Chapter 14. Per zone settings aka Domain Metadata

Starting with the PowerDNS Authoritative Server, each served zone can have "metadata". Such metadata determines how this zone behaves in certain circumstances.

[Warning]Warning

Domain metadata is only available for DNSSEC capable backends! Make sure to enable the proper '-dnssec' setting to benefit, and to have performed the DNSSEC schema update.

Each metadata item is described elsewhere in the documentation, and the following settings are available:

AXFR-MASTER-TSIG

Use this named TSIG key to retrieve this zone from its master.

LUA-AXFR-SCRIPT

Script to be used to edit incoming AXFRs.

NSEC3NARROW

Determines if this zone operates in NSEC3 'narrow' mode.

NSEC3PARAM

NSEC3 parameters of a DNSSEC zone. Will be used to synthesize the NSEC3PARAM record. If present, NSEC3 is used, if not present, zones default to NSEC.

PRESIGNED

This zone carries DNSSEC RRSIGs (signatures), and is presigned.

SOA-EDIT

When serving this zone, modify the SOA serial number in one of several ways. Mostly useful to get slaves to re-transfer a zone regularly to get fresh RRSIGs.

TSIG-ALLOW-AXFR

Allow these named TSIG keys to AXFR this zone.