ldns-gen-zone(1)

πŸ“¦
version 1.9.2 Β· 2 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– ldns-gen-zone β€” the manual page, but make it a group chat πŸ’–

okay bestie, so this is ldns-gen-zone(1), a General Commands Manual situation. Sit down, grab a strawberry πŸ“, we're gonna read a zonefile together and it's gonna be iconic.


✨ NAME ✨

ldns-gen-zone β€” read a zonefile and print it while adding DS records and extra RR's πŸ’…


🌸 SYNOPSIS 🌸

ldns-gen-zone ZONEFILE

πŸ¦‹ DESCRIPTION πŸ¦‹

So like, ldns-gen-zone reads a DNS zone file and prints it. That's the whole vibe. πŸŽ€

It is build for speed, not for a nice formatting. not for a nice formatting, bestie, we said it β€” the output has one resource record per line and no pretty-printing makeup. It's giving bare-faced, no filter, raw. 🫢

DNSSEC data (NSEC, NSEC3, RRSIG or DNSKEY) is not stripped. If you wanted that, you may want to use ldns-read-zone for that instead. Existing DS records are also not stripped. They stay. They're staying. πŸ’€

The idea is to use this tool for quickly generating a representative artificial zonefile from a real zonefile, to use it for testing purposes. So it's like a fake zonefile that's actually a real zonefile's understudy. main character energy but the understudy version. ⭐


πŸ‘‘ OPTIONS πŸ‘‘

  • -a NUM β€” Adds NUM extra artificial NS RRSets to the output. The RRSets owner names start with 'xn--' in an attempt to ensure uniqueness (nl.-zone does not support IDN's - and this tool was written with that knowledge in mind). 🧚

An artificial NS RRSet has two NS records; ns1.example.com and ns2.example.com.

  • -p NUM β€” Add NUM% of DS RRSets to the NS RRSets (anywhere between 1-4 DS records per RRSet). πŸ’–
  • -o ORIGIN β€” Sets an $ORIGIN, which can be handy if the one in the zonefile is set to '@' for example. If there is an $ORIGIN in the zonefile, this option will silently be ignored. πŸ™ˆ
  • -s β€” This is the recommended way of processing large zones that are already sorted and canonicalized (ie lowercase). It skips the sorting and canonicalization step that is required for properly grouping RRSets together (before adding any DS records to them). Skipping this step will speed things up. πŸ”₯
It is not recommended to use this option if you want to add DS records to unsorted, non-canonicalized zones.
  • -h β€” Show usage and exit.
  • -v β€” Show version and exit.

🌈 EXAMPLES 🌈

ldns-gen-zone -a 100000 -p 10 -s ./zonefile.txt

Read a zonefile, add 100.000 artificial NS RRSets and 10% of DS records, print it to standard output. Don't sort (will only work well if the input zonefile is already sorted and canonicalized). No cap. πŸŽ€


ldns-gen-zone -p 10 -s -o nl zonefile.txt | named-compilezone -s
relative -i none -o zonefile_10.txt nl /dev/stdin

This creates a nicely formatted zone file with the help of named-compilezone. It adds 10% DS records to the .nl zone, reformats it and saves it as zonefile_10.txt. Obsessed. ✨


πŸ’œ AUTHOR πŸ’œ

Initially written by Marco Davids, several modifications added by Miek Gieben, both from SIDN. Two icons, one tool. πŸ‘‘


πŸ› REPORTING BUGS πŸ›

Report bugs to <dns-team@nlnetlabs.nl>. Bestie, they want your emails. πŸ“¬


πŸ’€ BUGS πŸ’€

Only undiscovered ones. (which is the most slay answer possible)


😭 CAVEATS 😭

May require a machine with a considerable amount of memory for large zone files. Like, big big. 🌸

Fake DS records hashes are generated as digest type SHA-256 (RFC4509). Be aware not to change the DIGESTTYPE #define in the source code in anything else but 2 if you want to keep things realistic. Do not touch it. Do not. 🫢

Despite a number of efforts, this program is still not the fastest in the world. It's trying its best. πŸ™ˆ


Copyright (C) 2010 SIDN. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.


that's the whole page babes, 10 June 2010, ldns-gen-zone(1) β€” mwah, go read a zonefile, ilysm πŸ’–πŸ¦‹πŸŽ€βœ¨