)]}'
{"doc/source/admin/index.rst":[{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":13,"context_line":"   tlds"},{"line_number":14,"context_line":"   backends/index"},{"line_number":15,"context_line":"   ha"},{"line_number":16,"context_line":"   pools"},{"line_number":17,"context_line":"   pool-scheduler"},{"line_number":18,"context_line":"   multiple-pools"},{"line_number":19,"context_line":"   blacklists"}],"source_content_type":"text/x-rst","patch_set":14,"id":"0100d6df_dac931d3","line":16,"updated":"2020-12-07 23:48:23.000000000","message":"Since we already have a \"pools\" guide, we should at a minimum add a reference link from the existing pools configuration guide to the split-horizon guide.\nAs it is now, if I look at the pools reference directly I don\u0027t see these new fields listed/described.","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"1ec65f401aff0e553e4f382fb4371773f49f43de","unresolved":true,"context_lines":[{"line_number":13,"context_line":"   tlds"},{"line_number":14,"context_line":"   backends/index"},{"line_number":15,"context_line":"   ha"},{"line_number":16,"context_line":"   pools"},{"line_number":17,"context_line":"   pool-scheduler"},{"line_number":18,"context_line":"   multiple-pools"},{"line_number":19,"context_line":"   blacklists"}],"source_content_type":"text/x-rst","patch_set":14,"id":"712c168b_c295c2b7","line":16,"in_reply_to":"0100d6df_dac931d3","updated":"2020-12-08 00:23:37.000000000","message":"Ack i will work on this","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"}],"doc/source/admin/split_horizon.rst":[{"author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"tag":"autogenerated:zuul:check","change_message_id":"7aa867772b971b79b76d93d83733e6a98f4087be","unresolved":false,"context_lines":[{"line_number":175,"context_line":"the following configurations will allow the MDNS to answer `AXFR` based"},{"line_number":176,"context_line":"on the `TSIG` key used for the request"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":".. code-block:: ini"},{"line_number":179,"context_line":"   [service:mdns]"},{"line_number":180,"context_line":"   tsigkey_view_map \u003d external : (?!10\\.\\d+\\.\\d+\\.\\d+|172\\.(1[6-9]|2[0-9]|3[01])\\.\\d+\\.\\d+|192\\.168\\.\\d+\\.\\d+)"},{"line_number":181,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9f560f44_b02abce3","line":178,"updated":"2020-09-24 22:49:25.000000000","message":"docs: Error in \"code-block\" directive:","commit_id":"506e708ef3c19ed0c75f8bd1d26a096d924d1771"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"2e47cd00213ac7d3c1b9cbd7bfb28f7cb9c618d5","unresolved":false,"context_lines":[{"line_number":1,"context_line":".."},{"line_number":2,"context_line":"    Copyright 2016 Rackspace Hosting"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    Licensed under the Apache License, Version 2.0 (the \"License\"); you may"},{"line_number":5,"context_line":"    not use this file except in compliance with the License. You may obtain"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9f560f44_d6cf6825","line":2,"updated":"2020-09-25 01:57:40.000000000","message":"You should update the copyright :)","commit_id":"d79e16b1b5c0bb23af149b06a8c00badb4e807a2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"107911a2780af6be4a80efb314369eb6223c2651","unresolved":false,"context_lines":[{"line_number":1,"context_line":".."},{"line_number":2,"context_line":"    Copyright 2016 Rackspace Hosting"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    Licensed under the Apache License, Version 2.0 (the \"License\"); you may"},{"line_number":5,"context_line":"    not use this file except in compliance with the License. You may obtain"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9f560f44_f77c1721","line":2,"in_reply_to":"9f560f44_d6cf6825","updated":"2020-09-25 16:47:20.000000000","message":"i will change it, am not sure i did it right though :)","commit_id":"d79e16b1b5c0bb23af149b06a8c00badb4e807a2"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"56b71d4c4dbdb1a7573fab9531d685b6b5ae09fa","unresolved":false,"context_lines":[{"line_number":19,"context_line":"How To Configure Split Horizon"},{"line_number":20,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"Split horizon is an important feature most DNS servers supports, based"},{"line_number":23,"context_line":"on the need to split internal, external view of the IPs and hostnames."