designate/doc/source/backends/bind9.rst

BIND9 Backend

Note

The BIND9 backend, while functional, is lacking a solid process for distributing zone files among multiple DNS servers. The soon to be introduced concept of "Pools" will provide a foundation to fix this.

Designate Configuration

Configuration Options required for BIND9 operation:

[service:central]
state-path = /var/lib/designate
backend_driver = bind9

[backend:bind9]
rndc-host = 127.0.0.1
rndc-port = 953
rndc-config-file = /etc/bind9/rndc.conf  # If required by BIND9
rndc-key-file = /etc/bind/rndc.key

BIND9 Configuration

Include the Designate generated configuration in /etc/bind/named.conf.local:

include "/var/lib/designate/bind9/zones.config";

Ensure BIND9 can access the above config, one way to achieve this is by disabling AppArmor:

$ touch /etc/apparmor.d/disable/usr.sbin.named
$ service apparmor reload
$ service bind9 restart

To ensure rndc addzone/delzone functionality edit named.conf.options, or named.conf and add this line under options:

allow-new-zones yes;