Browse Source

fix(nslord): don't rectify on API write (it's done at AXFR), fixes #371

As a) zone rectification is done on outgoing AXFR, and b) outgoing
AXFR is the only type of question that nslord answers, we can skip
rectification on API write operations.
https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html#signed-axfr

In a test zone with 50k RRsets, the time needed for changing on
RRset's TTL went down from 9s to 0.1s.
Peter Thomassen 5 năm trước cách đây
mục cha
commit
a2a8a3217d
1 tập tin đã thay đổi với 1 bổ sung0 xóa
  1. 1 0
      nslord/conf/pdns.conf.var

+ 1 - 0
nslord/conf/pdns.conf.var

@@ -1,6 +1,7 @@
 allow-axfr-ips=${DESECSTACK_IPV4_REAR_PREFIX16}.1.12
 api=yes
 api-key=${DESECSTACK_NSLORD_APIKEY}
+default-api-rectify=no
 default-soa-edit=INCREMENT-WEEKS
 default-soa-mail=get.desec.io
 default-soa-name=set.an.example