3 ms·
Great write up. I'm using PowerDNS for https://www.getlocalcert.net/ https://www.getlocalcert.net/, which also makes heavy use of PowerDNS's HTTP API. I've been
by 8organicbits 2y ago
Great write up. I'm using PowerDNS for https://www.getlocalcert.net/ https://www.getlocalcert.net/, which also makes heavy use of PowerDNS's HTTP API. I've been really happy with it. I need to check my code, but I remember planning to use the comment field of the records to map between application IDs and records in PowerDNS zones.
You may be able to implement the logging by using a customization of the Sqlite backend, although I think PowerDNS caching may get in your way.
I'll recommend the pipe backend to anyone looking to hack on DNS stuff. It's almost like a DNS lookup via a function in any programming language you choose. It takes a while to figure out how incoming queries are translated though.
https://doc.powerdns.com/authoritative/backends/pipe.html https://doc.powerdns.com/authoritative/backends/pipe.html
- apitman 2y agogetlocalcert looks interesting. For custom domains, what would the value prop be vs using a registrar's API? Discloser: I run TakingNames.io which is a domain seller focused on providing a low-friction API.
- 8organicbits 2y agoGreat question. My first pass at the project was looking to conform to the ACME DNS API [1]. There are some tools for cert management that use that API, so it gave me broad tool support with very little effort. The getlocalcert subdomains don't permit user modification of A, MX, or CNAME records on the public DNS; you've got to do that with a private DNS server you provide. I may consider extending the service to allow A/AAAA records to private IP ranges, and then I'd need a more full featured API, but this far there hasn't been demand for the feature. Hit me up on email if you want to chat more (in profile), we're solving some similar problems. [1] https://github.com/joohoi/acme-dns https://github.com/joohoi/acme-dns