©!Men!&!Mice!!http://menandmice.com!
PowerDNS
Part!2
Supermaster,!HTTP-API,!Lua-Scripting,!Tools
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS
•Advanced!features!of!the!PowerDNS!authoritative!
server
•The!PowerDNS!HTTP-API
•Automatic!provisioning!of!slave!servers!via!a!“supermaster”
•Scripting!with!Lua
•PowerDNS!bundled!tools
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
PowerDNS!HTTP!API
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!HTTP-API
•The!PowerDNS!authoritative!server!contains!an!HTTP-
API
•Currently!marked!as!“experimental”!and!“work!in!progress”
•Restful!
•Input!validation!via!the!PowerDNS!server
• Better!than!changing!zone-!or!configuration!data!in!a!backend!
database
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
PowerDNS!HTTP-API
•Function!examples
•Create!zones
•Delete!zones
•Set!zone!metadata
•Add/replace/delete!DNS!
records!in!zones
•Set!server!configuration
•Get!server!and!zone!
statistics
•Access!to!cache!content
•Management!of!TSIG!and!
DNSSEC!keys
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!HTTP-API
•Use!cases
•DNS!server!automation!via!scripts
•Integration!of!PowerDNS!into!customer!portals
•Own!User-Interface!management!front-end!tools!with!
integrated!special!business!logic
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!HTTP-API
DEMO
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
PowerDNS!“supermaster”
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
Primary!
Master
Secondary!
1
Secondary!
2
Secondary!
3
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
SSH!login,!create!
master!zone,!add!
master!zone!to!
configuration
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
SSH!login,!add!
slave!zone!to!
configuration
SSH!login,!add!
slave!zone!to!
configuration
SSH!login,!add!
slave!zone!to!
configuration
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
Zonetransfer request
Zonetransfer request
Zonetransfer request
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
Zonetransfer
Zonetransfer
Zonetransfer
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
SSH!login,!add!
master!to!the!
supermaster!
table
SSH!login,!add!
master!to!the!
supermaster!
table
SSH!login,!add!
master!to!the!
supermaster!
table
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
SSH!login,!create!
master!zone,!add!
master!zone!to!
configuration
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Notify
Notify
Notify
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Notify!from!a!
“supermaster”?
Notify!from!a!
“supermaster”?
Notify!from!a!
“supermaster”?
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Zonetransfer request
Zonetransfer request
Zonetransfer request
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Zonetransfer
Zonetransfer
Zonetransfer
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”!
requirements
•The!secondary!must!have!the!IP-Address!of!the!master!
in!its!“supermaster”!table
•The!master!must!have!a!SOA!record!for!the!new!zone
•The!NS!record!set!of!the!new!domain!must!include!the!
names!of!the!secondary!and!master!server
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
DEMO
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
Lua!scripting
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
What!is!Lua?
•Lua!is!a!small!and!fast!scripting!
language!well!suited!for!
embedding
•Started!1993!at!Computer!
Graphics!Technology!Group,!Brazil
•Multi-paradigm,!easy!to!learn
•Executed!as!compiled!bytecode!for!
a!register!virtual-machine
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
Lua!uses
• Lua!is!very!popular!as!a!scripting!
engine!in!games
• Other!uses:
• Adobe!Lightroom
• Apache!HTTP-Server
• Cisco!ASA
• LuaTeX
• MediaWiki
• NetBSD!Kernel
• Prosody!Jabber!Server
• Redis!key-value!database
• Snort
• VIM!Editor
• Wireshark
• and!PowerDNS
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Lua!Backend
• With!the!PowerDNS!Lua!Backend,!DNS!answers!from!a!zone!can!
be!fully!scripted
• Use-cases:
• On-the-fly!creation!of!IPv6!and!IPv4!PTR!records!for!reverse!name!
resolution
• Create!records!from!backend!systems!not!directly!supported!by!
PowerDNS
• On-the-fly!creation!of!special!resource!records!(TLSA,!OPENPGPKEY,!
SMIMEA!...)
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Lua!Backend
DEMO
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
more!Lua
•Lua!zone-transfer!filter
•PowerDNS!can!call!a!filter!written!in!Lua!for!incoming!zone-
transfers
•Use!cases:
• Add!special!(informational)!records!to!zone
• Fix!zones!SOA!serial
• Add!zone!changes!to!a!version!control!system
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
PowerDNS!Tools
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Tools
•The!PowerDNS!distribution!includes!a!number!of!
interesting!tools
•The!tools!are!independent!from!the!PowerDNS!server!and!
can!also!be!used!with!other!DNS!server!products
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Tools
•Tools:
• dnsdist!-!a!DNS!load!balancer,!currently!being!transformed!into!
a!separate!product!
http://dnsdist.org/
• Tools!to!analyze!DNS!traffic:!dnswasher,!dnsscope,!dnsscan,!
dnsreplay
• Benchmark!tools:!dnsbulktest,!dnsreplay,!dnstcpbench
• DNS!troubleshooting:!nsec3dig,!saxfr
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Tools
DEMO
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice,com!
Upcoming!Training!and!
Webinars
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
Upcoming!trainings!(English)
•September!28!–!29,!2015!-!Introduction!to!DNS!&!
BIND!Hands!on!-!Arlington!(VA),!USA!(confirmed)
•September!28!–!October!2,!2015!-!Introduction!&!
Advanced!DNS!and!BIND!Hands!on,!Arlington!(VA),!
USA!(confirmed)
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
Upcoming!trainings!(German)
•19.!–!21.!October!2015!-!DHCP!Workshop!-!Essen,!
Deutschland
•26.!–!28.!October!2015!-!DNS!und!BIND!–!Die!Grundlagen!
des!Domain!Name!Systems!-!Essen,!Deutschland!(confirmed)
•26.!–!30.!October!2015!-!“DNS!und!Bind”!und!“DNS!
Security!&!DNSSEC”!-!Essen,!Deutschland!(confirmed)
•29.!–!30.!October!2015!-!DNS!Security!&!DNSSEC!-!Essen,!
Deutschland!(confirmed)
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
Upcoming!webinars
• Keeping!DNS!server!up-and-running!with!“runit”
22th!October!2015
• RIPE!71!and!IETF!94!reports
19th!November!2015
• DNSTAP!-!have!a!deep!look!into!DNS!server!operations!
(featuring!Unbound!and!Knot-DNS)
16th!December!2015
• The!DNS!server!in!Windows!2016!Server!-!a!big!leap!forward!(views,!response!rate!
limiting,!ACLs!and!more)
January!2016
• An!Update!on!DNSSEC!and!DANE:!new!implementations,!adoption!in!the!market,!
new!Internet!standards
Thursday 17 September 15
©!Men!&!Mice!!http://menandmice.com!
Q/A
?
Thursday 17 September 15

