nsd | source | dnssec | secondary
this guide is obsoleted by its ansible playbook https://pub.nethence.com/system/ansible/playbooks/nsd/
make sure you declare both servers as NS –and– also provide glue records for those
see nsd then also prepare the secret for the sync
assuming you already generated a secret for sending/receiving updates
cd /etc/nsd/ vi nsd.conf
server:
(same as primary)
remote-control:
(same but points to local keys)
key:
(same as primary - yes both nodes need to share that secret)
pattern:
name: "primary"
allow-notify: PRIMARY-IP sync
request-xfr: AXFR PRIMARY-IP sync
zone:
...
include-pattern: "primary"
## acceptance<a id="acceptance" class="hide">acceptance</a>
make a dummy change on the primary and watch the logs
_on both sides_
tail -F /var/log/syslog
_on the primary_
; sync test pouet IN A 1.2.3.4 ```
nsd-control reload $zone
https://www.linode.com/docs/guides/dns-primary-and-secondary-server-setup/
https://calomel.org/nsd_dns.html