ldns-walk(1)

πŸ“¦
version 1.9.2 Β· 2 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– ldns-walk β€” the zone-walking bestie πŸ’–

okay so this is ldns-walk(1), a General Commands Manual page, and babes it is literally about retrieving the contents of a DNSSEC signed zone. no cap. let's get into it πŸ¦‹


✨ NAME ✨

ldns-walk β€” retrieve the contents of a DNSSEC signed zone πŸŽ€


🌸 SYNOPSIS 🌸

ldns-walk [ OPTION ] ZONE

πŸ‘‘ DESCRIPTION πŸ‘‘

ldns-walk is the girl whose whole job is retrieving the contents of a DNSSEC signed zone. how does she do it? through NSEC-walking β€” which means following the chain of NSEC records β€” and also by 'guessing' the next non-existent owner name for each NSEC. she's doing detective work fr fr πŸ”βœ¨

πŸ’€ heads up bestie: it might get stuck on some wildcard records when you use it through a caching forwarder. not cute. but you can circumvent this problem by querying the authoritative nameserver directly β€” that's what the @ argument is for 🫢

and obviously, the nameserver you're using must be DNSSEC-aware. that's non-negotiable, periodt.


πŸ’… OPTIONS πŸ’…

  • -4 β€” use only IPv4. four for the girls who want four πŸ“
  • -6 β€” use only IPv6. six for the girls who want six 🌈
  • -f β€” do a 'full' zone walk. by default ldns-walk will only show you the names, and the types present at those names. but if you give this option? all resource records will be printed. the whole buffet, no crumbs left behind πŸ‘‘
  • -s name β€” start the walk with this owner name. so useful when you're continuing the walk for a large zone β€” pick up right where you left off, main character energy πŸ’œ
  • -v verbosity β€” verbosity level [1-5]. dial that drama up or down ✨
  • @ nameserver β€” send the queries to this nameserver. this is the direct-to-authoritative move that dodges the wildcard stuck-ness πŸŽ€

😭 BUGS 😭

the full zone walk function is not complete yet β€” it does not correctly print delegation records. it's giving "work in progress", and we respect the honesty ngl πŸ™ˆ


🌟 AUTHOR 🌟

written by Jelte Jansen as an example for ldns usage. an icon, an example-setter, we love to see it πŸ’–


🫢 REPORTING BUGS 🫢

report bugs to <dns-team@nlnetlabs.nl>. tell them everything bestie, they wanna know πŸ“¬


Copyright (C) 2005 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. so like. it's free, but if it breaks, that's between you and the universe 🌌


okay that's the whole page mwah πŸ’… this was ldns-walk(1) from the General Commands Manual, dated 21 Nov 2005, and that's the vibe check complete β€” go walk a zone, you got this πŸ¦‹βœ¨πŸ’œ