[Pdns-users] New to PowerDNS

[Jorge Bastos]

Thanks KTM,



> -----Original Message-----
> From: ktm at rice.edu [mailto:ktm at rice.edu]
> Sent: quinta-feira, 26 de Junho de 2014 23:13
> To: Jorge Bastos
> Cc: 'Aki Tuomi'; pdns-users at mailman.powerdns.com
> Subject: Re: [Pdns-users] New to PowerDNS
> 
> On Thu, Jun 26, 2014 at 10:21:06PM +0100, Jorge Bastos wrote:
> > > It takes very little time for powerdns to pick up the changes.
> > > Adding records is backend specific, but assuming you are using
> mysql
> > > backend (gmysql), you can use the schema at
> > >
> > > http://doc.powerdns.com/html/generic-mypgsql-
> backends.html#idp621944
> > > 00
> > >
> > > This will also show you how to insert records.
> >
> > >
> > > To enable DNSSEC, first set gmysql-dnssec=yes in configuration,
> then
> > > run
> > >
> > > pdnssec secure-zone your.zone
> > >
> > > This will create the necessary DNSSEC information for live signing.
> > > You can verify the changes with
> > >
> > > pdnssec show-zone your.zone
> > >
> > > this will also show you the DS and DNSKEY records you need for
> > > upstream.
> >
> > Hi Aki,
> >
> > Confirm, its refreshed a few seconds after i insert the records.
> >
> > For the DNSSEC part, is there a way to create the DNSSEC information
> just by SQL ?
> >
> > If not, the solution is to run "pdnssec secure-zone ZONE" in a loop
> on a cron script, am I right?
> >
> 
> Hi Jorge,
> 
> I do not know about a SQL only solution for MySQL DNSSEC signing, but I
> know that there is a sample schema for Oracle that includes the needed
> triggers and functions and that I have a basically complete version of
> the same for PostgreSQL that I will be submitting to the PDNS folks
> once we have it vetted for production. Maybe you can cobble something
> together for MySQL for those as examples. Otherwise 'pdnssec secure-
> zone your.zone'
> is your friend.
> 
> Regards,
> Ken