<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Consolas, Courier, monospace;">Hello,</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Consolas, Courier, monospace;">We want to put everything in one place (puppet), so that we don't have to make a backup of the database. And we want a minimum of moving parts, that is why there is no database backend.</span><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Consolas, Courier, monospace;">The setup uses native zones, so we don't do zone transfers with masters and slaves. So i figured, with everything in puppet saves me on replication/backup of the database.</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Consolas, Courier, monospace;">Do i understand correctly that I need to replicate the
</span><font size="2"><span style="font-size: 11pt; font-family: Consolas, Courier, monospace;">bind-dnssec-db.sqlite3 from one server (soa server?) to the others? or do i need to build a master-slave setup with zone transfers to enable a correct working of
dnsssec?</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size: 11pt; font-family: Consolas, Courier, monospace;"><br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size: 11pt; font-family: Consolas, Courier, monospace;"><br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size: 11pt; font-family: Consolas, Courier, monospace;">best greetings,</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size: 11pt; font-family: Consolas, Courier, monospace;">Philip</span></font><br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Van:</b> Pdns-users <pdns-users-bounces@mailman.powerdns.com> namens Bjoern Franke <bjo@nord-west.org><br>
<b>Verzonden:</b> woensdag 10 juli 2019 11:12<br>
<b>Aan:</b> pdns-users@mailman.powerdns.com<br>
<b>Onderwerp:</b> Re: [Pdns-users] bind backend and dnssec database</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hi,<br>
<br>
> <br>
> my company is planning the migration of our authoritative name servers <br>
> to powerdns 4.1.x with a bind backend (managed with puppet). this part<br>
> is working as intended.<br>
[...]<br>
> The question is:<br>
> <br>
> can I put the |bind-dnssec-db.sqlite3| inside puppet after I secured the<br>
> zone. (can it be readonly from powerdns's viewpoint)<br>
> or does powerdns need read-write acces to the |bind-dnssec-db.sqlite3|?<br>
> (maybe for key roll over?)<br>
><br>
<br>
we are running also powerdns in a puppetized way, but with MySQL as<br>
hybrid-backend. As data is changed during key rollover, a read/write<br>
access is needed. Why do you want to put the sqlite itself into puppet?<br>
For the slaves?<br>
<br>
Kind regards<br>
Bjoern<br>
_______________________________________________<br>
Pdns-users mailing list<br>
Pdns-users@mailman.powerdns.com<br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</div>
</span></font></div>
</body>
</html>