ZoneTransferTsig

Source: src/Cloudflare/Dns/ZoneTransferTsig.ts

A Secondary DNS TSIG key (/accounts/{account_id}/secondary_dns/tsigs) — shared-secret authentication for zone transfers between Cloudflare and external nameservers. Reference it from a {@link ZoneTransferPeer} via tsigId.

Requires the Secondary DNS (zone transfer) entitlement on the account. All fields are mutable in place; the secret is redacted and never persisted in attributes.

Creating a TSIG

const tsig = yield* Cloudflare.ZoneTransferTsig("TransferKey", {
  algo: "hmac-sha512.",
  secret: Redacted.make(process.env.TSIG_SECRET!),
});

Using with a Peer

const peer = yield* Cloudflare.ZoneTransferPeer("Primary", {
  ip: "192.0.2.53",
  port: 53,
  tsigId: tsig.tsigId,
});