},{"line_number":24,"context_line":"Designate support this through :ref:`pools` and :ref:`configuration` as"},{"line_number":25,"context_line":"explained below"}],"source_content_type":"text/x-rst","patch_set":10,"id":"9f560f44_e3839da9","line":22,"updated":"2020-09-28 22:41:30.000000000","message":"s/supports/support/, is plural","commit_id":"b15d9ada83f3d4123cdfa3a717ea501e0e7272b2"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"56b71d4c4dbdb1a7573fab9531d685b6b5ae09fa","unresolved":false,"context_lines":[{"line_number":20,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"Split horizon is an important feature most DNS servers supports, based"},{"line_number":23,"context_line":"on the need to split internal, external view of the IPs and hostnames."},{"line_number":24,"context_line":"Designate support this through :ref:`pools` and :ref:`configuration` as"},{"line_number":25,"context_line":"explained below"},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9f560f44_c38019a0","line":23,"updated":"2020-09-28 22:41:30.000000000","message":"I prefer \"IP addresses\".","commit_id":"b15d9ada83f3d4123cdfa3a717ea501e0e7272b2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":1,"context_line":".."},{"line_number":2,"context_line":"    Copyright 2020 OpenStack Foundation"},{"line_number":3,"context_line":"    All Rights Reserved."},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"    Licensed under the Apache License, Version 2.0 (the \"License\"); you may"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3ba46a04_76f9f2d6","line":2,"updated":"2020-12-07 23:48:23.000000000","message":"FYI, we don\u0027t do this.\nSee: https://wiki.openstack.org/wiki/LegalIssuesFAQ#OpenStack_Foundation_Copyright_Headers\n\nIt really should be your name or your company.","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":17,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":18,"context_line":"How To Configure Split Horizon DNS"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"`Split horizon DNS`_ is an important feature most DNS servers support"},{"line_number":22,"context_line":"that offers internal and external views of DNS information based on"},{"line_number":23,"context_line":"the source address of the DNS request. Designate supports this feature"}],"source_content_type":"text/x-rst","patch_set":14,"id":"34fa6268_17379942","line":20,"updated":"2020-12-07 23:48:23.000000000","message":"I don\u0027t see discussion here about how to create the zones properly, from an end user perspective.\nMaybe a \"validation\" section would be helpful to show how someone would use this feature?","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"fe1d5df78d897a5e6bbcedc353289a6099ed47df","unresolved":true,"context_lines":[{"line_number":17,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":18,"context_line":"How To Configure Split Horizon DNS"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"`Split horizon DNS`_ is an important feature most DNS servers support"},{"line_number":22,"context_line":"that offers internal and external views of DNS information based on"},{"line_number":23,"context_line":"the source address of the DNS request. Designate supports this feature"}],"source_content_type":"text/x-rst","patch_set":14,"id":"ccfc54ca_f15dd4a9","line":20,"in_reply_to":"34fa6268_17379942","updated":"2020-12-08 01:33:35.000000000","message":"there is no change in the way zones are created","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":23,"context_line":"the source address of the DNS request. Designate supports this feature"},{"line_number":24,"context_line":"through :ref:`pools` and :ref:`configuration` as explained below."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Supported Use Case"},{"line_number":27,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":".. image:: ../images/split_horizon_case.png"}],"source_content_type":"text/x-rst","patch_set":14,"id":"76417b52_6a444b2c","line":26,"updated":"2020-12-07 23:48:23.000000000","message":"This diagram is good, but it doesn\u0027t fully describe the theory of operation fully.\nThere is subtle detail in how the tsig keys are used and what is left as manual configuration. The way zones are configured to enable this is also not discussed.","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"fe1d5df78d897a5e6bbcedc353289a6099ed47df","unresolved":true,"context_lines":[{"line_number":23,"context_line":"the source address of the DNS request. Designate supports this feature"},{"line_number":24,"context_line":"through :ref:`pools` and :ref:`configuration` as explained below."