Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 15 Apr 2017 22:27:59 -0700
From:      Kevin Oberman <rkoberman@gmail.com>
To:        George Mitchell <george+freebsd@m5p.com>
Cc:        Thomas Steen Rasmussen <thomas@gibfest.dk>, "ports@FreeBSD.org" <ports@freebsd.org>, Mathieu Arnold <mat@freebsd.org>
Subject:   Re: default named.conf in bind ports and slaving from f-root
Message-ID:  <CAN6yY1u=CgF-=DWj9rF3k0Zo=cMT26_ozW7x76FCXdMFWKCpDg@mail.gmail.com>
In-Reply-To: <db0f672e-d457-0e9b-cdb7-40576db8aaac@m5p.com>
References:  <85573e9f-c0e7-1e30-6f95-2fec13e0ac26@gibfest.dk> <db0f672e-d457-0e9b-cdb7-40576db8aaac@m5p.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Apr 15, 2017 at 7:02 PM, George Mitchell <george+freebsd@m5p.com>
wrote:

> On 04/14/17 08:37, Thomas Steen Rasmussen wrote:
> > Hello,
> >
> > Cloudflare deployed a bunch (74 apparently) of new f-root dns
> > servers, which do not permit AXFR like the other f-root instances
> > do.
> > [...]
> > A good alternative could be to change named.conf to use
> > lax.xfr.dns.icann.org and iad.xfr.dns.icann.org as
> > described in [2]. My named.conf now looks like this:
> > [...]
>
> Does this issue affect me if I use type "hint" for zone "." like this:
>
> zone "." { type hint; file "/usr/local/etc/namedb/named.root"; };
>
> -- George
>

It does not have anything to do with "normal" operations using a hints
file. This only has an impact on those who transfer zones from a root
server. Many of the root servers do not allow AXFRs to reduce load.
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkoberman@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1u=CgF-=DWj9rF3k0Zo=cMT26_ozW7x76FCXdMFWKCpDg>