[Pdns-users] slave=no, smartmasters and AXFRs

Lorens Kockum lorens-pdns-3987 at tagged.lorens.org
Thu May 12 16:29:24 UTC 2005


On Thu, May 12, 2005 at 04:11:02PM +0200, Frank Louwers wrote:
> - our own ns1/ns2/ns3 use mysql replication (ns1 and ns3 are
>   mysql-replication slaves of ns2). No axfr/... involved in replication
>   among them.
> 
> - we offer colocation customers the possibility to use our dns-servers
>   as backup dns-servers for the domains they have. We add the ip of the
>   nameserver of the customer to the supermasters table, and tell the
>   customer to send us NOTIFYs. The idea is that our ns2 catches the
>   NOTIFYS, add the domain to the database, do a AXFR from the customer's
>   nameserver, and let mysql replicate these new entries to ns1 and ns3.

And since that is what I concluded you should be doing, we
understand each other just fine :-)

> - ns1/ns3 will also get the NOTIFYs (as they are listed as NS for the
>   customer's domains), but as they are configured with "slave = no", I
>   assumed they wouldn't do axfrs from the customer.

And your problem is that they do. I'm afraid that I can't say if
it's a bug or not :-(

I can say that the problem will go away if either the slaves
have no write access to their db (which is good practice
anyway), and/or if the supermaster table is excluded from the
replication so that the supermaster tables on the slaves are
empty. Both would be best, of course.

HAND



More information about the Pdns-users mailing list