VIEW主从同步问题

gougoudan

参考《BIND 9.3 下使用 TSIG key 简化 view 的设置》一文试验了一下，共有4个VIEW，DNS有主从各一台：

从试验结果看可以实现多VIEW的情况实现同步。但其中发现一个问题，就是主从同步过程需时很长（我同步两个很小的ZONE）大约要5分钟左右。这个显然不能满足生产需要啊。

同步日志如下：

21-Oct-2008 16:04:41.315 client 192.168.0.1#3692: view view_cnc: transfer of 'aaa.com.cn/IN': AXFR-style IXFR started: TSIG cnckey
21-Oct-2008 16:04:41.315 client 192.168.0.1#3692: view view_cnc: transfer of 'aaa.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:05:20.550 client 192.168.0.1#3699: view view_chnt: transfer of 'aaa.com.cn/IN': AXFR-style IXFR started: TSIG telkey
21-Oct-2008 16:05:20.550 client 192.168.0.1#3699: view view_chnt: transfer of 'aaa.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:05:26.674 client 192.168.0.1#3704: view view_cnc: transfer of 'bbb.com.cn/IN': AXFR-style IXFR started: TSIG cnckey
21-Oct-2008 16:05:26.675 client 192.168.0.1#3704: view view_cnc: transfer of 'bbb.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:05:37.081 client 192.168.0.1#3705: view view_any: transfer of 'bbb.com.cn/IN': AXFR-style IXFR started: TSIG othkey
21-Oct-2008 16:05:37.081 client 192.168.0.1#3705: view view_any: transfer of 'bbb.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:05:46.706 client 192.168.0.1#3707: view view_any: transfer of 'aaa.com.cn/IN': AXFR-style IXFR started: TSIG othkey
21-Oct-2008 16:05:46.706 client 192.168.0.1#3707: view view_any: transfer of 'aaa.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:05:57.206 client 192.168.0.1#3712: view view_edu: transfer of 'aaa.com.cn/IN': AXFR-style IXFR started: TSIG edukey
21-Oct-2008 16:05:57.207 client 192.168.0.1#3712: view view_edu: transfer of 'aaa.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:07:48.973 client 192.168.0.1#3745: view view_chnt: transfer of 'bbb.com.cn/IN': AXFR-style IXFR started: TSIG telkey
21-Oct-2008 16:07:48.973 client 192.168.0.1#3745: view view_chnt: transfer of 'bbb.com.cn/IN': AXFR-style IXFR ended
21-Oct-2008 16:08:23.755 client 192.168.0.1#3751: view view_edu: transfer of 'bbb.com.cn/IN': AXFR-style IXFR started: TSIG edukey
21-Oct-2008 16:08:23.755 client 192.168.0.1#3751: view view_edu: transfer of 'bbb.com.cn/IN': AXFR-style IXFR ended

有相关经验的网友帮忙诊断一下。

主DNS配置：

#### edu setting ####
view "view_edu" {
match-clients { key "edukey"; EDU; };
allow-transfer { key edukey; };
server 192.168.0.1 { keys {edukey;}; };
include "master/edu.def";
};

#### cnc setting ####
view "view_cnc" {
match-clients { key "cnckey"; CNC; };
allow-transfer { key cnckey; };
server 192.168.0.1 { keys {cnckey;}; };
include "master/cnc.def";
};

#### tel setting ####
view "view_chnt" {
match-clients { key "telkey"; CHNT; };
allow-transfer { key telkey; };
server 192.168.0.1 { keys {telkey;}; };
include "master/telecom.def";
};

#### oth setting ####
view "view_any" {
match-clients { key "othkey"; any; };
allow-transfer { key othkey; };
server 192.168.0.1 { keys {othkey;}; };
include "master/oth.def";
};

从DNS配置：

#### edu setting ####
view "view_edu" {
match-clients { key edukey; EDU; };
allow-transfer { none;};
server 192.168.0.50 { keys edukey; };

include "master/edu.def";
};

#### cnc setting ####
view "view_cnc" {
match-clients { key cnckey; CNC; };
allow-transfer { none;};
server 192.168.0.50 { keys cnckey; };
include "master/cnc.def";
};

#### tel setting ####
view "view_chnt" {
match-clients { key telkey; CHNT; };
allow-transfer { none;};
server 192.168.0.50 { keys telkey; };
include "master/telecom.def";
};

#### oth setting ####
view "view_any" {
match-clients { key othkey; any; };
allow-transfer { none;};
server 192.168.0.50 { keys othkey; };
include "master/oth.def";
};

網中人

恩，如果光就 dns 內建的 methods 不能用的話，可否考慮用外部的方法？
如用  rsync 或 LDAP ?