[Pdns-users] Supermaster/superslave

[Alan Batie]

I'm in the process of migrating to powerdns to take advantage of the 
supermaster/superslave feature in particular (as well as better dnssec 
management), with a hidden master architecture to provide additional 
security for administration and dnssec private keys.  It seems, however, 
that for the automatic propagation of domains to work, the hidden master 
has to be included with an NS record in the domain, which is 
unfortunate, as that means clients everywhere will occasionally try to 
use it and have to timeout.

Is there a way I'm missing to avoid this problem and is there a 
particular reason for this requirement?

Thanks...


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4038 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20200402/3b81ed8d/attachment.bin>