B10-XFROUT(8)

NAME
b10-xfrout - Outbound DNS zone transfer service

SYNOPSIS

b10-xfrout [-v] [--verbose]

DESCRIPTION

The b10-xfrout daemon provides the BIND 10 outgoing DNS zone transfer service using AXFR or IXFR. It is also used to send outgoing NOTIFY messages. Normally it is started by the bind10(8) boss process. When the b10-auth DNS server receives a transfer request, b10-xfrout sends the zone as found in the BIND 10 zone data store.

    Note

    Currently IXFR only works if it gets the zone via b10-xfrin and only on TCP.

This daemon communicates with BIND 10 over a b10-msgq(8) C-Channel connection. If this connection is not established, b10-xfrout will exit.

b10-xfrout receives its configurations from b10-cfgmgr(8).

CONFIGURATION AND COMMANDS

The configurable settings are:

transfers_out defines the maximum number of outgoing zone transfers that can run concurrently. The default is 10.

transfer_acl A list of ACL elements that apply to all transfer requests by default (unless overridden in zone_config). See the BIND 10 Guide for configuration examples. The default is an element that allows any transfer requests.

zone_config A list of JSON objects (i.e. maps) that define per zone configuration concerning b10-xfrout. The supported names of each object are "origin" (the origin name of the zone), "class" (the RR class of the zone, optional, default to "IN"), and "transfer_acl" (ACL only applicable to transfer requests for that zone). See the BIND 10 Guide for configuration examples. The default is an empty list, that is, no zone specific configuration.

    Note

    This prototype version uses SQLite3 as its data source backend. Future versions will be configurable, supporting multiple data storage types.

The configuration commands are:

notify triggers b10-xfrout to send NOTIFY message(s). It has the following arguments: zone_name to define the zone to send notifies for and the optional zone_class to define the class (defaults to “IN”). b10-xfrin(8) sends this command when a zone transferred in successfully.

shutdown stops all outbound zone transfers and exits b10-xfrout. This has an optional pid argument to select the process ID to stop. (Note that the BIND 10 boss process may restart this service if configured.)

SEE ALSO

b10-auth(8), b10-cfgmgr(8), b10-msgq(8), b10-xfrin(8), bind10(8), BIND 10 Guide.

HISTORY

The b10-xfrout daemon was first implemented in March 2010 by Zhang Likun of CNNIC for the ISC BIND 10 project.

COPYRIGHT
Copyright © 2010-2012 Internet Systems Consortium, Inc. ("ISC")