Hurricane Electric's IPv6 Tunnel Broker Forums

Please login or register.

Login with username, password and session length
Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Author Topic: DNSSEC for slaves?  (Read 141 times)

sporkv6

  • Newbie
  • *
  • Posts: 7
    • View Profile
DNSSEC for slaves?
« on: March 09, 2017, 05:55:32 PM »

I'm new to DNSSEC with PowerDNS, so I'm possibly fighting two things at once - my ignorance of how PowerDNS compares to BIND in setting things up on my master, and then the possibility that HE.net DNS does not support/transfer all the necessary records.

Can anyone give a solid yes/no on whether *slaving* DNSSEC should work here or not?

I suspect not - when I query my own master for DS records, I get them, and when I query HE, no errors, but also no DS records.  Validated my domain, made sure serials match between master/slave, etc.
Logged

sporkv6

  • Newbie
  • *
  • Posts: 7
    • View Profile
Re: DNSSEC for slaves?
« Reply #1 on: March 10, 2017, 09:39:21 AM »

Bump: Anyone?

To simplify, does HE.net's DNS service, when used as a slave/secondary, support DNSSEC?
Logged

broquea

  • Sr. Network Engineer, HE.NET AS6939
  • Administrator
  • Hero Member
  • *****
  • Posts: 1667
    • View Profile
    • Another IPv6 Blog...
Re: DNSSEC for slaves?
« Reply #2 on: March 10, 2017, 10:29:43 AM »

DNSSEC support is not available as of yet.
Logged