Re: Multi Master/Primary Authoritative DNSSEC DNS Nameserver With Synced/Replicated COMMON Dir/Vol For BIND

2024-09-26 Thread Ondřej Surý
Hi Erik, whatever you did below is complicated, unnecessary, and prone to break. Just create one hidden primary that will do the signing and two to three public secondaries that are independent of each other. Then setup DNSSEC in a way that it’s ok for the primary to be down for a specified pe

Multi Master/Primary Authoritative DNSSEC DNS Nameserver With Synced/Replicated COMMON Dir/Vol For BIND

2024-09-26 Thread TErik Ashfolk
Hello BIND Community. Looking forward to your suggestions, advises on setup DNSSEC enabled zones on multiple master/primary authoritative DNS server (Nameserver) with synced/replicated common shared directories/volume. Please skip the section(s) that you dont need to read/scan, & goto the QUE

Re: Date not updated in serial number

2024-09-26 Thread Burn Zero
Hi Peter, Thank you so much for the quick response and it works very well :) On Thu, 26 Sept 2024 at 11:54, Peter Davies wrote: > Hi, >You can use the "serial-update-method" key-word to define how BIND will > update > the serial number in a dynamic zone's SOA record. > > It may be defined w