Skip to content

PowerDNS Authoritative Server 5.0.5⚓︎

PowerDNS in this port packages the Authoritative Server only. Upstream recursor is not included here, while dnsdist is available as a separate package.

Overview⚓︎

The runtime integration installs:

  • pdns_server
  • optional helpers such as pdnsutil, pdns_control, zone2sql, zone2json
  • optional diagnostic tools (sdig, pdns_notify, dnsbulktest, and the rest of the upstream tools set)
  • init/default files under /mod/etc/default.powerdns/ and /etc/init.d/rc.powerdns

At first start, the init script copies the sample configuration to:

/tmp/flash/powerdns/pdns.conf

The sample keeps PowerDNS on 127.0.0.1:5300, with API and webserver disabled.

Backends⚓︎

The current port supports these Authoritative Server backends, each selectable as static or dynamic where upstream supports it:

  • bind
  • pipe
  • godbc
  • gmysql
  • gpgsql
  • gsqlite3
  • geoip
  • ldap
  • lmdb
  • lua2
  • remote
  • tinydns

The ldap backend in this tree requires OpenLDAP plus MIT Kerberos/GSSAPI libraries (libkrb5, libgssapi_krb5) and headers.

Remember to configure at least one launch= backend in
/tmp/flash/powerdns/pdns.conf, otherwise the daemon will refuse to start.

Optional Features⚓︎

The package currently exposes these optional upstream Authoritative Server
features:

  • Lua records
  • DNS-over-TLS via either OpenSSL or the alternative GnuTLS provider
  • ixfrdist as an optional standalone binary
  • libsodium-backed signer and cookie support
  • IPCipher
  • ZeroMQ connector for the remote backend
  • verbose logging
  • externalization for the server, helper tools, ixfrdist, and dynamic modules

Upstream Features Not Wired In This Port⚓︎

The following items exist upstream, but are intentionally not wired in this
freetz port (menu option/configure glue/runtime integration is not enabled):

  • PKCS#11 support
  • GSS-TSIG support

Both are hard-disabled at configure time in this port:

  • --disable-experimental-pkcs11
  • --disable-experimental-gss-tsig

Also note that upstream recursor is a separate product and is not part of this
package. dnsdist is packaged separately.

PKCS#11 support still needs p11-kit-1 in this tree.

Toolchain Requirement⚓︎

PowerDNS 5.x requires a modern C++17-capable toolchain. In practice this means
FREETZ_TARGET_GCC_8_MIN=y for this port.

On legacy targets such as mipsel_gcc-4.6.4_uClibc-0.9.32.1, menuconfig shows
only an explanatory comment and the package cannot be built.

Notes⚓︎

HINT: Keep AVM DNS enabled unless you explicitly reconfigure PowerDNS for port 53
means:

  • Keep AVM DNS enabled when PowerDNS is in the default non-standard setup
    (typically 127.0.0.1:5300).
  • Disable AVM DNS/LLMNR only if you really want PowerDNS to listen on port 53.

If you disable AVM DNS but do not move/reconfigure PowerDNS to port 53, you
can lose local DNS service on the box for LAN clients.

If you want PowerDNS on port 53, disable AVM DNS/LLMNR through the package
option in menuconfig and then adapt pdns.conf accordingly.

During cross-builds, upstream tries to generate pdns.conf-dist by running the
freshly built pdns_server. On freetz this target binary is not runnable on the
build host, so the package intentionally installs a small fallback
pdns.conf-dist placeholder instead. This is expected and does not affect the
normal runtime path, because freetz uses /mod/etc/default.powerdns/pdns.conf
as the runtime template copied on first start.

The default sample does not enable the API or webserver. Turn them on manually
only after you have configured the backend and access control settings you need.