Skip to content

TSIG names cannot be reused across different zones. #1325

@Fattouche

Description

@Fattouche

Due to the nature of the TsigSecret in the Server{} object, it's not possible to re-use TSIG names across different zones.

For example:

TsigSecret = map[string]string{"axfr.": "so6ZGir4GPAqINNh9U5c3A=="}

Here the tsig name is axfr. which means that if any other zone wanted to use axfr. as well, it would be overwrite this one. Alternatively, the server could specify the TsigSecret to use zoneName for the TSIG name, which is better because duplicates would not occur, however this means that every client using that zone would need to have the same TSIG and also wouldn't allow TSIGs to be re-used across multiple zones which again is not great.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions