שיעורי מודול (3/3)
Aggiornamenti dinamici
Dynamic updates
DNS UPDATE lets an authorized system add or remove records without replacing an entire zone file by hand. It is useful for managed networks and automated services, but a reachable update interface must not accept changes from arbitrary clients.
Authenticate update requests and grant only the permissions each system needs. TSIG or another supported mechanism can authenticate requests. Separate credentials by system, protect and rotate them, log changes, and limit which names or record types each identity may update. Automation should have a tested rollback and an owner.
References: RFC 2136 — DNS UPDATE · RFC 3007 — secure dynamic updates
Check your understanding
Choose the best answer. The examples use training names and do not send real DNS queries.
Why limit dynamic-update permissions?