fix(nslord): don't rectify on API write (it's done at AXFR), fixes #371 · a2a8a3217d - git.nibbletools.com by Gogs

fix(nslord): don't rectify on API write (it's done at AXFR), fixes #371

As a) zone rectification is done on outgoing AXFR, and b) outgoing
AXFR is the only type of question that nslord answers, we can skip
rectification on API write operations.
https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html#signed-axfr

In a test zone with 50k RRsets, the time needed for changing on
RRset's TTL went down from 9s to 0.1s.

Peter Thomassen 5 years ago

parent

188ac4c412

commit

a2a8a3217d

1 changed files with 1 additions and 0 deletions

Split View Show Diff Stats

						
							+ 1
							
							- 0
						
nslord/conf/pdns.conf.var
							 
								View File
							
				@@ -1,6 +1,7 @@
			
				 allow-axfr-ips=${DESECSTACK_IPV4_REAR_PREFIX16}.1.12
			
				 api=yes
			
				 api-key=${DESECSTACK_NSLORD_APIKEY}
			
				+default-api-rectify=no
			
				 default-soa-edit=INCREMENT-WEEKS
			
				 default-soa-mail=get.desec.io
			
				 default-soa-name=set.an.example