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Supported Use Case"},{"line_number":27,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":".. image:: ../images/split_horizon_case.png"}],"source_content_type":"text/x-rst","patch_set":14,"id":"4cda819d_d90f123a","line":26,"in_reply_to":"76417b52_6a444b2c","updated":"2020-12-08 01:33:35.000000000","message":"is the detailed description below not enough? in the notes below alink to explain about that\nPlease refer to `Understanding views in BIND 9\n   \u003chttps://kb.isc.org/docs/aa-00851\u003e`_ and `Running Virtual Instances\n   for PowerDNS\n   \u003chttps://doc.powerdns.com/authoritative/guides/virtual-instances.html\u003e`_","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":73,"context_line":"            port: 53"},{"line_number":74,"context_line":"            rndc_host: 10.0.2.15"},{"line_number":75,"context_line":"            rndc_port: 953"},{"line_number":76,"context_line":"            allow_transfer: external"},{"line_number":77,"context_line":"            notification_tsigkey: external"},{"line_number":78,"context_line":"            view: external"},{"line_number":79,"context_line":"            rndc_config_file: /etc/named/rndc.conf"},{"line_number":80,"context_line":"            rndc_key_file: /etc/named/rndc.key"},{"line_number":81,"context_line":"        - type: bind9"}],"source_content_type":"text/x-rst","patch_set":14,"id":"c5f85812_56842525","line":78,"range":{"start_line":76,"start_character":0,"end_line":78,"end_character":26},"updated":"2020-12-07 23:48:23.000000000","message":"These three configuration items are new. Can we have a sentence or two for each describing how they are used?\n\nFor example, it\u0027s not immediately clear to me how view is used. I assume it is for the verification step designate takes, but it would be nice to call it out.","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"fe1d5df78d897a5e6bbcedc353289a6099ed47df","unresolved":true,"context_lines":[{"line_number":73,"context_line":"            port: 53"},{"line_number":74,"context_line":"            rndc_host: 10.0.2.15"},{"line_number":75,"context_line":"            rndc_port: 953"},{"line_number":76,"context_line":"            allow_transfer: external"},{"line_number":77,"context_line":"            notification_tsigkey: external"},{"line_number":78,"context_line":"            view: external"},{"line_number":79,"context_line":"            rndc_config_file: /etc/named/rndc.conf"},{"line_number":80,"context_line":"            rndc_key_file: /etc/named/rndc.key"},{"line_number":81,"context_line":"        - type: bind9"}],"source_content_type":"text/x-rst","patch_set":14,"id":"ffa1ad69_126b85d3","line":78,"range":{"start_line":76,"start_character":0,"end_line":78,"end_character":26},"in_reply_to":"c5f85812_56842525","updated":"2020-12-08 01:33:35.000000000","message":"view is already there for long time, allow-transfer is a feature in bind the ones we added for this are  * ``notification_tsigkey`` is the ``TSIG`` key used to sign the\n     notifications sent to the DNS server\n   * ``pdns4.add_tsigkeys`` is the ``TSIG`` key to be added to the\n     PDNS4 server","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":90,"context_line":"            port: 53"},{"line_number":91,"context_line":"            rndc_host: 10.0.2.15"},{"line_number":92,"context_line":"            rndc_port: 953"},{"line_number":93,"context_line":"            notification_tsigkey: internal"},{"line_number":94,"context_line":"            allow_transfer: internal"},{"line_number":95,"context_line":"            view: internal"},{"line_number":96,"context_line":"            rndc_config_file: /etc/named/rndc.conf"}],"source_content_type":"text/x-rst","patch_set":14,"id":"78a7fb03_bb7b2e06","line":93,"updated":"2020-12-07 23:48:23.000000000","message":"It would be nice to add comments to the new keys that call out what the value means.