upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-23 16:20:26 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix #140: Document slave not downloading new zonefile upon update.

Browse source
This commit is contained in:
W.C.A. Wijngaards 2020-01-06 16:36:44 +01:00
parent 20a3d3be5f
commit 453c84b237
2 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
doc/Changelog
View file

@ -1,6 +1,7 @@
6 January 2020: Wouter 6 January 2020: Wouter
- Merge #135 from Florian Obser: Use passed in neg and key cache - Merge #135 from Florian Obser: Use passed in neg and key cache
if non-NULL. if non-NULL.
- Fix #140: Document slave not downloading new zonefile upon update.
16 December 2019: George 16 December 2019: George
- Update mailing list URL. - Update mailing list URL.

10
doc/unbound.conf.5.in
View file

@ -1680,6 +1680,12 @@ Name of the authority zone.
Where to download a copy of the zone from, with AXFR and IXFR. Multiple Where to download a copy of the zone from, with AXFR and IXFR. Multiple
masters can be specified. They are all tried if one fails. masters can be specified. They are all tried if one fails.
With the "ip#name" notation a AXFR over TLS can be used. With the "ip#name" notation a AXFR over TLS can be used.
If you point it at another Unbound instance, it would not work because
that does not support AXFR/IXFR for the zone, but if you used \fBurl:\fR to download
the zonefile as a text file from a webserver that would work.
If you specify the hostname, you cannot use the domain from the zonefile,
because it may not have that when retrieving that data, instead use a plain
IP address to avoid a circular dependency on retrieving that IP address.
.TP .TP
.B url: \fI<url to zonefile> .B url: \fI<url to zonefile>
Where to download a zonefile for the zone. With http or https. An example Where to download a zonefile for the zone. With http or https. An example
@ -1691,6 +1697,10 @@ see if the SOA serial number has changed, reducing the number of downloads.
If none of the urls work, the masters are tried with IXFR and AXFR. If none of the urls work, the masters are tried with IXFR and AXFR.
For https, the \fBtls\-cert\-bundle\fR and the hostname from the url are used For https, the \fBtls\-cert\-bundle\fR and the hostname from the url are used
to authenticate the connection. to authenticate the connection.
If you specify a hostname in the URL, you cannot use the domain from the
zonefile, because it may not have that when retrieving that data, instead
use a plain IP address to avoid a circular dependency on retrieving that IP
address. Avoid dependencies on name lookups by using a notation like "http://192.0.2.1/unbound-master/example.com.zone", with an explicit IP address.
.TP .TP
.B allow\-notify: \fI<IP address or host name or netblockIP/prefix> .B allow\-notify: \fI<IP address or host name or netblockIP/prefix>
With allow\-notify you can specify additional sources of notifies. With allow\-notify you can specify additional sources of notifies.