That solution would actually work quite well. Only downside is that I’ll have 
to provide our staff CLI access to the PowerDNS servers to be able to be able 
to remove the forward-zones setting for each domain as they are migrated (or we 
can have someone do them in bulk afterwards as I don’t think it’ll have any 
impact to leave it in), but overall I think that would work nicely.

 

Thanks!


GTG

 

From: Dan Campbell [mailto:[email protected]] 
Sent: May 11, 2015 9:55 AM
To: [email protected]
Cc: [email protected]
Subject: Re: [Pdns-users] Allow recursion on only one IP

 

Since the PowerDNS Recursor and PowerDNS Authoritative server are two different 
products, you’ll need to run both anyway.

 

Run the recursor listening only on IP#1 (using the local-address setting) and 
the authoritative server listening only on IP#2 (using the local address 
setting).

 

During your transition phase you can use the forward-zones setting in the 
recursor on IP#1 to forward requests for specific domains to the auth server on 
IP#2.

 

This is assuming I understood your question.

—

Dan Campbell

 

 

On May 9, 2015, at 11:05 PM, [email protected] wrote:

 

I’m currently planning a project to split recursion from authoritative DNS 
(they currently reside on the same IP). 

 

As part of the project, I’d like to set up a second IP for PowerDNS to listen 
on (which will be the IP for the authoritative server; the recursive server 
will remain on the existing IP). The transition strategy is that IP #1 (the 
existing IP) will answer both recursive and authoritative queries until such 
time as all the domains have been migrated to use the new IP #2. IP#2 will 
answer only authoritative queries.

 

However I’ve run into a snag. I can’t find any way to have PowerDNS answer 
recursion queries on only the IP #1 (I can only limit what IPs the queries come 
from, but not to). Am I missing something, is there a way to do what I’m 
looking to do? Or is the only solution to run separate instances of pdns (with 
separate config files both connecting to the same backend).

 

Cheers,


GTG

 

_______________________________________________
Pdns-users mailing list
 <mailto:[email protected]> [email protected]
 <http://mailman.powerdns.com/mailman/listinfo/pdns-users> 
http://mailman.powerdns.com/mailman/listinfo/pdns-users

 

_______________________________________________
Pdns-users mailing list
[email protected]
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to