(use-)alt-transfer-source deprecated
Matthijs Mekking
matthijs at isc.org
Wed Feb 1 09:45:15 UTC 2023
Hi,
On 2/1/23 09:57, Gasoo wrote:
> Hello
>
> I recently updated to 9.18.x and noticed the deprecation warning in the
> logs for the option use-alt-transfer-source.
> After reading the manual and checking my configuration, I am confused on
> how this is going to work in future releases.
>
> My configuration includes the following statements:
>
> options {
> listen-on { 1.1.1.1; 2.2.2.2; 3.3.3.3; };
> transfer-source 3.3.3.3;
> query-source 3.3.3.3;
> notify-source 3.3.3.3;
> use-alt-transfer-source no;
> ...
> }
Looking at your configuration, you actually don't use
alt-transfer-source: there is no such option in your example and
'use-alt-transfer-source' is set to no anyway.
> 1.1.1.1 and 2.2.2.2 are only used for incoming DNS queries from clients
> and can not be used for zone transfers.
> If I remove the option use-alt-transfer-source, in some cases (e.g.
> SERVFAIL from primary), additional zone transfers are tried via
> 0.0.0.0#0, which the OS then sends via the best matching interface / IP
> address. >
> For this reason the option use-alt-transfer-source is in my configuration.
> From the manual.
>
> use-alt-transfer-source:
> This indicates whether the alternate transfer sources should be used. If
> views are specified, this defaults to no; otherwise, it defaults to yes.
> alt-transfer-source:
> This indicates an alternate transfer source if the one listed in
> transfer-source fails and use-alt-transfer-source is set.
>
>
> How will this be handled in future releases, if transfer-source is
> specified, no views are defined and an error occurs?
> Is there any other solution to disable transfers from 0.0.0.0#0 in my case?
I guess in your 9.18 configuration if you don't set
'use-alt-transfer-source', it defaults to yes. Since
'alt-transfer-source' defaults to 0.0.0.0#0', you still need the
configuration despite it is being deprecated.
From 9.20.0 the feature will be gone, the options
'use-alt-transfer-source' and 'alt-transfer-source' will no longer
exist, and thus alternate transfer source will no longer be tried.
In other words, from 9.20.0 it will be as if 'use-alt-transfer-source'
was set to 'no'.
Best regards,
Matthijs
>
>
> Kind Regards
> Stephan
>
More information about the bind-users
mailing list