[Pdns-users] Differences between slave and superslave

[Francis Ramírez Verdugo]

Ok. So, as far as I understand, 'supermaster' table is another 'turn of the screw' in terms of security that powerDNS provides.
We could have a slave name server and define a master in our 'domains' table but, unless we insert that master in the 'supermasters' table, all notifications and changes from that master will be banned, right?

> Date: Tue, 14 Sep 2010 07:46:37 -0500
> From: ktm at rice.edu
> To: frankeys2 at hotmail.com
> CC: ch at zeha.at; pdns-users at mailman.powerdns.com
> Subject: Re: [Pdns-users] Differences between slave and superslave
> 
> Hi Francis,
> 
> You do not want just any nameserver to be able to populate
> zones for your servers. The supermaster table is used to
> define which servers can do this -- these would be the
> servers you manage or trust.
> 
> Cheers,
> Ken
> 
> On Tue, Sep 14, 2010 at 01:25:42PM +0200, Francis Ram?rez Verdugo wrote:
> > 
> > Thanks a lot Christian, but I would need a little more explanation:
> > 
> > What's then the difference 'in concept talking' between a slave name server and a superslave one (apart, obviously, from having a concrete row in its 'supermasters' table)?
> > 
> > I think my main confusion is related with the utility of 'supermasters' table. Since, we have the 'domains' table where we can put our masters. Why having to do then in another table? Is it maybe a way for making the slave more restricted?
> > 
> > 
> > > Date: Mon, 13 Sep 2010 21:16:50 +0200
> > > From: ch at zeha.at
> > > To: frankeys2 at hotmail.com
> > > CC: pdns-users at mailman.powerdns.com
> > > Subject: Re: [Pdns-users] Differences between slave and superslave
> > > 
> > > * Francis Ram?rez Verdugo <frankeys2 at hotmail.com> [100913 20:50]:
> > > > 
> > > > Hi all, 
> > > >  
> > > > I am trying to figure out when a name server is 
> > > > acting as slave and when as superslave. I mean, What is the difference which 
> > > > makes it to be called in these two ways? 
> > > 
> > > A superslave [1] is a slave with a configured list of supermasters. How
> > > this is configured depends on the backend your're using. For the generic 
> > > mysql/pgsql backend please look at [2].
> > > 
> > > > BTW, I supose that the opposite scenario is between 
> > > > master and supermaster. In fact seting up a name server as supermaster means 
> > > > that if another one is a slave of it, actually it is a superslave. 
> > > 
> > > There is no special supermaster operation. Any nameserver which is
> > > able to act as a master is also a supermaster. This also holds true
> > > for other nameserver products.
> > > 
> > >   Christian
> > > 
> > >  [1] http://doc.powerdns.com/slave.html#SUPERMASTER
> > >  [2] http://doc.powerdns.com/generic-mypgsql-backends.html#AEN6343
> > > 
> > > -- 
> > > christian hofstaedtler
> >  		 	   		  
> > _______________________________________________
> > Pdns-users mailing list
> > Pdns-users at mailman.powerdns.com
> > http://mailman.powerdns.com/mailman/listinfo/pdns-users
> 
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20100914/bbd6b119/attachment-0001.html>