Simplistic serial number roll back

[John Thurston]

That was my first thought, but stopping the secondary would affect all 
of the published zones.

If retransfer ignores serial number, then using "rndc retransfer" would 
affect only the specifically-named zone in the specifically-named view. 
Resolution of the other zones, in all of the other views, would be 
uninterrupted.

--
Do things because you should, not just because you can.

John Thurston    907-465-8591
John.Thurston at alaska.gov
Department of Administration
State of Alaska

On 2/17/2023 10:23 AM, Ondřej Surý wrote:
>
> 	
>
> *CAUTION:* This email originated from outside the State of Alaska mail 
> system. Do not click links or open attachments unless you recognize 
> the sender and know the content is safe.
>
> Why so complicated? Stop the secondary, purge the zone files and 
> journal, and start the secondary. The zones will get retransfered as 
> there’s no state now.
>
> --
> Ondřej Surý — ISC (He/Him)
>
> My working hours and your working hours may be different. Please do 
> not feel obligated to reply outside your normal working hours.
>
>> On 17. 2. 2023, at 20:18, John Thurston <john.thurston at alaska.gov> wrote:
>>
>> 
>>
>> Assumptions: A primary and several secondaries, with the secondaries 
>> using XFR to stay up to date.
>>
>> Scenario: Make a change in the serial number algorithm which will 
>> result in newer zone-data being published on an "earlier" serial number.
>>
>> The 'correct' method  is to increase the serial number (by steps not 
>> exceeding 0x7FFFFFFF) until it rolls back around to the desired 
>> number. These increments are to happen no more frequently than the 
>> refresh interval specified in the SOA record. This 'correct' method 
>> relies on nothing more than the communication standards defined in RFC.
>>
>> But if we add the assumption: All authorities are running ISC BIND 
>> software, and all are under central management.
>>
>> can the whole process be reduced to publishing the new serial number 
>> on the primary, and using an "rndc retransfer" on each secondary?
>>
>> The man-file says "retransfer . . . This  command retransfers the 
>> given secondary zone from the primary server."
>>
>> It doesn't say serial number is considered, nor does it does it say 
>> that it is ignored. I'm thinking it makes sense that it ignores the 
>> serial number, but I can't think of  a good way to test this.
>>
>>
>> -- 
>> --
>> Do things because you should, not just because you can.
>>
>> John Thurston    907-465-8591
>> John.Thurston at alaska.gov
>> Department of Administration
>> State of Alaska
>> -- 
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to 
>> unsubscribe from this list
>>
>> ISC funds the development of this software with paid support 
>> subscriptions. Contact us at https://www.isc.org/contact/ for more 
>> information.
>>
>>
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230217/b6b96d93/attachment-0001.htm>