[Opendnssec-develop] Feature proposal: Stop Enforcer action on given zone

Jerry Lundström jerry at opendnssec.org
Fri May 11 07:43:30 UTC 2012


Hi Rick,

Interesting proposal...

On Fri, May 11, 2012 at 12:49 AM, Rick van Rein <rick at openfortress.nl> wrote:
>
> When trying to wheeze out of tight spots, the approach usually comes down to
> shutting down the Enforcer and acting directly upon the Signer.  The reason is
> always the same -- spontaneous actions by the Enforcer are disruptive to testing
> and recovery procedures, especially because they complicate those actions.

Could you give us some examples/scenarios here?

To me it sounds like a miss in the procedure if you leave the Enforcer running.

/Jerry



More information about the Opendnssec-develop mailing list