B10-XFRIN(8)

NAME
b10-xfrin - Incoming DNS zone transfer service

SYNOPSIS

b10-xfrin

DESCRIPTION

The b10-xfrin daemon provides the BIND 10 incoming DNS zone transfer service. Normally it is started by the bind10(8) boss process. When triggered it can request and receive a zone transfer and store the zone in a BIND 10 zone data store.

    Note

    This prototype release only supports AXFR. IXFR is not implemented.

This daemon communicates with BIND 10 over a b10-msgq(8) C-Channel connection. If this connection is not established, b10-xfrin will exit.

b10-xfrin receives its configurations from b10-cfgmgr(8).

CONFIGURATION AND COMMANDS

The configurable settings are:

transfers-in defines the maximum number of inbound zone transfers that can run concurrently. The default is 10.

zones is a list of zones known to the b10-xfrin daemon. The list items are: name (the zone name), class (defaults to “IN”), master_addr (the zone master to transfer from), master_port (defaults to 53), and tsig_key (optional TSIG key to use). The tsig_key is specified using a full string colon-delimited name:key:algorithm representation (e.g. “foo.example.org:EvABsfU2h7uofnmqaRCrhHunGsd=:hmac-sha1”).

(The site-wide master_addr and master_port configurations are deprecated; use the zones list configuration instead.)

The configuration commands are:

notify is sent by b10-zonemgr(8) when a DNS NOTIFY message is received to initiate a zone transfer. This is an internal command and not exposed to the administrator.

refresh triggers the transfer in for a single zone. It is the same as retransfer except it checks the SOA serial first. This is an internal command and not exposed to the administrator.

refresh_from_zonemgr is sent by b10-zonemgr(8) according to the SOA's REFRESH time to tell b10-xfrin that the zone needs to do a zone refresh. This is an internal command and not exposed to the administrator.

retransfer triggers the transfer in for a single zone without checking the zone's serial number. It has the following arguments: zone_name to define the zone to request, zone_class to define the class (defaults to “IN”), master to define the IP address of the authoritative server to transfer from, and port to define the port number on the authoritative server (defaults to 53). If the address or port is not specified, it will use the value previously defined in the zones configuration.

shutdown stops all incoming zone transfers and exits b10-xfrin. (Note that the BIND 10 boss process will restart this service.)

    Note

    This prototype version uses SQLite3 as its data source backend. Future versions will be configurable, supporting multiple data storage types.

SEE ALSO

b10-cfgmgr(8), b10-msgq(8), b10-zonemgr(8), bind10(8), BIND 10 Guide.

HISTORY

The b10-xfrin daemon was implemented in March 2010 by Zhang Likun of CNNIC for the ISC BIND 10 project.

COPYRIGHT
Copyright © 2010-2011 Internet Systems Consortium, Inc. ("ISC")