b10-xfrin.8 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168
  1. '\" t
  2. .\" Title: b10-xfrin
  3. .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
  4. .\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
  5. .\" Date: May 19, 2011
  6. .\" Manual: BIND10
  7. .\" Source: BIND10
  8. .\" Language: English
  9. .\"
  10. .TH "B10\-XFRIN" "8" "May 19, 2011" "BIND10" "BIND10"
  11. .\" -----------------------------------------------------------------
  12. .\" * set default formatting
  13. .\" -----------------------------------------------------------------
  14. .\" disable hyphenation
  15. .nh
  16. .\" disable justification (adjust text to left margin only)
  17. .ad l
  18. .\" -----------------------------------------------------------------
  19. .\" * MAIN CONTENT STARTS HERE *
  20. .\" -----------------------------------------------------------------
  21. .SH "NAME"
  22. b10-xfrin \- Incoming DNS zone transfer service
  23. .SH "SYNOPSIS"
  24. .HP \w'\fBb10\-xfrin\fR\ 'u
  25. \fBb10\-xfrin\fR
  26. .SH "DESCRIPTION"
  27. .PP
  28. The
  29. \fBb10\-xfrin\fR
  30. daemon provides the BIND 10 incoming DNS zone transfer service\&. Normally it is started by the
  31. \fBbind10\fR(8)
  32. boss process\&. When triggered it can request and receive a zone transfer and store the zone in a BIND 10 zone data store\&.
  33. .if n \{\
  34. .sp
  35. .\}
  36. .RS 4
  37. .it 1 an-trap
  38. .nr an-no-space-flag 1
  39. .nr an-break-flag 1
  40. .br
  41. .ps +1
  42. \fBNote\fR
  43. .ps -1
  44. .br
  45. .sp
  46. This prototype release only supports AXFR\&. IXFR is not implemented\&.
  47. .sp .5v
  48. .RE
  49. .PP
  50. This daemon communicates with BIND 10 over a
  51. \fBb10-msgq\fR(8)
  52. C\-Channel connection\&. If this connection is not established,
  53. \fBb10\-xfrin\fR
  54. will exit\&.
  55. .PP
  56. \fBb10\-xfrin\fR
  57. receives its configurations from
  58. \fBb10-cfgmgr\fR(8)\&.
  59. .SH "CONFIGURATION AND COMMANDS"
  60. .PP
  61. The configurable settings are:
  62. .PP
  63. \fItransfers\-in\fR
  64. defines the maximum number of inbound zone transfers that can run concurrently\&. The default is 10\&.
  65. .PP
  66. \fIzones\fR
  67. is a list of zones known to the
  68. \fBb10\-xfrin\fR
  69. daemon\&. The list items are:
  70. \fIname\fR
  71. (the zone name),
  72. \fImaster_addr\fR
  73. (the zone master to transfer from),
  74. \fImaster_port\fR
  75. (defaults to 53), and
  76. \fItsig_key\fR
  77. (optional TSIG key to use)\&. The
  78. \fItsig_key\fR
  79. is specified using a full string colon\-delimited name:key:algorithm representation (e\&.g\&.
  80. \(lqfoo\&.example\&.org:EvABsfU2h7uofnmqaRCrhHunGsd=:hmac\-sha1\(rq)\&.
  81. .PP
  82. (The site\-wide
  83. \fImaster_addr\fR
  84. and
  85. \fImaster_port\fR
  86. configurations are deprecated; use the
  87. \fIzones\fR
  88. list configuration instead\&.)
  89. .PP
  90. The configuration commands are:
  91. .PP
  92. \fBnotify\fR
  93. is sent by
  94. \fBb10-zonemgr\fR(8)
  95. when a DNS NOTIFY message is received to initiate a zone transfer\&.
  96. This is an internal command and not exposed to the administrator\&.
  97. .PP
  98. \fBrefresh\fR
  99. triggers the transfer in for a single zone\&. It is the same as
  100. \fBretransfer\fR
  101. except it checks the SOA serial first\&.
  102. This is an internal command and not exposed to the administrator\&.
  103. .PP
  104. \fBrefresh_from_zonemgr\fR
  105. is sent by
  106. \fBb10-zonemgr\fR(8)
  107. according to the SOA\'s REFRESH time to tell
  108. \fBb10\-xfrin\fR
  109. that the zone needs to do a zone refresh\&. This is an internal command and not exposed to the administrator\&.
  110. .PP
  111. \fBretransfer\fR
  112. triggers the transfer in for a single zone without checking the zone\'s serial number\&. It has the following arguments:
  113. \fIzone_name\fR
  114. to define the zone to request,
  115. \fIzone_class\fR
  116. to define the class (defaults to
  117. \(lqIN\(rq),
  118. \fImaster\fR
  119. to define the IP address of the authoritative server to transfer from, and
  120. \fIport\fR
  121. to define the port number on the authoritative server (defaults to 53)\&. If the address or port is not specified, it will use the values previously defined in the
  122. \fIzones\fR
  123. configuration\&.
  124. .PP
  125. \fBshutdown\fR
  126. stops all incoming zone transfers and exits
  127. \fBb10\-xfrin\fR\&. (Note that the BIND 10 boss process will restart this service\&.)
  128. .if n \{\
  129. .sp
  130. .\}
  131. .RS 4
  132. .it 1 an-trap
  133. .nr an-no-space-flag 1
  134. .nr an-break-flag 1
  135. .br
  136. .ps +1
  137. \fBNote\fR
  138. .ps -1
  139. .br
  140. .PP
  141. This prototype version uses SQLite3 as its data source backend\&. Future versions will be configurable, supporting multiple data storage types\&.
  142. .sp .5v
  143. .RE
  144. .SH "SEE ALSO"
  145. .PP
  146. \fBb10-cfgmgr\fR(8),
  147. \fBb10-msgq\fR(8),
  148. \fBb10-zonemgr\fR(8),
  149. \fBbind10\fR(8),
  150. BIND 10 Guide\&.
  151. .SH "HISTORY"
  152. .PP
  153. The
  154. \fBb10\-xfrin\fR
  155. daemon was implemented in March 2010 by Zhang Likun of CNNIC for the ISC BIND 10 project\&.
  156. .SH "COPYRIGHT"
  157. .br
  158. Copyright \(co 2010-2011 Internet Systems Consortium, Inc. ("ISC")
  159. .br