More Related Content

PPTX
DESEMPEÑOS PRECISADOS_ARTE Y CULTURA.pptx
DOCX
Aulas funcionales
DOCX
REFUERZO ESCOLAR 2023 MATEMATICAS Y COMUNICACION.docx
PDF
PowerDNS Webinar
ODP
Cassandra-Powered Distributed DNS
PDF
How we cooked Elasticsearch, Consul, HAproxy and DNS-recursor
PDF
Fleet Commander - Flock 2017
PPT
Ps3 linux
DESEMPEÑOS PRECISADOS_ARTE Y CULTURA.pptx
Aulas funcionales
REFUERZO ESCOLAR 2023 MATEMATICAS Y COMUNICACION.docx
PowerDNS Webinar
Cassandra-Powered Distributed DNS
How we cooked Elasticsearch, Consul, HAproxy and DNS-recursor
Fleet Commander - Flock 2017
Ps3 linux

Viewers also liked (20)

ODT
Centos 7 Installation Steps
PDF
DNSTap Webinar
PDF
DNS High-Availability Tools - Open-Source Load Balancing Solutions
PDF
What is new in BIND 9.11?
PDF
Rh199 rhel 7
ODT
Linux system administrators-guide
PDF
Rooting your internals - Exploiting Internal Network Vulns via the Browser Us...
PDF
RHEL-7 Administrator Guide for RedHat 7
PDF
BIND 9 logging best practices
PPTX
Install Linux CentOS 7.0
PDF
Rh318 rhev3
PDF
Implementing ossec
PPTX
Trabalho Linux - Red Hat
PPTX
RHCE (RED HAT CERTIFIED ENGINEERING)
PPTX
Red hat linux
PDF
PDF
I'm the butcher would you like some BeEF
PDF
How To Install CentOS 7
PPTX
Red hat enterprise linux 7 (rhel 7)
PPT
RedHat Linux
 
Centos 7 Installation Steps
DNSTap Webinar
DNS High-Availability Tools - Open-Source Load Balancing Solutions
What is new in BIND 9.11?
Rh199 rhel 7
Linux system administrators-guide
Rooting your internals - Exploiting Internal Network Vulns via the Browser Us...
RHEL-7 Administrator Guide for RedHat 7
BIND 9 logging best practices
Install Linux CentOS 7.0
Rh318 rhev3
Implementing ossec
Trabalho Linux - Red Hat
RHCE (RED HAT CERTIFIED ENGINEERING)
Red hat linux
I'm the butcher would you like some BeEF
How To Install CentOS 7
Red hat enterprise linux 7 (rhel 7)
RedHat Linux
 
Ad

Similar to PowerDNS Webinar - Part 2 (20)

PDF
APIs - the good, the bad & the ugly
PDF
Imola informatica - cloud computing and software development
PDF
Fastest to Mobile with Scalatra + Swagger
PPT
Big Data DC - BenchPress
PDF
Report from IETF 89 in London - DNS, DHCP and IPv6
PDF
Publish data as Time Consistent Web API based on Provenance (WS-REST 2014)
PDF
Evaluation of Web Processing Service Frameworks
PDF
Chaione Ember.js Training
KEY
NASA SensorWeb Enterprise Services
PDF
PLAT-8 Spring Web Scripts and Spring Surf
PDF
Building Better Web APIs with Rails
PDF
eMusic: WordPress in the Enterprise
PDF
PLAT-7 Spring Web Scripts and Spring Surf
PDF
PLAT-7 Spring Web Scripts and Spring Surf
PDF
WCM-7 Surfing with CMIS
PDF
Developing OpenResty Framework
PPTX
Scaling with swagger
PDF
Stackup New Languages Talk: Ember is for Everybody
PDF
Introduction to Chef
PDF
Mobile Web Performance - Getting and Staying Fast
APIs - the good, the bad & the ugly
Imola informatica - cloud computing and software development
Fastest to Mobile with Scalatra + Swagger
Big Data DC - BenchPress
Report from IETF 89 in London - DNS, DHCP and IPv6
Publish data as Time Consistent Web API based on Provenance (WS-REST 2014)
Evaluation of Web Processing Service Frameworks
Chaione Ember.js Training
NASA SensorWeb Enterprise Services
PLAT-8 Spring Web Scripts and Spring Surf
Building Better Web APIs with Rails
eMusic: WordPress in the Enterprise
PLAT-7 Spring Web Scripts and Spring Surf
PLAT-7 Spring Web Scripts and Spring Surf
WCM-7 Surfing with CMIS
Developing OpenResty Framework
Scaling with swagger
Stackup New Languages Talk: Ember is for Everybody
Introduction to Chef
Mobile Web Performance - Getting and Staying Fast
Ad

More from Men and Mice (20)

