Callers get a session API, typed RR builders, and BIND testcontainer proof so CheckDNS can stay off the DNS wire. Co-authored-by: Cursor <cursoragent@cursor.com>
25 lines
726 B
Markdown
25 lines
726 B
Markdown
# go-dns
|
|
|
|
Go library for authoritative DNS operations against BIND (and compatible) nameservers:
|
|
|
|
- **Dynamic updates** — `nsupdate`-style changes (RFC 2136)
|
|
- **Zone transfer** — full zone read via **AXFR** (IXFR out of scope for v1)
|
|
- **TSIG key authentication** (callers provide keys; generation out of scope)
|
|
|
|
## Status
|
|
|
|
Library: AXFR over TCP, RFC 2136 UPDATE (UDP with TCP fallback), caller-supplied TSIG, typed RR builders. ASCII names only.
|
|
|
|
## Module
|
|
|
|
```bash
|
|
go get gitea.neitzel.de/konrad/go-dns
|
|
```
|
|
|
|
Module path: `gitea.neitzel.de/konrad/go-dns` — import as **`godns`**.
|
|
|
|
## Documentation
|
|
|
|
- [Project specification](docs/project-specification.md)
|
|
- [BIND TSIG configuration](docs/bind-tsig-configuration.md)
|