Struct RndcExecutor 

pub struct RndcExecutor { /* private fields */ }

RNDC command executor using native protocol

Implementations

impl RndcExecutor

pub fn new(server: String, algorithm: String, secret: String) -> Result<Self>

Create a new RNDC executor

Arguments

• server - RNDC server address (e.g., “127.0.0.1:953”)
• algorithm - HMAC algorithm, accepts both formats:
  • With prefix: “hmac-md5”, “hmac-sha1”, “hmac-sha224”, “hmac-sha256”, “hmac-sha384”, “hmac-sha512”
  • Without prefix: “md5”, “sha1”, “sha224”, “sha256”, “sha384”, “sha512”
• secret - Base64-encoded RNDC secret key

Returns

A new RndcExecutor instance

pub async fn status(&self) -> Result<String>

Get server status

pub async fn addzone( &self, zone_name: &str, zone_config: &str, ) -> Result<String>

Add a zone

Arguments

• zone_name - Name of the zone (e.g., “example.com”)
• zone_config - Zone configuration block (e.g., “{ type primary; file "/var/cache/bind/example.com.zone"; }”)

pub async fn delzone(&self, zone_name: &str) -> Result<String>

Delete a zone

pub async fn reload(&self, zone_name: &str) -> Result<String>

Reload a zone

pub async fn zonestatus(&self, zone_name: &str) -> Result<String>

Get zone status

pub async fn freeze(&self, zone_name: &str) -> Result<String>

Freeze a zone (disable dynamic updates)

pub async fn thaw(&self, zone_name: &str) -> Result<String>

Thaw a zone (enable dynamic updates)

pub async fn notify(&self, zone_name: &str) -> Result<String>

Notify secondaries about zone changes

pub async fn retransfer(&self, zone_name: &str) -> Result<String>

Force a zone retransfer from primary

This command is used on secondary zones to discard the current zone data and initiate a fresh transfer from the primary server.

pub async fn modzone( &self, zone_name: &str, zone_config: &str, ) -> Result<String>

Modify a zone configuration

Arguments

• zone_name - Name of the zone (e.g., “example.com”)
• zone_config - Zone configuration block (e.g., “{ also-notify { 10.0.0.1; }; allow-transfer { 10.0.0.2; }; }”)

pub async fn showzone(&self, zone_name: &str) -> Result<String>

Show zone configuration

Arguments

• zone_name - Name of the zone (e.g., “example.com”)

Returns

The zone configuration in BIND9 format

pub async fn reconfig(&self) -> Result<String>

Reload the server configuration (rndc reconfig).

Loads new or changed configuration without re-transferring or bouncing unaffected zones. Required after Self::modzone stores a dnssec-policy: verified on BIND 9.18.50 (ADR-0001), modzone persists the policy to the NZD without applying it to the running zone — only a reconfig (or full reload) activates it.

Errors

Returns an error if the RNDC command fails.

pub async fn dnssec_status(&self, zone_name: &str) -> Result<String>

Get a zone’s DNSSEC signing state (rndc dnssec -status <zone>).

The raw output is parsed with crate::dnssec::parse_dnssec_status. A zone without a policy returns the literal text Zone does not have dnssec-policy rather than an error.

Arguments

• zone_name - Name of the zone (e.g., “example.com”)

Errors

Returns an error for an invalid zone name or a failed RNDC command.

pub async fn dnssec_checkds( &self, zone_name: &str, key_tag: u16, state: CheckdsState, ) -> Result<String>

Report a DS state change at the parent zone to named (rndc dnssec -checkds -key <tag> <published|withdrawn> <zone>).

Used when no parental agents are configured: named will not advance a key’s DS-dependent state transitions (including the graceful unsigning managed by the built-in insecure policy) until it is told the DS was published or withdrawn at the parent.

Arguments

• zone_name - Name of the zone (e.g., “example.com”)
• key_tag - Key tag of the DNSKEY whose DS changed at the parent
• state - Whether the DS is now published or withdrawn

Errors

Returns an error for an invalid zone name or a failed RNDC command.

Trait Implementations

impl Clone for RndcExecutor

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.