Re: [Opendnssec-user] Migrating from ODS 1.4.10 to 2.1.3
Thanks Yuri for your answer, Although having "emergency" and "wait an additional TTL" in the same sentence is a little disturbing for mei %-) , I understand why you did not kept this experimental (but usefull for me) feature. Best regards. Vincent. le 02 févr., Yuri Schaeffer a ?crit : > > Have I another choice that to give up standby DS if I decide to move to > > ODS 2.1.3 ? > > In ODS 2 you can give the rollover command at any time, even while > currently in a rollover. The enforcer will immediately roll to the new > key without needing to finish the current roll. As such the standby key > concept does not make too much sense. > > The price for dropping this feature is that from the start of the > emergency rollover you have to wait an additional DS set TTL. > > //Yuri > > ___ > Opendnssec-user mailing list > Opendnssec-user@lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-user -- Vincent Levigneron A.F.N.I.C. vincent.levigne...@nic.fr signature.asc Description: PGP signature ___ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
Re: [Opendnssec-user] Migrating from ODS 1.4.10 to 2.1.3
> Have I another choice that to give up standby DS if I decide to move to > ODS 2.1.3 ? In ODS 2 you can give the rollover command at any time, even while currently in a rollover. The enforcer will immediately roll to the new key without needing to finish the current roll. As such the standby key concept does not make too much sense. The price for dropping this feature is that from the start of the emergency rollover you have to wait an additional DS set TTL. //Yuri signature.asc Description: OpenPGP digital signature ___ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
[Opendnssec-user] Migrating from ODS 1.4.10 to 2.1.3
Hi, I use ODS 1.4.10 and for all the TLDs I operate and I have standby DS in case of an emergency KSK rollover. This concept does not exist in ODX 2.x.x (marked as experimental in 1.x.x versions). I would be interested to know if someone succeeded to have something equivalent with the existing key states in ODS 2.x.x ? Have I another choice that to give up standby DS if I decide to move to ODS 2.1.3 ? Best regards. Vincent. -- Vincent Levigneron A.F.N.I.C. vincent.levigne...@nic.fr signature.asc Description: PGP signature ___ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
