8a718a0c547e256edabd2c91f77ed668d1dfc7f8Evan HuntCopyright (C) 2015-2017 Internet Systems Consortium, Inc. ("ISC")
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsThis Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsLicense, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsfile, You can obtain one at http://mozilla.org/MPL/2.0/.
591389c7d44e5ca20c357627dd179772cfefaaccEvan HuntThis is for testing managed-keys, in particular with problems
591389c7d44e5ca20c357627dd179772cfefaaccEvan Huntwith RFC 5011 Automated Updates of DNSSEC Trust Anchors.
591389c7d44e5ca20c357627dd179772cfefaaccEvan Huntns1 is the root server that offers new KSKs and hosts one record for
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunttesting. The TTL for the zone's records is 2 seconds.
56e30ebae6fdb0bdf94419caff3a43fb2d16c5dfEvan Huntns2 is a validator that uses managed-keys. "-T mkeytimers=2/20/40"
56e30ebae6fdb0bdf94419caff3a43fb2d16c5dfEvan Huntis used so it will attempt do automated updates frequently. "-T tat=1"
56e30ebae6fdb0bdf94419caff3a43fb2d16c5dfEvan Huntis used so it will send TAT queries once per second.
591389c7d44e5ca20c357627dd179772cfefaaccEvan Huntns3 is a validator with a broken key in managed-keys.
4b669b69bae7dedda2faa09a7ade247499c1d49cMichał Kępieńns5 is a validator which is prevented from getting a response from the
4b669b69bae7dedda2faa09a7ade247499c1d49cMichał Kępieńroot server, causing key refresh queries to fail.