However, in version 2.8.4, we implemented "DS push", which does exactly what you asked for.
I'm rolling the KSK every five minutes for testing, and I note that the DS RRset in the parent zone isn't being purged of old DS records.
For example, the zone currently has 6 DS in it; upon the next KSK roll, I see a 7th.
Is that expected?
-JP
--
https://lists.nic.cz/mailman/listinfo/knot-dns-users
