浏览代码

fix(nslord): don't rectify on API write (it's done at AXFR), fixes #371

As a) zone rectification is done on outgoing AXFR, and b) outgoing
AXFR is the only type of question that nslord answers, we can skip
rectification on API write operations.
https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html#signed-axfr

In a test zone with 50k RRsets, the time needed for changing on
RRset's TTL went down from 9s to 0.1s.
Peter Thomassen 5 年之前
父节点
当前提交
a2a8a3217d
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      nslord/conf/pdns.conf.var

+ 1 - 0
nslord/conf/pdns.conf.var

@@ -1,6 +1,7 @@
 allow-axfr-ips=${DESECSTACK_IPV4_REAR_PREFIX16}.1.12
 api=yes
 api-key=${DESECSTACK_NSLORD_APIKEY}
+default-api-rectify=no
 default-soa-edit=INCREMENT-WEEKS
 default-soa-mail=get.desec.io
 default-soa-name=set.an.example