Re: DNSSEC and DLZ

On 1.1.2016 06:35, Mark Goldfinch wrote:
> On 1 Jan 2016 6:24 p.m., "Evan Hunt" <[email protected]> wrote:
>>> - is there any reference documentation I can draw upon?
>>
>> Not that I know of, but there may be some Red Hat documentation I haven't
>> seen.  How about I start up a conversation between you and me and the RH
>> developers next week after the post-holiday work backlog settles down
>> a bit?  (If you don't hear from me by Thursday, poke me.)
> 
> That sounds like a great idea.
> 
> The inability to run DNSSec via DLZ is a serious limitation. This plus the
> other disadvantages like performance tradeoffs should be noted within
> documentation.

There is not much to document because the dyndb API just loads your code
inside BIND and that is it. After that you can use all BIND internals to
implement whatever you need.

A simple dyndb driver is available as part of BIND tests:
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=blob;f=bin/tests/system/dyndb/driver/README

Another (brutally complex) example is the LDAP driver developer by Red Hat:
https://fedorahosted.org/bind-dyndb-ldap/

Please note that the latest version of dyndb API in BIND tree differs from the
version used by bind-dyndb-ldap project and that the API may undergo some
changes as we move forward. It was not released yet so we cannot be sure that
we did not miss something important :-)

Let me know if you have any questions regarding dyndb, I will be glad to
answer them.

Have a nice day!

-- 
Petr Spacek  @  Red Hat

------------------------------------------------------------------------------