Improving configuration example

This commit is contained in:
Tristan PILAT 2018-07-25 17:46:56 +02:00
parent 8b04aec8fa
commit 8033450539

View file

@ -76,14 +76,14 @@ Voici le fichier `nsd.conf` sur le serveur avec l'adresse IP 192.0.2.53 (master)
~~~ ~~~
~~~ ~~~
server: server:
server-count: 1 # use this number of cpu cores hide-version: yes
database: "" # or use "" verbosity: 1
zonelistfile: "/var/nsd/db/zone.list" database: "" # disable database
username: _nsd
logfile: "/var/log/nsd.log" logfile: "/var/log/nsd.log"
pidfile: "/var/nsd/run/nsd.pid" pidfile: "/var/nsd/run/nsd.pid"
xfrdfile: "/var/nsd/run/xfrd.state" xfrdfile: "/var/nsd/run/xfrd.state"
zonelistfile: "/var/nsd/db/zone.list"
## bind to a specific address/port ## bind to a specific address/port
ip-address: 192.0.2.53 ip-address: 192.0.2.53
@ -97,12 +97,16 @@ key:
algorithm: hmac-sha256 algorithm: hmac-sha256
secret: "rMZVA3oOLyrk9Xn+aKe19aCqOf3xYv9kVw8M3crGkFE=" secret: "rMZVA3oOLyrk9Xn+aKe19aCqOf3xYv9kVw8M3crGkFE="
pattern:
name: "talktoslave"
notify: 192.0.2.54 key
provide-xfr: 192.0.2.54 key
## master zone example.com ## master zone example.com
zone: zone:
name: "example.com" name: "example.com"
zonefile: "master/db.example.com" zonefile: "/master/db.example.com"
notify: 192.0.2.54 key.example.com. include-pattern: "talktoslave"
provide-xfr: 192.0.2.54 key.example.com.
~~~ ~~~
Sur le serveur master on devra également définir la zone : Sur le serveur master on devra également définir la zone :
@ -169,14 +173,14 @@ Et voici le fichier `nsd.conf` sur le serveur avec l'adresse IP 192.0.2.54 (slav
~~~ ~~~
~~~ ~~~
server: server:
server-count: 1 # use this number of cpu cores hide-version: yes
database: "" # or use "" verbosity: 1
zonelistfile: "/var/nsd/db/zone.list" database: "" # disable database
username: _nsd
logfile: "/var/log/nsd.log" logfile: "/var/log/nsd.log"
pidfile: "/var/nsd/run/nsd.pid" pidfile: "/var/nsd/run/nsd.pid"
xfrdfile: "/var/nsd/run/xfrd.state" xfrdfile: "/var/nsd/run/xfrd.state"
zonelistfile: "/var/nsd/db/zone.list"
## bind to a specific address/port ## bind to a specific address/port
ip-address: 192.0.2.54 ip-address: 192.0.2.54
@ -189,13 +193,17 @@ key:
name: "key.example.com." name: "key.example.com."
algorithm: hmac-sha256 algorithm: hmac-sha256
secret: "rMZVA3oOLyrk9Xn+aKe19aCqOf3xYv9kVw8M3crGkFE=" secret: "rMZVA3oOLyrk9Xn+aKe19aCqOf3xYv9kVw8M3crGkFE="
pattern:
name: "listentomaster"
allow-notify: 192.0.2.53 key.example.com.
request-xfr: AXFR 192.0.2.53 key.example.com.
## master zone example.com ## master zone example.com
zone: zone:
name: "example.com" name: "example.com"
zonefile: "slave/db.example.com" zonefile: "slave/db.example.com"
allow-notify: 192.0.2.53 key.example.com. include-pattern: "listentomaster"
request-xfr: AXFR 192.0.2.53 key.example.com.
~~~ ~~~
On vérifie la configration : On vérifie la configration :