On Tue, Nov 15, 2022 at 11:36:44AM +1300, Michael Hallager wrote:
> On 2022-11-14 19:29, Otto Moerbeek wrote:
>
> > The upgrade guide has pointers, but in this case there's also a blog
> > post:
> >
> > https://blog.powerdns.com/2022/06/13/probing-dot-support-of-authoritative-servers-just-try-it/
> >
> > More detains in:
> >
> > https://docs.powerdns.com/recursor/settings.html#max-busy-dot-probes
> > https://docs.powerdns.com/recursor/settings.html#dot-to-port-853
> > https://docs.powerdns.com/recursor/settings.html#dot-to-auth-names
>
> Thanks for this, Otto.
>
> It also needs an authoritative server which supports TLS. I see an option
> for this at compile time for PowerDNS but no obvious mention in the
> documents.
>
> Michael
The support on the authoritative side only enables DoT for the sdig
tool at the moment. A dnsdist in front of auth can provide incoming
DoT to an auth.
-Otto
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
