diff options
author | Felix Lechner <felix.lechner@lease-up.com> | 2023-02-13 10:59:43 -0800 |
---|---|---|
committer | 宋文武 <iyzsong@member.fsf.org> | 2023-03-06 16:10:27 +0800 |
commit | 882112b581b2e6e7796f34ab0e3eb5cef18c8f18 (patch) | |
tree | 68981c22cf8bb9d60435916fe76840093e5d777a | |
parent | 8e9f207c5e379059466ca88fb28d50330f4a6674 (diff) | |
download | guix-882112b581b2e6e7796f34ab0e3eb5cef18c8f18.tar.gz |
services: knot: Default zone-file-refresh to 12h.
The Knot DNS service in Guix uses two days, or 48 hours, for the SOA refresh interval but that is outside the range of RFC 1912, which is entitled "Common DNS Operational and Configuration Errors." [1] Section 2.2 of RFC 1912 recommends a maximum of 12 hours for the SOA refresh rate: "You can keep it short (20 mins to 2 hours) if you aren't worried about a small increase in bandwidth used, or longer (2-12 hours) if your Internet connection is slow or is started on demand." This commit sets the default refresh interval at the nearest value recommended by the standard, which is 12 hours. Due to the widespread adoption of NOTIFY messages between primary and secondary DNS servers, the SOA refresh interval has arguably lost some importance, but the Guix default should still be in line with the standards. Values outside the recommended range can provoke warning messages from services commonly used to find bugs in DNS configurations, such as the MX Toolbox Super Tool. [2] [1] https://datatracker.ietf.org/doc/rfc1912/ [2] https://mxtoolbox.com/SuperTool.aspx * gnu/services/dns.scm (<zone-file>)[refresh]: Default to (* 12 3600). Signed-off-by: 宋文武 <iyzsong@member.fsf.org>
-rw-r--r-- | gnu/services/dns.scm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm index 50753b7ab6..32fb8c0664 100644 --- a/gnu/services/dns.scm +++ b/gnu/services/dns.scm @@ -114,7 +114,7 @@ (serial zone-file-serial (default 1)) (refresh zone-file-refresh - (default (* 2 24 3600))) + (default (* 12 3600))) (retry zone-file-retry (default (* 15 60))) (expiry zone-file-expiry |