[dns-operations] differ

[Matthew Richardson]

Randy Bush <randy at psg.com> wrote:-

>it occurred to me that it migh tme wise to have a rancid like
>(https://shrubbery.net/rancid/) equivalent for critical domains.
>i.e. to git record changes and warn of radical diffs.
>
>is there any foss tooling in this space?

For the recording, I do something similar within our systems which is
really simple, and roughly:-

cd $repodir
foreach $zone {
  dig +nocmd +nostats +onesoa @$master $zone axfr > $zone.zone
}
git add -A
git commit -m "cron script"

which runs as a daily job via cron.  Obviously, this only does the
recording into a git repo, but does not do any alerting.

--
Best wishes,
Matthew