Research options to get rid of nsupdate #6
Description
Currently this script invokes nsupdate. While this works, there are some challenges with this:
- Invoking other scripts / tools by means of popen, etc. could become a security risk
- Webserver requires some DNS tooling to be installed
- Only limited means of debugging
Ideally this could be replaced by either implementing a (leightweight) solution based on RFC2136 ourselves and/or by re-using some already existing library. The main goal of this issue is to research such options and document the findings here.
Whether or not this will eventually be implemented depends on the outcome of this research effort.