\nFor example:\nnotification_tsigkey: internal  # Where \u0027internal\u0027 is a tsig key shared between designate and BIND.","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":155,"context_line":"    };"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"    // INTERNAL"},{"line_number":158,"context_line":"    view \"internal\" {"},{"line_number":159,"context_line":"            server 10.0.2.15 { keys internal; };"},{"line_number":160,"context_line":"            match-clients { key internal; !key external; any;};"},{"line_number":161,"context_line":"    };"}],"source_content_type":"text/x-rst","patch_set":14,"id":"f305c467_44aae513","line":158,"updated":"2020-12-07 23:48:23.000000000","message":"Some additional comments or discussion of what these settings are for might be helpful for folks with a light knowledge of BIND.","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":163,"context_line":"    // EXTERNAL"},{"line_number":164,"context_line":"    view \"external\" {"},{"line_number":165,"context_line":"            server 10.0.2.15 { keys external; };"},{"line_number":166,"context_line":"            match-clients { key external; !key internal; any;};"},{"line_number":167,"context_line":"    };"},{"line_number":168,"context_line":""},{"line_number":169,"context_line":"With the split horizon feature enabled for BIND and PowerDNS, we can"}],"source_content_type":"text/x-rst","patch_set":14,"id":"0f4b987b_55910112","line":166,"updated":"2020-12-07 23:48:23.000000000","message":"Isn\u0027t this an error? Both views will match for queries without a tsig due to both views having \"any;\".","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"fe1d5df78d897a5e6bbcedc353289a6099ed47df","unresolved":true,"context_lines":[{"line_number":163,"context_line":"    // EXTERNAL"},{"line_number":164,"context_line":"    view \"external\" {"},{"line_number":165,"context_line":"            server 10.0.2.15 { keys external; };"},{"line_number":166,"context_line":"            match-clients { key external; !key internal; any;};"},{"line_number":167,"context_line":"    };"},{"line_number":168,"context_line":""},{"line_number":169,"context_line":"With the split horizon feature enabled for BIND and PowerDNS, we can"}],"source_content_type":"text/x-rst","patch_set":14,"id":"fb3da3f7_f29d02f4","line":166,"in_reply_to":"0f4b987b_55910112","updated":"2020-12-08 01:33:35.000000000","message":"here we are giving the required config for the split view to run, there is allot of configurations in bind i dont want to include all of then ( that only accept queries with tsigkey)","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"fbad0d79f582dc8cd4651efd5acf12f555fde76e","unresolved":true,"context_lines":[{"line_number":200,"context_line":".. code-block:: ini"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"   [service:mdns]"},{"line_number":203,"context_line":"   tsigkey_view_map \u003d external : \u003cregex\u003e"},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"The above ``service:mdns`` configuration makes Designate mDNS exclude"},{"line_number":206,"context_line":"all the IP addresses that do not match the regex from the ``AXFR``."}],"source_content_type":"text/x-rst","patch_set":14,"id":"b282632c_b5df9580","line":203,"updated":"2020-12-07 23:48:23.000000000","message":"This section could use some more information. I\u0027m not sure I fully understand what the regex is for. Is it some kind of ACL for zone transfers scoped by the tsig?\nWhat would be the use case where a zone transfer request has a valid tsig but you would block it by an IP address regex?","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"fe1d5df78d897a5e6bbcedc353289a6099ed47df","unresolved":true,"context_lines":[{"line_number":200,"context_line":".. code-block:: ini"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"   [service:mdns]"},{"line_number":203,"context_line":"   tsigkey_view_map \u003d external : \u003cregex\u003e"},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"The above ``service:mdns`` configuration makes Designate mDNS exclude"},{"line_number":206,"context_line":"all the IP addresses that do not match the regex from the ``AXFR``."}],"source_content_type":"text/x-rst","patch_set":14,"id":"ba8e4309_ece368a8","line":203,"in_reply_to":"b282632c_b5df9580","updated":"2020-12-08 01:33:35.000000000","message":"there is two ways to achieve split view ACLs which depend on the IP doing the query the second depend on tsigkey ( tsigkey the request sign with ) they both work the same way","commit_id":"7cdc165088db693ee273fb7dd16c23c0d587eaf2"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"2981ec3f303d1ea9206d5395a5582c027b0c3ec0","unresolved":true,"context_lines":[{"line_number":27,"context_line":"through :ref:`pools` and :ref:`configuration` as explained below."