BIND 9.9.0 Inline-Signing Out of Control

[David Kreindler]

Thanks for the suggestion.

After 48 sets of IXFRs and more than 1200 SOA serial increments, the system finished signing the zone.

Manually incrementing the (unsigned) SOA serial now results in just one more set of IXFRs.

It would have been helpful if somewhere in the documentation we were warned to expect a large number if IXFRs following the initial AXFR-style IXFR.

Are there guidelines or suggestions for setting the values of sig-signing-nodes and sig-signing-signatures?

On 2 Mar 2012, at 6:23 PM, Mark Andrews wrote:

> 
> Just let it complete signing the zone.  This is done incrementally.
> 
>        sig-signing-nodes <integer>;
>        sig-signing-signatures <integer>;
> 
> These control the number nodes processed and signatures generated per
> increment.
> 
> -- 
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org