DNS zone transfer
zone transferzone transfersAXFRIXFR
DNS zone transfer, also sometimes known by the inducing DNS query type AXFR, is a type of DNS transaction.wikipedia
29 Related Articles
Name server
DNS serverdomain name serverauthoritative name server
It is one of the many mechanisms available for administrators to replicate DNS databases across a set of DNS servers.
Examples of such mechanisms include DNS zone transfers and file transfer protocols.
Domain Name System
DNSresource recordDNS record
DNS zone transfer, also sometimes known by the inducing DNS query type AXFR, is a type of DNS transaction.
TCP is also used for tasks such as zone transfers.
SOA record
SOAStart of Authority
The preamble comprises a lookup of the Start of Authority (SOA) resource record for the "zone apex", the node of the DNS namespace that is at the top of the "zone".
A Start of Authority record (abbreviated as SOA record) is a type of resource record in the Domain Name System (DNS) containing administrative information about the zone, especially regarding zone transfers.
List of DNS record types
A recordAPTR record
* List of DNS record types
Database transaction
transactiontransactionstransactional
DNS zone transfer, also sometimes known by the inducing DNS query type AXFR, is a type of DNS transaction.
Distributed database
distributeddistributed database management systemdata distribution
It is one of the many mechanisms available for administrators to replicate DNS databases across a set of DNS servers.
Transmission Control Protocol
TCPTCP/IPACK
A zone transfer uses the Transmission Control Protocol (TCP) for transport, and takes the form of a client–server transaction.
Client–server model
client–serverclient-serverclient/server
A zone transfer uses the Transmission Control Protocol (TCP) for transport, and takes the form of a client–server transaction.
DNS zone
zonezones
The portion of the database that is replicated is a zone.
Wire protocol
wire formatwirewire and transport protocols
Zone transfer operates in terms of "wire format" resource records, i.e. resource records as they are transferred using the DNS protocol.
Back-end database
back-endbackendback end
However, the schema of wire format resource records may not be identical to the database schema used by the back ends of the DNS servers themselves.
Djbdns
DJBDNS (tinydns)
This is the case for djbdns, for example.
SQL
Structured Query LanguageSQL databaseSQL Databases
Modern DNS server packages with sophisticated database back ends such as SQL servers and Active Directory allow administrators to make updates to the database in multiple places (such systems employ Multi-master replication), with the database back end's own replication mechanism handling the replication to all other servers.
Active Directory
Microsoft Active DirectoryADActive Directory Application Mode
Modern DNS server packages with sophisticated database back ends such as SQL servers and Active Directory allow administrators to make updates to the database in multiple places (such systems employ Multi-master replication), with the database back end's own replication mechanism handling the replication to all other servers.


Multi-master replication
multi-mastermulti-master database replicationPostgreSQL Bi Directional Replication
Modern DNS server packages with sophisticated database back ends such as SQL servers and Active Directory allow administrators to make updates to the database in multiple places (such systems employ Multi-master replication), with the database back end's own replication mechanism handling the replication to all other servers.
Serial number arithmetic
Serial number comparisons are intended to use Serial Number Arithmetic as defined in RFC 1982.
Attack surface
attack surface areasurface of vulnerability
This is because information such as server hostnames may become public knowledge, which can be used to discover information about an organization and even provide a larger attack surface.
Domain Name System Security Extensions
DNSSECNSEC3stub resolver
Other standards (not DNSSEC) are used to secure bulk data (such as a DNS zone transfer) sent between DNS servers.
Response policy zone
Usage of an RPZ is based on DNS data feeds, known as zone transfer, from an RPZ provider to the deploying server.

Inter-server
server-to-serverserver to serverbetween servers
EveryDNS
EveryDNS also offered dynamic DNS resolution, AXFR service, and domain2web redirection.
PowerDNS
PowerDNS Recursor
Zone transfers and update notifications are supported, and the processes can run unprivileged and chrooted.
