On 2022-01-21 Klaus Darilion wrote:
>> As far as I'm aware we are not using DNSSEC for the zones in
>> question, so anything DNSSEC-related should not be an issue.
>
> If you do not use DNSSEC then there is no reason to set SOA-EDIT. If
> SOA-EDIT-API is set, every change (via PDNS API) increments
On 2022-01-20 Klaus Darilion wrote:
>> Okay, but then what is the appropriate way to get PowerDNS to update
>> the SOA record?
>
> Good question - depends on what you want to achieve.
>
> Your settings:
> SOA-EDIT = INCEPTION-EPOCH
> SOA-EDIT-API = SOA-EDIT-INCREASE
> TSIG-ALLOW-AXFR = transf
On 2022-01-20 Klaus Darilion wrote:
>> This would normally be fine, but the change seems to occur only in
>> the service itself and is not reflected in the SOA record stored in
>> the database.
>
> SOA-Edit does not influence/manipulate the serial in the DB.
> SOA-EDIT is used to fake the Serial (o
> This would normally be fine, but the change seems to occur only in the
> service itself and is not reflected in the SOA record stored in the
> database.
SOA-Edit does not influence/manipulate the serial in the DB.
SOA-EDIT is used to fake the Serial (on outgoing NOTIFYs and responses which
cont
Hello
I have a setup running PowerDNS (v4.4.1 on Ubuntu Xenial) as hidden
masters with BIND slaves as the authoritative name servers. The metadata
of the zones are these:
me@localhost:~# pdnsutil get-meta example.org
Metadata for 'example.org'
SOA-EDIT = INCEPTION-EPOCH
SOA-EDIT-API = SOA
