[Pdns-users] Wondering if this will work.

[Hoy Henry]

Good Day.

I am working with CentOS 6.4, PowerDNS 3.12.e16. on a mysql backend all on one box.  No DNSSEC.  Binary was provided through yum and epel. Installed myself yesterday.

It is my intent that this server will serve as a Primary Authoritative Name Server for some 200-300 domains already running on an old failing BIND server.   I Intend to bring up a slave PDNS server today and hook-up mysql replication. The original Primary BIND server died a few weeks ago and everything was failed over to the secondary (NS2) leaving a vacancy of what I will call NS1.

The person that was maintaining this setup left shortly after the problem occurred and I am the new guy trying to get things up and running as stable as possible.  I was able to export all of the zones from the remaining BIND server (NS2) and import those into the new MySQL backend.  I have PowerDNS Webinterface Version 1.5.3 installed and everything looks pretty good.  I am able to dig and query the servers records  I think, just fine.

My intent with this is to shut down my current NS2 BIND server and  cutover to the new environment with the fresh NS1 and NS2 PDNS installs.  With this, I would LIKE to re IP NS1 and NS2 to different addresses when the cutover happens.   If I do this, will this be a problem?  Do I need to change the IP addresses on the Current NS2 (And NS1 Entry in DNS) and let those records propagate before making the cutover?  Am I over thinking this?  I just don't want to cause a catastrophe by making this change.....I'm kind "unseasoned" at a lot of this sort of thing.  Anything I missed that I should be worried about?

As a secondary question, what would be the proper IPTABLE rules to allow the communication of DNS to happen?  I will not be using recursion with these servers for dns lookups.

Any help would be greatly appreciated.

Thanks!

Hoy.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20131030/2a0f99e3/attachment.html>