[Opendnssec-develop] adapter design
Matthijs Mekking
matthijs at NLnetLabs.nl
Fri Jan 14 12:03:13 UTC 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
On the 26th, we will have another teleconf. One of the topics will be
how to implement the other adapters. These are my initial thoughts:
* Drop the zonefetcher, make adapters part of the zone list.
It has an advantage that it becomes more flexible: you can set the
acl per zone. It has the risk that the same information has to be
copied many times.
* When there is a Zone Transfer adapter (AXFR, IXFR), start of a thread
that handles incoming notifies and transfer requests (replaces the
zone fetcher). The thread has access to the zone structures, so we
can easily implement soa refresh, retry and expire. A thread removes
the issues with privilege dropping and process communication.
* What to do with ods-signer sign <zone> when the zone as a AXFR/IXFR
adapter? (Force transfer request?, read the last transferred zone?)
Attached are the proposed differences to the syntax. Most changes are
adapted from the zonefetch.rnc
Best regards,
Matthijs
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQEcBAEBAgAGBQJNMDuBAAoJEA8yVCPsQCW5vvsIAMc2V7feuVgagQX0RxnoAVDv
xLOrNIlmOfAhGAsHqOvvGjHOeBO8DMGLk9r1Ike6pSk9YFPipRBroAoxMQ9btf5J
PDHIlBaETnzjfdN73f2iCf+s0hFSmbfFU+dZvfV0mDK8lkuD8+mvVo4TZOQMy6bg
+LDO6aTjyK7IwMa78InbqaRieZJKgLdMunjotttstBxAg0RJ06/DTI49RIhcaJiU
N9sqoQ3egId3Tp9Z0V5L5hh/bb8uwvK30e2LIKuCkkHcjK8H3dpBIkwxTQUS6n3S
EfuOqe067SHkRkT3+gMMKhGwcCaPS4hCsQkmnW9y9ZjVi4bzUKbk0kA5NxnPN0w=
=du4S
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: zonelist.rnc.diff
Type: text/x-patch
Size: 1354 bytes
Desc: not available
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20110114/144ef92e/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: zonelist.rnc.diff.sig
Type: application/octet-stream
Size: 287 bytes
Desc: not available
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20110114/144ef92e/attachment.obj>
More information about the Opendnssec-develop
mailing list