[Opendnssec-user] zone.xfrd-state file

Matthijs Mekking matthijs at nlnetlabs.nl
Thu May 8 08:13:52 UTC 2014


On 05/08/2014 09:22 AM, Catalin Leanca wrote:
> Now it seems that is working. I don't know what happend.
> What's the logic behind that file ?

The logic is that if you stop the daemon, the state of zone transfers is
kept.

It is important to maintain which serial was last received and when it
happened, so that on a restart you know what is the latest received
version of the zone, when should OpenDNSSEC refresh again.

Best regards,
  Matthijs


> 
> 10x
> 
> On 08/05/14 09:43, Matthijs Mekking wrote:
>> On 05/08/2014 08:24 AM, Catalin Leanca wrote:
>>> Hi,
>>>
>>> No indication in logs.
>>> Content of file:
>>>
>>> ;OpenDNSSEC-backup-v3
>>> ;;Zone: name "zone" ttl 2152792320 mname ns.rotld.ro. rname
>>> hostmaster.rotld.ro. serial 2013228293 refresh 10800 retry 3600 expire
>>> 604800 minimum 3600
>>> ;;Master: num 0 next -1 round -1 timeout 1399539604
>>> ;;Serial: xfr 2013228293 1399529822 notify 2013228293 0 disk 2013228293
>>> 1399529822
>>> ;OpenDNSSEC-backup-v3
>> That looks normal. Incoming serial on disk and in memory is 2013228293,
>> last notified is also 2013228293. The REFRESH parameter is in use and it
>> is still 9782 seconds before OpenDNSSEC retries a zone transfer.
>>
>> I assume the serial on the master is greater than 2013228293? What
>> happens if you do for example a ldns-notify to opendnssec?
>>
>> Best regards,
>>    Matthijs
>>
>>
>>>
>>> On 08/05/14 09:15, Matthijs Mekking wrote:
>>>> Hi Catalin,
>>>>
>>>> Do the logs give any indication why the transfer is not working? Could
>>>> you share the xfrd-state file with me?
>>>>
>>>> Best regards,
>>>>     Matthijs
>>>>
>>>> On 05/07/2014 11:30 PM, Catalin Leanca wrote:
>>>>> Hello,
>>>>>
>>>>> I'm using DNS input/output adapter for my zone. After "ods-control
>>>>> stop"
>>>>> in /tmp directory
>>>>> appears a file called zone.xfrd-state and the following input
>>>>> axfr/ixfr
>>>>> is not working
>>>>> anymore. In log files there is no indication even if i use signer
>>>>> verbosity 5.
>>>>> After manually deleting the file and restarting daemons input
>>>>> transfers
>>>>> work again.
>>>>> Is this the normal operation ? If not, how to avoid this ? That is the
>>>>> purpose of this file ?
>>>>>
>>>>> PS: ODS version 1.4.5
>>>>>
>>>>> Thanks,
>>>>> Catalin L.
>>>>>
>>>>> _______________________________________________
>>>>> Opendnssec-user mailing list
>>>>> Opendnssec-user at lists.opendnssec.org
>>>>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
>>>
>>
> 
> 




More information about the Opendnssec-user mailing list