upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-03 22:08:25 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

Merge branch '3422-dnssec-policy-clarifications' into 'main'

Browse source 
Add some clarifications wrt dynamic zones

Closes #3422

See merge request isc-projects/bind9!6487
This commit is contained in:
Matthijs Mekking 2022-06-27 09:03:54 +00:00
commit c7146ce90a
1 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
doc/arm/reference.rst
View file

@ -6659,8 +6659,16 @@ perform dynamic updates to a zone:
- :namedconf:ref:`allow-update` - a simple access control list
- :namedconf:ref:`update-policy` - fine-grained access control
In both cases, BIND 9 writes the updates
to the zone's filename set in ``file``.
In both cases, BIND 9 writes the updates to the zone's filename
set in ``file``.
In the case of a DNSSEC zone, DNSSEC records are also written to
the zone's filename, unless ``inline-signing`` is enabled.
.. note:: The zone file can no longer be manually updated while ``named``
is running; it is now necessary to perform :option:`rndc freeze`, edit,
and then perform :option:`rndc thaw`. Comments and formatting
in the zone file are lost when dynamic updates occur.
.. namedconf:statement:: update-policy