Re: Different signed serial numbers

2025-09-28 Thread Mark Andrews
Whenever a zone is changed the serial needs to be updated so that secondary servers know when to transfer the updated content. When a zone is signed the updating takes place more often as RRSIG records need to be periodically updated. If you have views the serials in each view are independent

Re: Different signed serial numbers

2025-09-26 Thread Alessandro Vesely
On Thu 25/Sep/2025 02:34:01 +0200 Mark Andrews wrote: On 24 Sep 2025, at 19:36, Alessandro Vesely wrote: [...] I assume signed serials have definitely disqualified this synchronization checking technique. Are there any alternatives? Using inline-signing is a *choice*. Named will happily s

Re: Different signed serial numbers

2025-09-25 Thread Alessandro Vesely
On Thu 25/Sep/2025 08:15:05 +0200 Nick Tait wrote: On 24/09/2025 21:36, Alessandro Vesely wrote: On Wed 24/Sep/2025 08:25:40 +0200 Nick Tait wrote: On 24/09/2025 05:42, Alessandro Vesely wrote: The script I ran just issues a few queries using Python's dns.resolver.  I don't see how it could ch

Re: Different signed serial numbers

2025-09-25 Thread Nick Tait via bind-users
On 24/09/2025 21:36, Alessandro Vesely wrote: On Wed 24/Sep/2025 08:25:40 +0200 Nick Tait wrote: On 24/09/2025 05:42, Alessandro Vesely wrote: The script I ran just issues a few queries using Python's dns.resolver.  I don't see how it could check for consistency (or determine that some resolve

Re: Different signed serial numbers

2025-09-24 Thread Mark Andrews
> On 24 Sep 2025, at 19:36, Alessandro Vesely wrote: > > On Wed 24/Sep/2025 08:25:40 +0200 Nick Tait wrote: >> On 24/09/2025 05:42, Alessandro Vesely wrote: >>> On Tue 23/Sep/2025 01:55:51 +0200 Mark Andrews wrote: When checking zone serials for consistency all the above needs to be taken

Re: Different signed serial numbers

2025-09-24 Thread Alessandro Vesely
On Wed 24/Sep/2025 08:25:40 +0200 Nick Tait wrote: On 24/09/2025 05:42, Alessandro Vesely wrote: On Tue 23/Sep/2025 01:55:51 +0200 Mark Andrews wrote: When checking zone serials for consistency all the above needs to be taken into account.  The scripts work when you query the correct instance o

Re: Different signed serial numbers

2025-09-24 Thread Nick Tait via bind-users
On 24/09/2025 05:42, Alessandro Vesely wrote: On Tue 23/Sep/2025 01:55:51 +0200 Mark Andrews wrote: Whenever a zone is changed the serial needs to be updated so that secondary servers know when to transfer the updated content.   When a zone is signed the updating takes place more often as RRSIG

Re: Different signed serial numbers

2025-09-23 Thread Alessandro Vesely
Hi, thanks for the explanation! On Tue 23/Sep/2025 01:55:51 +0200 Mark Andrews wrote: Whenever a zone is changed the serial needs to be updated so that secondary servers know when to transfer the updated content. When a zone is signed the updating takes place more often as RRSIG records need

Different signed serial numbers

2025-09-22 Thread Alessandro Vesely
Hi, I ran a script to check some DNS issues and it diagnosed "ERROR: SOA records are not consistent across nameservers". The reason seems to be because I use different views for internal vs external queries. I have external secondary servers, so querying them (e.g. dig @45.33.33.148 tana.it