Maintained by: NLnet Labs

[Unbound-users] 8.8.8.8

Papp Tamás
Mon Jun 28 16:27:02 CEST 2010


Paul Wouters wrote, On 2010. 06. 27. 17:52:
>> BTW, what does stub-prime exactly do? I'm afraid, it's not clear to 
>> me, what does "it performs NS set priming" mean?
>
> It is used when you want to "override" the real NS set and do the 
> lookup of
> a zone via nameservers that are not in the "official zone".
>
> For example, to reach the Canadian testbed for DNSSEC, which runs a 
> signed
> shadow tree for the entire .ca zone, you would use:
>
> stub-zone:
>     name:"ca."
>     stub-prime:"no"
>     stub-addr:192.228.22.190
>     stub-addr:192.228.22.189
>
> Now instead of using the NS records in the root zone that point to ca. 
> unbound
> will use these two addresses instead.

Yes, I understand this. I don't unserstand the difference between 
stub-prime:"no" and stub-prime:"yes".

Thanks,

tamas