--- Begin Message ---
Randy Bush <ra...@psg.com> wrote:-

>it occurred to me that it migh tme wise to have a rancid like
>(https://shrubbery.net/rancid/) equivalent for critical domains.
>i.e. to git record changes and warn of radical diffs.
>
>is there any foss tooling in this space?

For the recording, I do something similar within our systems which is
really simple, and roughly:-

cd $repodir
foreach $zone {
  dig +nocmd +nostats +onesoa @$master $zone axfr > $zone.zone
}
git add -A
git commit -m "cron script"

which runs as a daily job via cron.  Obviously, this only does the
recording into a git repo, but does not do any alerting.

--
Best wishes,
Matthew

--- End Message ---
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to