package dns-server

  1. Overview
  2. Docs

Authentication, stored in a Dns_trie with privileges to operations embedded in the name.

A key is a pair of a `raw Domain_name.t and a Dnskey.t. In the name, operation privileges and potentially IP addresses are encoded, e.g. foo._transfer.example.com may do AXFR on example.com.

type operation = [
  1. | `Update
  2. | `Transfer
  3. | `Notify
]

The type of operations, sorted by highest ot lowest privileges, an `Update may as well carry out a `Transfer.

val all_ops : operation list
type t

The type for an authenticator.

val access : ?key:'a Domain_name.t -> zone:'b Domain_name.t -> operation -> bool

access op ~key ~zone checks whether key is authorised for op on zone.

OCaml

Innovation. Community. Security.