Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for empty forwarders in master zone #244

Merged
merged 1 commit into from
Feb 13, 2024

Conversation

mbarecki
Copy link
Contributor

This gives possibility to disable forwarding for delegated zone when server is authoritative for domain and global forwarding is set.

@@ -51,6 +51,8 @@
# @param zonefilepath
# @param filename
# @param forward
# @param master_empty_forwarders_enable
# Enable empty forwarders option in master zone
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is a bit brief. It doesn't explain that forwarders must be empty and zonetype set to master.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello @ekohl,

Thank you for looking into this and for your feedback.

Description for master_empty_forwarders_enable parameter was updated as you suggested.

Comment on lines +13 to +14
<% if @forwarders.empty? && @master_empty_forwarders_enable -%>
forwarders {};
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a reason to enforce that forwarders is empty? Isn't there a case to be made for master_forwarders_enable?

https://serverfault.com/questions/713256/purpose-of-a-forwarder-option-in-a-master-zone suggests there is also a case to be made to actually include forwarders, instead of discarding the forwarders values provided.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Possibility to enforce empty forwarders is for disabling global forwarding when server is authoritative for domain and subdomain is delegated.
Related link:
https://kb.isc.org/docs/aa-00538

Possibility to include forwarders in master zone was introduced now as well.

This gives possibility to enable forwarding in master zone.

Add support for empty forwarders in master zone

Allows to disable forwarding in master zone to cover scenario
when server is authoritative for domain, subdomain is delegated
and global forwarding is set.
@ekohl ekohl merged commit 1d85c75 into theforeman:master Feb 13, 2024
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants