[Pdns-users] Run powerdns with pre-signed dnssec zones

[bert hubert]

On Thu, Nov 30, 2017 at 02:43:40PM +0100, Daniel Eriksson wrote:
> How can I run powerdns with pre-signed dnssec zones, without the need to
> sign every single zone v4.0?

You don't need to sign all zones. In fact, you must tell PowerDNS which ones
to sign. It will not autosign all of them.

> Do i need afxr transfer to slaves, or can I use my current mysql
> replication?

If they run more or less the same version of PowerDNS, you can just
replicate.

> I can't find any info on this or what to change in the config.

https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html may be
useful.

Good luck!

	Bert