[BIND] Re: Is it possible to...

[Jim Popovitch]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Fri, 2018-08-10 at 09:47 +1000, Mark Andrews wrote:
> > On 10 Aug 2018, at 5:46 am, Jim Popovitch via bind-users <bind-user
> > s at lists.isc.org> wrote:
> > 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA512
> > 
> > Is it possible to...
> > 
> > 1) use text only zone files, and
> > 
> > 2) keep serials identical between those zone files and what is
> > published in DNS, and
> 
> That’s not even possible with manually edited files. There will
> always with every system be times when what is on disk does not
> match what is being published.  The world doesn’t allow for perfect
> synchronisation.  There will always be “edit, read” or “update,
> write”.
> 
> > 3) automatically handle signatures when adding new RRs, and
> > 
> > 4) not have any journal files.
> 
> Named is not designed to update zones without running the updates
> through a journal.  Flat files are really bad performance wise so
> we use a structured file (the journal) to record changes then write
> out the master file later when things are less time critical.
> 
> Even setting the delay between processing a update and starting to
> write the new master file to zero seconds will not achieve what you
> want.
> 
> UPDATE requires name servers to behave like a database.  Databases
> can’t behave like you are requesting.  You don’t go reading SQL
> database
> stores directly.
> 
> > Is all of that possible with a(ny)? recent version of Bind9?
> 
> No.
> 

Ok, and thank you for details.

- -Jim P.


-----BEGIN PGP SIGNATURE-----
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=q9os
-----END PGP SIGNATURE-----