Zero configuration networking
A set of techniques that allow basic local networking without central configuration, commonly including IPv4 link-local addressing, IPv6 SLAAC, multicast DNS, and DNS Service Discovery.
Read definitionAlphabetical glossary
Z glossary terms
14 definitions beginning with Z.
14 terms
Zero trust
A security model that avoids implicit trust based solely on network location and continuously evaluates identity, device, policy, and context. For DDI management, it supports strong authentication, least privilege, segmentation, and detailed audit.
Read definitionZone
A portion of the DNS namespace managed as a unit and served authoritatively. It contains data from its apex down to, but not including, delegated child zones.
Read definitionZone apex
The top node of a zone, where its SOA and authoritative NS RRsets are stored. The apex cannot normally be a CNAME because required zone data must coexist there.
Read definitionZone cut
The boundary between a parent zone and a delegated child zone. It is marked by a parent-side delegation NS RRset and child-side authoritative zone apex.
Read definitionZone digest
A cryptographic digest over canonical zone data used to verify that a transferred or published zone is complete and unmodified. The ZONEMD record carries the digest at the zone apex.
Read definitionZone enumeration
Discovery of many or all names in a zone through transfers, NSEC walking, certificate data, search engines, logs, or other sources. DNSSEC with NSEC can make systematic walking easier.
Read definitionZone file
A text file in DNS master-file format containing directives and resource records for a zone. Authoritative data can also be stored in databases or generated dynamically.
Read definitionZone ID
An interface or scope identifier appended to a scoped IPv6 address in local APIs, such as fe80::1%eth0. It disambiguates which link is intended for a non-global address.
Read definitionZone signing key (ZSK)
An operational DNSSEC key role primarily used to sign ordinary zone RRsets. ZSKs are often shorter-lived and rolled more frequently than KSKs.
Read definitionZone transfer
Replication of authoritative zone data using AXFR for a full copy or IXFR for changes. Transfers use TCP and should be authenticated and access-controlled.
Read definitionZone walking
Systematic enumeration of names in a DNSSEC-signed zone by following NSEC records or analyzing NSEC3 under favorable conditions. NSEC3 increases cost but does not guarantee confidentiality.
Read definitionZONEMD record
A Message Digest Over Zone Data record that provides a digest of the zone contents. It can detect corruption or incomplete distribution but does not replace DNSSEC authentication of individual answers.
Read definitionZSK
Abbreviation for Zone Signing Key, the operational key commonly used to sign most zone RRsets.
Read definition