4 ms·

I've been down this route but ultimately found much more stability running BIND as a hidden master and pushing NOTIFYs to secondary nameservers (I use DNSMadeEa

I've been down this route but ultimately found much more stability running BIND as a hidden master and pushing NOTIFYs to secondary nameservers (I use DNSMadeEasy) whenever the zone is modified. Supports DNSSEC as well. I wrote up my setup here: https://www.c0ffee.net/blog/dns-hidden-master https://www.c0ffee.net/blog/dns-hidden-master I host mostly static IPs, but I also use this setup with shared keys and PFSense's RFC2136 feature to push dynamic DNS updates for my home network.

JeanMarcS 9y ago
I’m stuck on the DNSSEC part with OVH as a registar, as they won’t let you add DNSSEC records if you don’t use their DNS. Not cool. But your post gave me an idea to try, so anyway, thank you, either it will work or not.
- psz 9y ago
  Enable DNS zone, you don't even need to use it. Then, you'll be able to set custom DS records on a domain. I asked them. It's not a bug, it's a feature!