Package: wnpp
Severity: wishlist
Owner: Daniel Gröber <d...@darkboxed.org>
X-Debbugs-Cc: debian-de...@lists.debian.org, d...@darkboxed.org, Tony Finch 
<d...@dotat.at>

Hi d-devel,

I'm packaging regrettably obscure but highly useful DNS software again
(before: nsdiff). Tony really knows how to build these minimal but
exremely versatile tools!

* Package name    : nsnotifyd
  Version         : 2.3
  Upstream Contact: Tony Finch <d...@dotat.at>
* URL             : https://dotat.at/prog/nsnotifyd/
* License         : 0BSD OR MIT-0
  Programming Lang: C, Shell, Perl
  Description     : promptly run command on DNS zone changes

The nsnotify daemon monitors DNS zones for changes and runs a command
as soon as a change is noticed.

It supports real-time notifications via DNS NOTIFY (RFC 1996) but as this
needs DNS server-side configuration can also fall-back to polling using
the standard zone serial number (SOA record).

A number of example programs to run under nsnotifyd are included:

nsnotify2git - record history of zone using AXFR zone transfer.

metazone - control the configuration of many name servers using a DNS
zone -- similar to the now standardized RFC 9432 catalog zones.

nsnotify2stealth - forward NOTIFY from primary to stealth secondaries
for faster updates.

nsnotify2update - bump-in-the-wire DNSSEC signer using nsdiff.1 and
nsupdate.1 (DNS UPDATE, RFC 2136).

--

I'm going to maintain it myself, co-maintainers welcome as always.
It's going in the Debian namespace on Salsa.

The nsnotifyd program itself seems essentially done, but I would like
to look into formalizing Tony's example programs since they don't have
enough config knobs to put into /usr/bin right now.

The implementation is based on BIND (libbind) right now. For DNS
implementation diversity I'd be interested in building a port for Knot
DNS (libknot) as well. If anyone is motivated to work on that let me
know.

Quoting Tony:

> It's a weird package because I get almost no feedback, but
> occasionally people tell me in person that they are happily using it.
> I guess it's one of those programs that's basically done, a rarity in
> software!

Exactly the kind of software we should strive to have in Debian <3

--Daniel

Reply via email to