On 01. 10. 24 8:15, Terik Erik Ashfolk wrote:
Please scratch the below line previous post.
Upon detail look, they have Multi-Master support, but not with DNSSEC
support.
If you really wanted multi-master with DNSSEC you can have a look at
FreeIPA.org, their DNS integration has that.
It supports disconnected operation with eventual consistency, but it is
very very _very_ complex beast which combines:
- BIND
- bind-dyndn-ldap LDAP backend for DNS data and zone config
- OpenDNSSEC to manage keys
- SoftHSM to store keys
- extra magic scripts to synchronize keys via LDAP
That way lies madness! (Please note I'm saying that as a person who
designed and implemented it!)
--
Petr Špaček
Internet Systems Consortium
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
