" when a notify arrives (in contrast to
"when crontab thinks it's time"). The "nsdc update" will then do
the right thing (rebuild the database and signal nsd when necessary
or do nothing).

A trivial plugin can do some sanity check on arrival of a notify
and then fork and exec "nsdc update".
The sanity check is wise to prevent vulnaribility for DoSsing
by a notify flood. I guess a simple timer (ignore new notifies
for xx seconds/minutes after having forked+execed) would suffice.

-- ted


More information about the nsd-users mailing list