ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Merge branch '3422-dnssec-policy-clarifications-v9_18' into 'v9_18'

Browse Source 
[v9_18] Add some clarifications wrt dynamic zones

See merge request isc-projects/bind9!6489
This commit is contained in:
Matthijs Mekking
2022-06-27 09:54:52 +00:00
parent def7601987 f2fc0e9c9e
commit 11abb69fb4
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
doc/arm/reference.rst
View File

@@ -6667,8 +6667,16 @@ perform dynamic updates to a zone:
- :namedconf:ref:`allow-update` - a simple access control list
- :namedconf:ref:`update-policy` - fine-grained access control
In both cases, BIND 9 writes the updates
to the zone's filename set in ``file``.
In both cases, BIND 9 writes the updates to the zone's filename
set in ``file``.
In the case of a DNSSEC zone, DNSSEC records are also written to
the zone's filename, unless ``inline-signing`` is enabled.
.. note:: The zone file can no longer be manually updated while ``named``
is running; it is now necessary to perform :option:`rndc freeze`, edit,
and then perform :option:`rndc thaw`. Comments and formatting
in the zone file are lost when dynamic updates occur.
.. namedconf:statement:: update-policy