cascade zone

Synopsis

cascade zone [OPTIONS] <COMMAND>

cascade zone [OPTIONS] add [OPTIONS] --source <SOURCE> --policy <POLICY> <NAME>

cascade zone [OPTIONS] remove <NAME>

cascade zone [OPTIONS] list

cascade zone [OPTIONS] reload <NAME>

cascade zone [OPTIONS] status [--detailed] <NAME>

cascade zone [OPTIONS] history <NAME>

Description

Manage Cascade’s zones.

Options

-h, --help: Print the help text (short summary with -h, long help with --help).

Commands

add: Register a new zone.

remove: Remove a zone.

list: List registered zones.

reload: Reload a zone.

status: Get the status of a single zone.

history: Get the history of a single zone.

Options for `zone add`

--source <SOURCE>: The zone source can be an IP address (with or without port, defaults to port 53) or a file path.

--policy <POLICY>

Policy to use for this zone.

Note: At present to use a HSM with a zone the HSM must exist and be configured in the policy used by the zone when the zone is added. It is not possible to change it later in this alpha version of Cascade.

--import-public-key <IMPORT_PUBLIC_KEY>

Import a public key to be included in the DNSKEY RRset.

This needs to be a file path accessible by the Cascade daemon.

--import-ksk-file <IMPORT_KSK_FILE>

Import a key pair as a KSK.

The file path needs to be the public key file of the KSK. The private key file name is derived from the public key file.

--import-zsk-file <IMPORT_ZSK_FILE>

Import a key pair as a ZSK.

The file path needs to be the public key file of the ZSK. The private key file name is derived from the public key file.

--import-csk-file <IMPORT_CSK_FILE>

Import a key pair as a CSK.

The file path needs to be the public key file of the CSK. The private key file name is derived from the public key file.

--import-ksk-kmip <server> <public_id> <private_id> <algorithm> <flags>: Import a KSK from an HSM.

--import-zsk-kmip <server> <public_id> <private_id> <algorithm> <flags>: Import a ZSK from an HSM.

--import-csk-kmip <server> <public_id> <private_id> <algorithm> <flags>: Import a CSK from an HSM.

-h, --help: Print the help text (short summary with -h, long help with --help).

Options for `zone status`

--detailed: Print detailed information about the zone, including a zone’s DNSSEC key identifiers in use, as well as the new DNSKEY records during key rolls.