[dns-operations] differ

[Paul Lettington]

On Mon, 13 Nov 2023, at 13:03, Randy Bush wrote:
> why reinvent rancid?  i use it and like it a lot.  but, as joe says,
> it's perl; i.e. it will not be pleasant to augment.  occasionally i have
> to touch one of the ancient perl bits around here, and ugh.

Oxidized[0] is a RANCID replacement and is written in Ruby, if that is your choice of poison instead of Perl.

DNS specific tools like OctoDNS[1] do exist. This can be used to do many things - collecting zone data from many possible sources (including AXFR), computing diffs against stored data and then either reporting the diff, or "correcting" the detected drift against the stored data.

Its primary use-case is to have a definitive source of data for a zone in a yaml file and to sync that data to one or more DNS services, but it can easily be used in the opposite direction - to AXFR from a DNS server and to sync that to a local file while reporting on changes made.

[0]: https://github.com/ytti/oxidized
[1]: https://github.com/octodns/octodns

Paul.