2 Čec
2018
2 Čec
'18
12:57
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
any way, the knot do not support catalog zones at this moment and
at least in my /still not using knot/ the hacks are only way to
implement such a provisioning.
For ccTLD I do not see any need for this feature , since the number of
zones do not change often. I did it by ansible few years ago.
On the registrar side it would e nice feature, but most of them have
own provisioning system in place.
from my point of view the catalogo zones is just nice to have feature,
not killing one.
regards
Peter
P.S. I was on both side /ccTLD and registrar/ so I know needs for both
side ;)
On 02/07/2018 12:50, Ondřej Surý wrote:
All these are mere hacks, cleanest solution would be YANG model
for zone management.
s/YANG/a provisioning/
YANG is just an implementation of provisioning interface. And I
believe there are much better solutions to pick from.
Ondrej -- Ondřej Surý ondrej(a)sury.org
- --
*Peter Hudec*
Infraštruktúrny architekt
phudec(a)cnc.sk <mailto:phudec@cnc.sk>
*CNC, a.s.*
Borská 6, 841 04 Bratislava
Recepcia: +421 2 35 000 100
Mobil:+421 905 997 203
*www.cnc.sk* <http:///www.cnc.sk>
> On 2 Jul 2018, at 12:45, Petr Špaček <petr.spacek(a)nic.cz> wrote:
>
> On 2.7.2018 12:28, Klaus Darilion wrote:
>> Am 18.06.2018 um 11:16 schrieb Peter Hudec:
>>> if you want dns server agnostic solution, look at
>>> http://dotat.at/prog/nsnotifyd/
>>>
>>> combine it with the
>>> https://jpmens.net/2013/02/13/automatic-provisioning-of-slave-dns-s
erver
>>>
>>>
s/.
Add a little bit integration coding and that's it. :)
Und some more coding to delete zones. Thats the problem of
automatic provision based on NOTIFYs. Probably you could add a
"superdelete" feature which removes the zone on the slave if
the master responds on SOA checks/XFR with a certain response.
Catalog zones would be a cleaner solution. And btw: AFAIK
Yadiffa also has some similar thing like catalog zones using a
special DNS class and XFR. -----BEGIN PGP SIGNATURE-----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=B27B
-----END PGP SIGNATURE-----