DNS zones

Keep authoritative DNS in a storage: import a zone, render it, check it on every nameserver and push what passed.

Guides

Blocks

Add these blocks on the canvas by searching for their name. Each block page lists its pins and how it behaves.

• validate zone on the nameservers dnszone_check Run named-checkzone on every nameserver. Writes nothing anywhere, on any node.
• import zone export dnszone_import Read a Route53 export and hand back the records, the SOA timers and the delegation, ready to store.
• push zone to the nameservers dnszone_push Replace the live zone file and reload, per nameserver. Only reachable once the check passed on every node.
• render zone file dnszone_render Render a complete BIND zone file from stored records, with the decision report that belongs in front of a push.
• check per-apex slots dnszone_slot_status Report which per-apex slots a group member has filled, which it will never need, and which nobody has answered for.
• verify serials across the nameservers dnszone_verify Ask every nameserver which serial it is actually serving, and whether they agree.

Next steps