[Pdns-users] Automatically delete zones that are deleted on Supermaster

ktm at rice.edu ktm at rice.edu
Tue Oct 30 18:18:37 UTC 2012


On Tue, Oct 30, 2012 at 06:48:03PM +0100, Posner, Sebastian wrote:
> a b wrote:
> 
> > Nevertheless, in my experience, this should be handled by the pdns software. 
> > I'm thinking that if pdns supermaster is capable of "persuading" a superslave
> > to become a slave for a domain, and then a transfer takes place, would it not
> > be logical to expect that when said domain is removed from the supermaster,
> > the superslave gets a message to ditch said domain?
> 
> A supermaster is only supermaster from the superslaves point of view.
> A pdns superslave is in absolutely no way bound to have another pdns 
> acting as supermaster. This is due to the means that are used for 
> supermaster-superslave communications: DNS onboard means.
> 
> In fact, I'm running a pdns as superslave to a stock bind9. 
> Works like a charm.
> 
> Superslave operation is nothing but a special way to treat DNS notifies
> received from a remote server for a domain we ware not authoritative/
> configured for. There is no special "supermaster message type" the
> supermaster must know about and use for communications with the superslave.
> Hence, there is nothing that can be changed on supermaster side to
> communicate zone deletions to a superslave.
> 
> The changes would thus have to be made on superslave side:
> Eitehr one would have to change how superslave reacts when a supermaster
> ceases to claim responsibility for a zone it has caused to be created;
> or you use an addon-tool like the on from Mark Scholten that generally
> does exactly this - Check for all slave domains with the according master
> whether it's still present, and start giving it the count if it isn't.
> 
> Kind regards,
> 
> Sebastian

Hi,

It would be hideously ugly, but you could leverage a special content DNS
record to allow the super master to tell the slave that the domain is or
will be deleted. It would require a little bit of smarts/timing and cooperation
but it should work.

Regards,
Ken



More information about the Pdns-users mailing list