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Supported Use Case"},{"line_number":30,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":31,"context_line":"Most of companies have the DNS structure already implemented,"},{"line_number":32,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":33,"context_line":"the DNS structure most likely will support Split Horizon"}],"source_content_type":"text/x-rst","patch_set":19,"id":"f4cbc180_eff52e28","line":30,"updated":"2021-02-26 17:43:27.000000000","message":"nit: Make `\u003d` as long as name of section.","commit_id":"77430354e3210850e2d176755c5f198b28ae4a19"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"2981ec3f303d1ea9206d5395a5582c027b0c3ec0","unresolved":true,"context_lines":[{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Supported Use Case"},{"line_number":30,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":31,"context_line":"Most of companies have the DNS structure already implemented,"},{"line_number":32,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":33,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":34,"context_line":"(internal, external) designate will provide support for"}],"source_content_type":"text/x-rst","patch_set":19,"id":"a5080ae7_7f04f78c","line":31,"updated":"2021-02-26 17:43:27.000000000","message":"nit: Please add an empty line","commit_id":"77430354e3210850e2d176755c5f198b28ae4a19"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"2981ec3f303d1ea9206d5395a5582c027b0c3ec0","unresolved":true,"context_lines":[{"line_number":31,"context_line":"Most of companies have the DNS structure already implemented,"},{"line_number":32,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":33,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":34,"context_line":"(internal, external) designate will provide support for"},{"line_number":35,"context_line":"master-\u003eslave communications that Use the tsig key the zone"},{"line_number":36,"context_line":"transfer signed with to determine the view to be returned"},{"line_number":37,"context_line":""}],"source_content_type":"text/x-rst","patch_set":19,"id":"e3a72d06_eaee85aa","line":34,"updated":"2021-02-26 17:43:27.000000000","message":"s/designate/Designate/","commit_id":"77430354e3210850e2d176755c5f198b28ae4a19"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"2981ec3f303d1ea9206d5395a5582c027b0c3ec0","unresolved":true,"context_lines":[{"line_number":32,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":33,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":34,"context_line":"(internal, external) designate will provide support for"},{"line_number":35,"context_line":"master-\u003eslave communications that Use the tsig key the zone"},{"line_number":36,"context_line":"transfer signed with to determine the view to be returned"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":".. image:: ../images/split_horizon_case.png"}],"source_content_type":"text/x-rst","patch_set":19,"id":"03b9c470_e8ebb63d","line":35,"updated":"2021-02-26 17:43:27.000000000","message":"s/Use/use/","commit_id":"77430354e3210850e2d176755c5f198b28ae4a19"},{"author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"change_message_id":"2981ec3f303d1ea9206d5395a5582c027b0c3ec0","unresolved":true,"context_lines":[{"line_number":33,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":34,"context_line":"(internal, external) designate will provide support for"},{"line_number":35,"context_line":"master-\u003eslave communications that Use the tsig key the zone"},{"line_number":36,"context_line":"transfer signed with to determine the view to be returned"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":".. image:: ../images/split_horizon_case.png"},{"line_number":39,"context_line":""}],"source_content_type":"text/x-rst","patch_set":19,"id":"9e52afa4_2357ee9b","line":36,"updated":"2021-02-26 17:43:27.000000000","message":"\u0027transfer is signed with\u0027","commit_id":"77430354e3210850e2d176755c5f198b28ae4a19"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"2953066558daad841dec7b64790cde2050d06495","unresolved":true,"context_lines":[{"line_number":30,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Most of companies have the DNS structure already implemented,"},{"line_number":33,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":34,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":35,"context_line":"(internal, external) Designate will provide support for"},{"line_number":36,"context_line":"master-\u003eslave communications that use the tsig key the zone"}],"source_content_type":"text/x-rst","patch_set":20,"id":"7d783f2a_0e2806c2","line":33,"range":{"start_line":33,"start_character":17,"end_line":33,"end_character":22},"updated":"2021-04-19 22:29:03.000000000","message":"Can we select a better word for this?