Przeglądaj źródła

fix(nslord): don't rectify on API write (it's done at AXFR), fixes #371

As a) zone rectification is done on outgoing AXFR, and b) outgoing
AXFR is the only type of question that nslord answers, we can skip
rectification on API write operations.
https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html#signed-axfr

In a test zone with 50k RRsets, the time needed for changing on
RRset's TTL went down from 9s to 0.1s.
Peter Thomassen 5 lat temu
rodzic
commit
a2a8a3217d
1 zmienionych plików z 1 dodań i 0 usunięć
  1. 1 0
      nslord/conf/pdns.conf.var

+ 1 - 0
nslord/conf/pdns.conf.var

@@ -1,6 +1,7 @@
 allow-axfr-ips=${DESECSTACK_IPV4_REAR_PREFIX16}.1.12
 api=yes
 api-key=${DESECSTACK_NSLORD_APIKEY}
+default-api-rectify=no
 default-soa-edit=INCREMENT-WEEKS
 default-soa-mail=get.desec.io
 default-soa-name=set.an.example