Recommendations for replacing a master server without breaking DNSSEC

Ralph Seichter ralph at ml.seichter.de
Fri Nov 26 18:12:58 UTC 2021


* Tony Finch:

> I think a procedure like this is a good way to migrate a primary
> server if the old and new servers are run by the same people [...]

After reading your message I think that we used pretty much the same
approach, although I am fortunate for not having to work under time
pressure. I have since started from scratch, once again, with a more
relaxed mindset, and this time the migration was successful.

I don't know what I did differently compared to my initial tests. Maybe
there was some oversight on my end. Also, instead of copying files once
beforehand, I used "rsync" between Alpha and Beta whenever I made a
change. In any case, I guess all is well that ends well. ;-)

-Ralph


More information about the bind-users mailing list