\n\nhttps://wiki.openstack.org/wiki/Diversity/Inclusivity","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"ee173280735eba854c128967b05766d04eccb508","unresolved":false,"context_lines":[{"line_number":30,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Most of companies have the DNS structure already implemented,"},{"line_number":33,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":34,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":35,"context_line":"(internal, external) Designate will provide support for"},{"line_number":36,"context_line":"master-\u003eslave communications that use the tsig key the zone"}],"source_content_type":"text/x-rst","patch_set":20,"id":"0e479777_0012a9a9","line":33,"range":{"start_line":33,"start_character":17,"end_line":33,"end_character":22},"in_reply_to":"7d783f2a_0e2806c2","updated":"2021-04-19 22:57:02.000000000","message":"Done","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"2953066558daad841dec7b64790cde2050d06495","unresolved":true,"context_lines":[{"line_number":33,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":34,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":35,"context_line":"(internal, external) Designate will provide support for"},{"line_number":36,"context_line":"master-\u003eslave communications that use the tsig key the zone"},{"line_number":37,"context_line":"transfer is signed with to determine the view to be returned"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":".. image:: ../images/split_horizon_case.png"}],"source_content_type":"text/x-rst","patch_set":20,"id":"aff5a59a_1ec36ed6","line":36,"range":{"start_line":36,"start_character":0,"end_line":36,"end_character":13},"updated":"2021-04-19 22:29:03.000000000","message":"Same here,\nprimary-\u003esecondary maybe?","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"ee173280735eba854c128967b05766d04eccb508","unresolved":false,"context_lines":[{"line_number":33,"context_line":"and they need to slave Designate to the DNS structure and since"},{"line_number":34,"context_line":"the DNS structure most likely will support Split Horizon"},{"line_number":35,"context_line":"(internal, external) Designate will provide support for"},{"line_number":36,"context_line":"master-\u003eslave communications that use the tsig key the zone"},{"line_number":37,"context_line":"transfer is signed with to determine the view to be returned"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":".. image:: ../images/split_horizon_case.png"}],"source_content_type":"text/x-rst","patch_set":20,"id":"0e9a146c_dfb10001","line":36,"range":{"start_line":36,"start_character":0,"end_line":36,"end_character":13},"in_reply_to":"aff5a59a_1ec36ed6","updated":"2021-04-19 22:57:02.000000000","message":"Done","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"2953066558daad841dec7b64790cde2050d06495","unresolved":true,"context_lines":[{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    // INTERNAL"},{"line_number":176,"context_line":"    view \"internal\" {"},{"line_number":177,"context_line":"            server 10.0.2.15 { keys internal; };"},{"line_number":178,"context_line":"            match-clients { key internal; !key external; any;};"},{"line_number":179,"context_line":"    };"},{"line_number":180,"context_line":""}],"source_content_type":"text/x-rst","patch_set":20,"id":"c1ecac40_59b4d9c8","line":177,"updated":"2021-04-19 22:29:03.000000000","message":"server is not a valid statement inside a view in BIND.\nhttps://bind9.readthedocs.io/en/latest/reference.html#view-statement-grammar","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"6ea2519b38635e00f7cb25881b04881b252dc325","unresolved":true,"context_lines":[{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    // INTERNAL"},{"line_number":176,"context_line":"    view \"internal\" {"},{"line_number":177,"context_line":"            server 10.0.2.15 { keys internal; };"},{"line_number":178,"context_line":"            match-clients { key internal; !key external; any;};"},{"line_number":179,"context_line":"    };"},{"line_number":180,"context_line":""}],"source_content_type":"text/x-rst","patch_set":20,"id":"32a2ecd0_66f49eed","line":177,"in_reply_to":"2c18f25b_bcb47d29","updated":"2021-04-19 22:51:45.000000000","message":"the zone is added to the view through