Slave DNS with PowerDNS

To start with what is PowerDNS? PowerDNS, It is a complete software platform that you can use instead of BIND. It provides excellent performance and doesn’t use a lot of resources.

Here at ClouDNS, you can setup a Slave/Backup DNS zone to work with your master server which is most probably based on cPanel. And as we know cPanel only supports DNSSEC with PowerDNS, please do not panic you can easily set-up DNSSEC to sync with ClouDNS and PowerDNS.

Please find all the steps below:

Step 1. First, you need to add Slave/Backup Zone in ClouDNS. To do that, please go to your Dashboard page and click on the DNS zones [Add new] link, then click on the Slave/Backup zone box, enter the domain name (without www or http://), enter the Master Server IP and click on "Add slave". And voila your Slave DNS zone is created.

Step 2. Setup the Primary servers configuration. To operate your secondary zone properly it is required ALL IPs to be allowed both for notifications (also-notify) and transfers (allow-transfer) at your primary servers. You can find all the IPs available for your account by clicking on the top button called "Primary Settings" which is located in your Slave DNS zone management page.

Step 3. Now you need to edit the pdns.conf file which should be located at /etc/powerdns/pdns.conf of PowerDNS. You can find and example below:

disable-axfr=no

allow-axfr-ips=185.136.96.77, 185.136.97.77, 185.136.98.77, 185.136.99.77, 109.201.133.61, 108.59.2.202, 79.137.84.65, 46.165.221.164, 2a06:fb00:1::1:77, 2a06:fb00:1::2:77, 2a06:fb00:1::3:77, 2a06:fb00:1::4:77, 2a00:1768:1001:9::21, 2604:9a00:2100:a006:4::1, 2001:41d0:401:3100::5784, 2a00:c98:2030:a006:2::1

also-notify=185.136.96.77, 185.136.97.77, 185.136.98.77, 185.136.99.77, 109.201.133.61, 108.59.2.202, 79.137.84.65, 46.165.221.164, 2a06:fb00:1::1:77, 2a06:fb00:1::2:77, 2a06:fb00:1::3:77, 2a06:fb00:1::4:77, 2a00:1768:1001:9::21, 2604:9a00:2100:a006:4::1, 2001:41d0:401:3100::5784, 2a00:c98:2030:a006:2::1

Please, notice that "disable-axfr" option is set to "no".

Step 4. Once finished, reload the service by using the following command:

$ sudo service pdns restart

Step 5. Finally, you need to force zone transfer and SOA serial update. To do that, please try adding/removing some test record in your Master zone. Then, please compare the serials in both your Master and Slave zone, to see if zone transfer was successful. Please, make sure that the SOA serial at your Master is higher than the SOA serial here at your Slave.

These are all the steps you need to follow. If you have more questions you can always contact our Technical support team.


Cookies help us deliver our services. By using our services, you agree to our use of cookies. Learn more