enabling TLS communication between primary and secondary

[Vikas Sharma]

Hi Team,

I am trying to encrypt all communication between primary and secondary bind
servers.

There are two tls related configuration
on primary
- listen-on
- also-notify
on secondary
- master block - tls tlsblockname

is it possible to configure primary so that it litens on tls and also
notifies to secondary using tls.
like below, as if i use this configuration i am getting "named[21834]:
loading configuration: failure"
either i can use tls <string> in listen-on or in also-notify but not in
both at the same time.

     listen-on port  853 tls tlsbolckname{ 127.0.0.1; };
     also-notify {
         214.7.78.109 port 853 tls tlsblockname;
     };

also how is it possible configure secondary to listen on port 853 over tls?
because on secondary we can use tls block name with primaries block only
and not with listen-on option.



*Best Regards,*

*Vikas Sharma*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230503/8339ba94/attachment-0001.htm>