addzone zone [class [view]] configuration","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"ee173280735eba854c128967b05766d04eccb508","unresolved":true,"context_lines":[{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    // INTERNAL"},{"line_number":176,"context_line":"    view \"internal\" {"},{"line_number":177,"context_line":"            server 10.0.2.15 { keys internal; };"},{"line_number":178,"context_line":"            match-clients { key internal; !key external; any;};"},{"line_number":179,"context_line":"    };"},{"line_number":180,"context_line":""}],"source_content_type":"text/x-rst","patch_set":20,"id":"79405204_63ce930e","line":177,"in_reply_to":"32a2ecd0_66f49eed","updated":"2021-04-19 22:57:02.000000000","message":"`rndc addzone zone [class [view]]`","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"7afec9b0b57a8367b6b1e153b72e87f61138fb5f","unresolved":true,"context_lines":[{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    // INTERNAL"},{"line_number":176,"context_line":"    view \"internal\" {"},{"line_number":177,"context_line":"            server 10.0.2.15 { keys internal; };"},{"line_number":178,"context_line":"            match-clients { key internal; !key external; any;};"},{"line_number":179,"context_line":"    };"},{"line_number":180,"context_line":""}],"source_content_type":"text/x-rst","patch_set":20,"id":"2c18f25b_bcb47d29","line":177,"in_reply_to":"c1ecac40_59b4d9c8","updated":"2021-04-19 22:35:00.000000000","message":"Ok, I see that server is valid inside a view (the BIND docs are not clear about that in the view grammar section).\nhowever, isn\u0027t a zone definition required here?","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"2953066558daad841dec7b64790cde2050d06495","unresolved":true,"context_lines":[{"line_number":212,"context_line":".. code-block:: ini"},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"   [service:mdns]"},{"line_number":215,"context_line":"   tsigkey_view_map \u003d external"},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"The above ``service:mdns`` configuration makes Designate mDNS exclude"},{"line_number":218,"context_line":"all the private IP addresses from the ``AXFR`` when TSIG key external"}],"source_content_type":"text/x-rst","patch_set":20,"id":"fcde9e63_e20bdb98","line":215,"updated":"2021-04-19 22:29:03.000000000","message":"How does this work for also hosting \"internal\"? Are you proposing a mini-DNS instance per view?","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"ee173280735eba854c128967b05766d04eccb508","unresolved":true,"context_lines":[{"line_number":212,"context_line":".. code-block:: ini"},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"   [service:mdns]"},{"line_number":215,"context_line":"   tsigkey_view_map \u003d external"},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"The above ``service:mdns`` configuration makes Designate mDNS exclude"},{"line_number":218,"context_line":"all the private IP addresses from the ``AXFR`` when TSIG key external"}],"source_content_type":"text/x-rst","patch_set":20,"id":"580835c2_1e4208e3","line":215,"in_reply_to":"48c88ab8_98d2612b","updated":"2021-04-19 22:57:02.000000000","message":"request to mini-dns signed with tsigkey external will return external view like\ndig -t AXFR \u003czone\u003e @hostip -p 5354 -k /etc/rndc_key/external.key \nand the same request with internal return internal view\ndig -t AXFR \u003czone\u003e @hostip -p 5354 -k /etc/rndc_key/internal.key","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"},{"author":{"_account_id":31039,"name":"hamza","email":"hamalq@verizonmedia.com","username":"hamalq"},"change_message_id":"6ea2519b38635e00f7cb25881b04881b252dc325","unresolved":true,"context_lines":[{"line_number":212,"context_line":".. code-block:: ini"},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"   [service:mdns]"},{"line_number":215,"context_line":"   tsigkey_view_map \u003d external"},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"The above ``service:mdns`` configuration makes Designate mDNS exclude"},{"line_number":218,"context_line":"all the private IP addresses from the ``AXFR`` when TSIG key external"}],"source_content_type":"text/x-rst","patch_set":20,"id":"48c88ab8_98d2612b","line":215,"in_reply_to":"fcde9e63_e20bdb98","updated":"2021-04-19 22:51:45.000000000","message":"No, requests to the same mini dns with signed with different TSIG keys","commit_id":"3517c67de6d5a90bfd2f8ef6a474574971cfc9f8"}]}