Infrastructure

A secondary can serve its transferred zone until refresh and expiry rules require a newer copy or stop service.

Zone transfer copies authoritative data under explicit authorization and serial rules

AXFR transfers a complete DNS zone so another server or authorized client can obtain its data. A secondary can then answer authoritatively from its local copy. The protocol does not magically identify callers as legitimate authoritative servers: access control decides who may transfer. A zone is also a defined authority boundary, not every record in every delegated child zone or the organization’s entire DNS namespace. ...

A declared blueprint being applied to a cluster.

Infrastructure as code is a changelog, not magic

Declarative infrastructure means writing down what should exist and letting a tool compute how to get there. An imperative script issues a sequence of API calls and has no idea what already exists; run it twice and you get two of everything, or a failure halfway through. A declarative configuration describes the end state, and the tool owns the difference. ...