[Pdns-users] Migration to a single 10.in-addr.arpa Reverse Zone

[rob777]

Hi List

I use Powerdns Authoritative with Powerdns Recursor for Internal Zones.
Currently i have 300-400 Subnets in the 10.0.0.0/8 Range. Currently i have
only for 3 Subnets in this Range a Reverse zone configured in my Pdns Auth.
and PDNS Recursor. So i have...

10.0.10.in-addr.arpa
10.0.20.in-addr.arpa
10.0.25.in-addr.arpa

....configured on the PDNS Auth. And the following in my PDNS Recursor

- zone: 25.0.10.in-addr.arpa
  forwarders:
  - 10.0.50.100:5300
- zone: 10.0.10.in-addr.arpa
  forwarders:
  - 10.0.50.100:5300
- zone: 20.0.10.in-addr.arpa
  forwarders:
  - 10.0.50.100:5300

I would like to migrate the Reverse zones so that i have a single "Catch
all" Reverse zone for the whole 10.0.0.0/8 Nets which will be then used for
all 300-400 Subnets so:

10.in-addr.arpa

My question is now how can i softly migrate this? My idea is:

1. create a new reverse zone 10.in-addr.arpa and starting to fill it with
records (and dont yet configure it in the Recursor
Forwarde-zones config...)
2. If i'm ready with 10.in-addr.arpa Zone -> reconfiguring the
pdns-recursor forward-zone config to

- zone:  10.in-addr.arpa Reverse
  forwarders:
  - 10.0.50.100:5300

3. deleting the existing forwarding to the 3 existing
10.0.10.0/10.0.20.0/10.0.25.0) Reverse Zones

Would this work or will this generate a conflict with the existing
10.0.10.in-addr.arpa, 10.0.20.in-addr.arpa, 10.0.25.in-addr.arpa Reverse
zones? Or will Powerdns Auth. not be able to load this new reverse zone
10.in-addr.arpa because it overlaps with regards to subnets of the already
existing three single reverse zones in this same range? Or can i safely
create the 10.in-addr.arpa Reverse zone, configure all records in it and
then change the Forward zone file? And afterwards safely deleting the three
single reverse zones in the 10.0.0.0/8 Range?

Best Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20250425/e679bc57/attachment.htm>