Ok this is possibly the easiest thing on earth but I didn’t see any clear documentation on the topic apart from a simple text file which actually helped.
The first step is obviously to install nsd, for example using
# pkg install nsd
My master DNS server runs BIND so there’s no specifics regarding
nsd, here’s the most
basic configuration the slave needs:
# cat /usr/local/etc/nsd/nsd.conf remote-control: control-enable: yes server: zonesdir: "/usr/local/etc/nsd" verbosity: 1 zone: name: "imil.net" zonefile: imil.net.signed allow-notify: 188.8.131.52 NOKEY request-xfr: AXFR 184.108.40.206 NOKEY
/usr/local/etc/nsd belongs to
nsd for the zone file to be created, and run
nsd-control-setup to create keys needed for
nsd-control commands such as:
# nsd-control zonestatus imil.net zone: imil.net state: ok served-serial: "2023052702 since 2023-05-27T06:53:39" commit-serial: "2023052702 since 2023-05-27T06:53:39" wait: "19567 sec between attempts"
/etc/rc.conf by adding
nsd_enable="YES" (yes I know about
# service nsd start
Check that the daemon is happy by tail’ing
You might want to force zone write to disk just to check everything is setup right:
# nsd-control write
And… that’s it really!