DNS zone transfer

zone transferzone transfersAXFRIXFR
DNS zone transfer, also sometimes known by the inducing DNS query type AXFR, is a type of DNS transaction.wikipedia
29 Related Articles

Name server

DNS serverdomain name serverauthoritative name server
It is one of the many mechanisms available for administrators to replicate DNS databases across a set of DNS servers.
Examples of such mechanisms include DNS zone transfers and file transfer protocols.

Domain Name System

DNSresource recordDNS record
DNS zone transfer, also sometimes known by the inducing DNS query type AXFR, is a type of DNS transaction.
TCP is also used for tasks such as zone transfers.

SOA record

SOAStart of Authority
The preamble comprises a lookup of the Start of Authority (SOA) resource record for the "zone apex", the node of the DNS namespace that is at the top of the "zone".
A Start of Authority record (abbreviated as SOA record) is a type of resource record in the Domain Name System (DNS) containing administrative information about the zone, especially regarding zone transfers.

Database transaction

transactiontransactionstransactional
DNS zone transfer, also sometimes known by the inducing DNS query type AXFR, is a type of DNS transaction.

Distributed database

distributeddistributed database management systemdata distribution
It is one of the many mechanisms available for administrators to replicate DNS databases across a set of DNS servers.

Transmission Control Protocol

TCPTCP/IPACK
A zone transfer uses the Transmission Control Protocol (TCP) for transport, and takes the form of a client–server transaction.

Client–server model

client–serverclient-serverclient/server
A zone transfer uses the Transmission Control Protocol (TCP) for transport, and takes the form of a client–server transaction.

DNS zone

zonezones
The portion of the database that is replicated is a zone.

Wire protocol

wire formatwirewire and transport protocols
Zone transfer operates in terms of "wire format" resource records, i.e. resource records as they are transferred using the DNS protocol.

Back-end database

back-endbackendback end
However, the schema of wire format resource records may not be identical to the database schema used by the back ends of the DNS servers themselves.

SQL

Structured Query LanguageSQL databaseSQL Databases
Modern DNS server packages with sophisticated database back ends such as SQL servers and Active Directory allow administrators to make updates to the database in multiple places (such systems employ Multi-master replication), with the database back end's own replication mechanism handling the replication to all other servers.

Active Directory

Microsoft Active DirectoryADActive Directory Application Mode
Modern DNS server packages with sophisticated database back ends such as SQL servers and Active Directory allow administrators to make updates to the database in multiple places (such systems employ Multi-master replication), with the database back end's own replication mechanism handling the replication to all other servers.

Multi-master replication

multi-mastermulti-master database replicationPostgreSQL Bi Directional Replication
Modern DNS server packages with sophisticated database back ends such as SQL servers and Active Directory allow administrators to make updates to the database in multiple places (such systems employ Multi-master replication), with the database back end's own replication mechanism handling the replication to all other servers.

Serial number arithmetic

Serial number comparisons are intended to use Serial Number Arithmetic as defined in RFC 1982.

Attack surface

attack surface areasurface of vulnerability
This is because information such as server hostnames may become public knowledge, which can be used to discover information about an organization and even provide a larger attack surface.

Domain Name System Security Extensions

DNSSECNSEC3stub resolver
Other standards (not DNSSEC) are used to secure bulk data (such as a DNS zone transfer) sent between DNS servers.

Response policy zone

Usage of an RPZ is based on DNS data feeds, known as zone transfer, from an RPZ provider to the deploying server.

EveryDNS

EveryDNS also offered dynamic DNS resolution, AXFR service, and domain2web redirection.

PowerDNS

PowerDNS Recursor
Zone transfers and update notifications are supported, and the processes can run unprivileged and chrooted.