inline-signing a zone that exists in two views

Gordon Messmer gordon.messmer at gmail.com
Tue May 9 04:56:50 UTC 2017


On 05/08/2017 03:26 AM, Tony Finch wrote:
> Gordon Messmer <gordon.messmer at gmail.com> wrote:
>
>> I have a zone that I'd like to serve in two different views, with dnssec in
>> both views.
> You can't have zones in different views (which sre by implication
> different zones, or different versions of the same zone) pointing to the
> same files on disk, because updates to one version will corrupt the other
> version.

Even if one of them is treated as read-only?

> Make the second zone a clone of the first using the in-view option
> instead.

That looks like the right thing to do, but appears to be available only 
on bind 9.10+, and I'm supporting Red Hat servers with 9.9. Are there 
any solutions here, or do I need to roll my own packages until Red Hat 
catches up?

Thanks for your help.  I really appreciate it.


More information about the bind-users mailing list