PPTX
Cisco Live 2019: New Best Practices for Hybrid and Multicloud Network Strategies
PDF
Part 3 - Local Name Resolution in Linux, FreeBSD and macOS/iOS
PDF
Part 2 - Local Name Resolution in Windows Networks
PDF
Namespaces for Local Networks
PDF
How to send DNS over anything encrypted
PDF
The DNSSEC KSK of the root rolls
PDF
The CAA-Record for increased encryption security
PDF
SMTP STS (Strict Transport Security) vs. SMTP with DANE
PDF
DNSSEC signing Tutorial
PDF
Fighting Abuse with DNS
PDF
Yeti DNS - Experimenting at the root
PDF
Windows Server 2016 Webinar
PDF
Kea DHCP – the new open source DHCP server from ISC
PDF
RIPE 71 and IETF 94 reports webinar
PDF
Keeping DNS server up-and-running with “runit
PDF
IETF 93 Review Webinar
PDF
RIPE 70 Report Webinar
PDF
DNSSEC best practices Webinar
PDF
IETF 92 Webinar
PDF
The KNOT DNS Server
Cisco Live 2019: New Best Practices for Hybrid and Multicloud Network Strategies
Part 3 - Local Name Resolution in Linux, FreeBSD and macOS/iOS
Part 2 - Local Name Resolution in Windows Networks
Namespaces for Local Networks
How to send DNS over anything encrypted
The DNSSEC KSK of the root rolls
The CAA-Record for increased encryption security
SMTP STS (Strict Transport Security) vs. SMTP with DANE
DNSSEC signing Tutorial
Fighting Abuse with DNS
Yeti DNS - Experimenting at the root
Windows Server 2016 Webinar
Kea DHCP – the new open source DHCP server from ISC
RIPE 71 and IETF 94 reports webinar
Keeping DNS server up-and-running with “runit
IETF 93 Review Webinar
RIPE 70 Report Webinar
DNSSEC best practices Webinar
IETF 92 Webinar
The KNOT DNS Server

Recently uploaded (20)

PDF
Credit Without Borders: AI and Financial Inclusion in Bangladesh
PDF
TrustArc Webinar - Click, Consent, Trust: Winning the Privacy Game
PPTX
2018-HIPAA-Renewal-Training for executives
PDF
sustainability-14-14877-v2.pddhzftheheeeee
PPTX
AI IN MARKETING- PRESENTED BY ANWAR KABIR 1st June 2025.pptx
PPTX
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
PDF
Abstractive summarization using multilingual text-to-text transfer transforme...
PDF
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
PDF
Consumable AI The What, Why & How for Small Teams.pdf
PDF
Two-dimensional Klein-Gordon and Sine-Gordon numerical solutions based on dee...
PPTX
Chapter 5: Probability Theory and Statistics
PDF
Produktkatalog für HOBO Datenlogger, Wetterstationen, Sensoren, Software und ...
PPTX
Configure Apache Mutual Authentication
PPT
What is a Computer? Input Devices /output devices
PDF
Getting started with AI Agents and Multi-Agent Systems
PPTX
The various Industrial Revolutions .pptx
PDF
CloudStack 4.21: First Look Webinar slides
PDF
sbt 2.0: go big (Scala Days 2025 edition)
PDF
Zenith AI: Advanced Artificial Intelligence
PPTX
Microsoft Excel 365/2024 Beginner's training
Credit Without Borders: AI and Financial Inclusion in Bangladesh
TrustArc Webinar - Click, Consent, Trust: Winning the Privacy Game
2018-HIPAA-Renewal-Training for executives
sustainability-14-14877-v2.pddhzftheheeeee
AI IN MARKETING- PRESENTED BY ANWAR KABIR 1st June 2025.pptx
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
Abstractive summarization using multilingual text-to-text transfer transforme...
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
Consumable AI The What, Why & How for Small Teams.pdf
Two-dimensional Klein-Gordon and Sine-Gordon numerical solutions based on dee...
Chapter 5: Probability Theory and Statistics
Produktkatalog für HOBO Datenlogger, Wetterstationen, Sensoren, Software und ...
Configure Apache Mutual Authentication
What is a Computer? Input Devices /output devices
Getting started with AI Agents and Multi-Agent Systems
The various Industrial Revolutions .pptx
CloudStack 4.21: First Look Webinar slides
sbt 2.0: go big (Scala Days 2025 edition)
Zenith AI: Advanced Artificial Intelligence
Microsoft Excel 365/2024 Beginner's training

PowerDNS Webinar - Part 2