Nsd tips and tricks

Martin Häggström

This is tested on OpenBSD 7.5

To use nsd-control set control-enable: yes in nsd.conf first.

nsd stats without resetting the stats

nsd-control stats_noreset

Show stats which are not 0

nsd-control stats_noreset | grep num.type | grep -v '=0'

Reload without restart

nsd-control reload

Master slave

When syncing to the slave use a key or not. Don't mix NOKEY on the master with a key on the slave for example. Otherwise the log on master says the slave is unreachable and the slave reports "xfrd: zone example.com received error code REFUSED".

Master 
	  
	  zone:
    	      name: example.com
              zonefile: master/example.com.forward
              notify: 192.168.11 sec1_key
              provide-xfr: 192.168.1.11 sec1_key
Slave 
	
	zone:
            name: example.com
            zonefile: slave/example.com.forward
            allow-notify: 192.168.1.10 sec1_key
            request-xfr: 192.168.1.10 sec1_key