[Pdns-users] Web API for dns-01 challenge (_acme-challenge subdomains)

Bjoern Franke bjo at nord-west.org
Wed Jul 31 09:52:41 UTC 2019


> 2. Given I set "launch=bind,gsqlite3", how does PDNS handle updates? I'd
>     like to see API patches going only to the SQLite DB, and leave the
>     BIND zone files untouched. Is that doable?
> A collegue of mine suggested delegating _acme-challenge subdomains to a 
> dedicated DNS server, like acme-dns [6], but that still requires a bunch 
> of CNAME records for some (most?) of our A/AAAA records (plus a separate 
> server/IP just for ACME challenges)...

I'm thinking about a similar setup, running both zones with different
backends via the same server would not be possible?

For instance:

- domain.tld via bind, including _acme-challenge records set to

- acme.domain.tld via MySQL

Rest Regards

More information about the Pdns-users mailing list