From 0260c0a3c1b1b1088724b50bce0fabe04b09f6b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Vavru=C5=A1a?= <marek.vavrusa@nic.cz> Date: Fri, 29 Aug 2014 15:17:55 +0200 Subject: [PATCH] doc: clarified xfr-in accepting multiple remotes --- NEWS | 2 +- doc/configuration.rst | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 3a8b9a0627..59292e553c 100644 --- a/NEWS +++ b/NEWS @@ -68,7 +68,7 @@ Features: - Synthetic IPv4/IPv6 reverse/forward records (optional module) - dnstap support in both utilities & server (optional module) - NOTIFY message support and new TSIG section in kdig - - Multi-master support + - Zone transfer master failover Improvements: ------------- diff --git a/doc/configuration.rst b/doc/configuration.rst index 2ca2bd9cce..269df00e44 100644 --- a/doc/configuration.rst +++ b/doc/configuration.rst @@ -79,6 +79,12 @@ AXFR:: } } +Note that the ``xfr-in`` option accepts a list of multiple remotes. +The first remote in the list is used as a primary master, and the rest is used +for failover should the connection with the primary master fail. +The list is rotated in this case, and a new primary is elected. +The preference list is reset on the configuration reload. + You can also use TSIG for access control. For this, you need to configure a TSIG key and assign it to a remote. Supported algorithms for TSIG key are: | ``hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512`` -- GitLab