소스 검색

fix(nslord): don't rectify on API write (it's done at AXFR), fixes #371

As a) zone rectification is done on outgoing AXFR, and b) outgoing
AXFR is the only type of question that nslord answers, we can skip
rectification on API write operations.
https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html#signed-axfr

In a test zone with 50k RRsets, the time needed for changing on
RRset's TTL went down from 9s to 0.1s.
Peter Thomassen 5 년 전
부모
커밋
a2a8a3217d
1개의 변경된 파일1개의 추가작업 그리고 0개의 파일을 삭제
  1. 1 0
      nslord/conf/pdns.conf.var

+ 1 - 0
nslord/conf/pdns.conf.var

@@ -1,6 +1,7 @@
 allow-axfr-ips=${DESECSTACK_IPV4_REAR_PREFIX16}.1.12
 api=yes
 api-key=${DESECSTACK_NSLORD_APIKEY}
+default-api-rectify=no
 default-soa-edit=INCREMENT-WEEKS
 default-soa-mail=get.desec.io
 default-soa-name=set.an.example