Exactly.
On November 27, 2017 9:22:51 PM GMT+08:00, Tony Finch <d...@dotat.at> wrote:
>Joe Abley <jab...@hopcount.ca> wrote:
>> On Nov 23, 2017, at 12:44, Tony Finch <d...@dotat.at> wrote:
>>
>> > It's quite difficult to have multiple masters and DNSSEC and
>coherent
>> > copies of the zone from all masters - i.e. more effort than just
>spinning
>> > up parallel instances of BIND or Knot in automatic signing mode.
>>
>> Note that I wasn't talking about multiple signers; I was talking
>about
>> (from the perspective of one particular slave) having multiple
>masters
>> available to serve precisely the same zone.
>
>A primary master is wrt a zone not a server - a zone's primary master
>is
>a server that's authoritative for a zone and which does not get the
>zone
>contents via axfr/ixfr, but instead from a master file and/or UPDATE
>(or
>a non-standard mechanism such as directly from a database).
>
>The term says nothing about the downstream xfer topology. You can very
>well having a primary master (plus backup(s)) feeding a cluster of
>distribution servers which in turn feed the public authoritative
>servers.
>The xfer topology doesn't have to be a tree, it doesn't even have to be
>an
>acyclic graph.
>
>Tony.
>--
>f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h
>punycode
>German Bight, Humber: West becoming cyclonic 5 to 7, increasing gale 8
>or
>severe gale 9 for a time. Moderate or rough, occasionally very rough.
>Rain or
>squally showers. Moderate or good, occasionally poor.
>
>_______________________________________________
>DNSOP mailing list
>DNSOP@ietf.org
>https://www.ietf.org/mailman/listinfo/dnsop
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
