[Pdns-users] Run powerdns with pre-signed dnssec zones

bert hubert bert.hubert at powerdns.com
Thu Nov 30 13:52:20 UTC 2017

On Thu, Nov 30, 2017 at 02:43:40PM +0100, Daniel Eriksson wrote:
> How can I run powerdns with pre-signed dnssec zones, without the need to
> sign every single zone v4.0?

You don't need to sign all zones. In fact, you must tell PowerDNS which ones
to sign. It will not autosign all of them.

> Do i need afxr transfer to slaves, or can I use my current mysql
> replication?

If they run more or less the same version of PowerDNS, you can just

> I can't find any info on this or what to change in the config.

https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html may be

Good luck!


More information about the Pdns-users mailing list