On 4/2/20 12:49 PM, Alan Batie via Pdns-users wrote:
I'm in the process of migrating to powerdns to take advantage of the supermaster/superslave feature in particular (as well as better dnssec management), with a hidden master architecture to provide additional security for administration and dnssec private keys. It seems, however, that for the automatic propagation of domains to work, the hidden master has to be included with an NS record in the domain, which is unfortunate, as that means clients everywhere will occasionally try to use it and have to timeout.Is there a way I'm missing to avoid this problem and is there a particular reason for this requirement?
After putting some logging in the code and playing with things, I figured out that the supermaster table wants the ip address to be that of the supermaster, and the nameserver to be the name of the secondary.
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
