Hello Tony, and community,
could someone, please, help me with diagnostics, how can I check how many
records are signed per cycle? Can CPU and RAM increasing help to prevent
this behavior? Could it help to sign the zone in one step and reduce signing
to only one Zone serial increasing?
At the moment the signing and zone serial increasing causes too many IXFR/
AXFR transactions with slaves.
Best regards,
--
Smil Milan Jeskyňka Kazatel
---------- Původní e-mail ----------
Od: Tony Finch <[email protected]>
Komu: Milan Jeskynka Kazatel <[email protected]>
Datum: 28. 1. 2020 17:41:30
Předmět: Re: BIND - in loop rewrite zone serial no.
"Milan Jeskynka Kazatel <[email protected]> wrote:
>
> Then how to achieve to resign the whole zone in one step? Which config
> option should be affected?
I don't believe that is possible with automatic signing. You can do it
yourself with `dnssec-signzone` but that's fiddly and error-prone.
Tony.
--
f.anthony.n.finch <[email protected]> http://dotat.at/
Portland, Plymouth: West 7 to severe gale 9, decreasing 4 or 5 later. Rough
or
very rough, occasionally high at first. Squally showers. Good, occasionally
moderate.
"
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
