[Opendnssec-user] OpenDNSSEC & BIND

[Jakob Schlyter]

On 31 jan 2014, at 13:33, Gavin Brown <gavin.brown at centralnic.com> wrote:

> I recently built a BIND config very similar to this. Rather than using
> match-clients in each view, I gave each view its own IP address and used
> match-destinations.
> 
> This means you can query the signed and unsigned views remotely, which
> is handy for debugging and monitoring.

Yes, that is a much nicer solution. You can also select view based on the TSIG used in the DNS query, a solution that could confuse even the most experienced DNS administrator :-)

	jakob

-- 
Jakob Schlyter
Kirei AB - www.kirei.se