PowerDNS: Membuat Zone dan Record di PowerDNS

Konfigurasi PowerDNS

Di sisi MASTER:

Ubah konfigurasi /etc/powerdns/pdns.conf:

Allowed Zone Transfers

#################################
# allow-axfr-ips    If enabled, restrict zonetransfers to originate from these
#                   IP addresses
allow-axfr-ips=127.0.0.1 ::1 192.0.2.0/24 2001:db8::/64

Enable Zone Transfers

#################################
# disable-axfr	Disable zonetransfers but do allow TCP queries
#
disable-axfr=no

Server IP Address

#################################
# local-address	Local IP address to which we bind
#
local-address=192.168.0.100

#################################
# local-ipv6	Local IP address to which we bind
#
# local-ipv6=2001:db8::41

Berfungsi sebagai Master Server

#################################
# master	Act as a master
#
master=yes

Source Address

By default PowerDNS will use the last defined IP address as source address to send out DNS NOTIFY messages to slaves.

The slave servers, will not accept any NOTIFY messages, if they are not coming from the defined master server of a domain. Here is how we tell PowerDNS to use its dedicated IPv4 and IPv6 addresses for outgoing connections:

#################################
# query-local-address   The IP address to use as a source address for sending
#                       queries.
query-local-address=192.0.2.41
query-local-address6=2001:db8::41

Server Restart

sudo service pdns restart

Import Zone-Files

If you already have zone files, from previous DNS servers or 3rd-party providers, you can import them as follows:

$ zone2sql --zone=example.com.zone \
           --zone-name=example.com \
           --gmysql --transactions --verbose \
           > example.com.zone.sql
1 domains were fully parsed, containing 49 records
$ mysql -u root -p pdns < example.com.zone.sql
Enter password:

And done. Very easy.

Secondary Server

Let’s assume our master server has the IP address 2001:db8::41 and the new slave will have the IP address 2001:db8::42.

In the real world a DNS slave would be on entirely another subnet.

To set up a PowerDNS as secondary slave DNS server.

Install MariaDB and PowerDNS

See above. Also add the MySQL tables as above.

Copy the configuration file from the master and change following things:

Slave Server IP Addresses

#################################
# local-address Local IP address to which we bind
#
local-address=192.0.2.42

#################################
# local-ipv6    Local IP address to which we bind
#
local-ipv6=2001:db8::42

Setup PowerDNS as a Slave

#################################
# master    Act as a master
#
master=no

#################################
# slave Act as a slave
#
slave=yes

Restart the slave server:

$ sudo service pdns restart

Add Domain Record on Slave Server

Open a MySQL database server sesssion:

slave$ mysql -u root -p pdns

Add the the domain along with the IP address of the master server as follows:

INSERT INTO `domains` (`name`, `master`, `type`)
   VALUES('example.com', '2001:db8::41', 'SLAVE');

Add Slave Record on Master Server

Open a MySQL database server sesssion:

master$ mysql -u root -p pdns

Add a NS record and IP addresses of the new slave to the domain:

 INSERT INTO `records` (`domain_id`, `name`, `type`, `content`)
     VALUES(
         (SELECT `id` FROM `domains` WHERE `name` = 'example.com'),
         'example.com',
         'NS',
         'ns2.example.com'
 );
 INSERT INTO `records` (`domain_id`, `name`, `type`, `content`)
     VALUES(
         (SELECT `id` FROM `domains` WHERE `name` = 'example.com'),
         'ns2.example.com',
         'A',
         '192.0.2.42'
 );
 INSERT INTO `records` (`domain_id`, `name`, `type`, `content`)
     VALUES(
         (SELECT `id` FROM `domains` WHERE `name` = 'example.com'),
         'ns2.example.com',
         'AAAA',
         '2001:db8::42'
 );

Delete a Domain

Let say you want to remove the domain example.org completely.

DELETE FROM `domainmetadata` WHERE `domain_id` = (
    SELECT `id` FROM `domains` WHERE `name` = "example.org"
);
DELETE FROM `records` WHERE `domain_id` = (
    SELECT `id` FROM `domains` WHERE `name` = "example.org"
);
DELETE FROM `comments` WHERE `domain_id` = (
    SELECT `id` FROM `domains` WHERE `name` = "example.org"
);
DELETE FROM `cryptokeys` WHERE `domain_id` = (
    SELECT `id` FROM `domains` WHERE `name` = "example.org"
);
DELETE FROM `domains` WHERE `name` = "example.org";

This same procedure needs to be done on every master or slave sever.

Referensi

• https://roll.urown.net/server/dns/powerdns.html