[Pdns-users] remote-http backend and online DNSSEC signing

2020-04-21 Thread Vytenis A via Pdns-users
Hello list, We're implementing DNSSEC on our domain, which uses remote-http backend. Is there a way to achieve online DNSSEC online signing using pDNS without implementing DNSSEC logic into remote backend? Would a hybrid setup of "gmysql,remote" do the trick maybe? If this is not possible - how w

[Pdns-users] Disable ENABLE-LUA-RECORDS and PRESIGNED GET queries on remote backend

2020-03-05 Thread Vytenis A via Pdns-users
Dear list, We're implementing a pDNS solution using remote "http" backend. It will be serving TXT records only. SOA is also statically implemented. While looking at the HTTP backend logs, I see these queries: GET subdomain.domain.tld./ENABLE-LUA-RECORDS GET subdomain.domain.tld./PRESIGNED Can p

Re: [Pdns-users] SERVFAIL on backend failure - is this possible?

2020-02-26 Thread Vytenis A via Pdns-users
ng 40x, 50x errors, invalid responses). During tests we > >> forced HTTP 500 response, and got NXDOMAIN unfortunately. Is there a > >> way to provide REFUSED/SERVFAIL in case http backend is misbehaving? > >> > >> On Wed, Feb 26, 2020 at 9:23 AM Aki Tuomi wrote

Re: [Pdns-users] SERVFAIL on backend failure - is this possible?

2020-02-26 Thread Vytenis A via Pdns-users
? > > On Wed, Feb 26, 2020 at 9:23 AM Aki Tuomi wrote: > > > > Hi! > > > > It is not really supported to split domains like this. You need to host > > the entire domain in remote backend. > > > > Aki > > > > On 26.2.2020 2.00, Vytenis A via Pdns

Re: [Pdns-users] SERVFAIL on backend failure - is this possible?

2020-02-26 Thread Vytenis A via Pdns-users
orted to split domains like this. You need to host > the entire domain in remote backend. > > Aki > > On 26.2.2020 2.00, Vytenis A via Pdns-users wrote: > > Hi Bert, > > > > Thanks for a prompt reply. > > > > This is currently on my local test VM, it'

Re: [Pdns-users] SERVFAIL on backend failure - is this possible?

2020-02-25 Thread Vytenis A via Pdns-users
in! On Wed, Feb 26, 2020 at 12:51 AM bert hubert wrote: > > On Wed, Feb 26, 2020 at 12:35:21AM +0200, Vytenis A via Pdns-users wrote: > > While trying to implement authoritative DNS server using "remote" > > backend, I've stumbled into an issue when HTTP backend is un

[Pdns-users] SERVFAIL on backend failure - is this possible?

2020-02-25 Thread Vytenis A via Pdns-users
Hi List, While trying to implement authoritative DNS server using "remote" backend, I've stumbled into an issue when HTTP backend is unreachable - PowerDNS is returning NXDOMAIN. What I would like to achieve is return SERVFAIL in case my HTTP endpoint is unavailable. Is this possible? Maybe Lua f