Setting up a Redundant DNS Infrastructure with Knot DNS and DNSSEC

Introduction In this post, I’ll walk through setting up a complete, redundant DNS infrastructure using NixOS, Knot DNS, and DNSSEC. I’ll provide ready-to-use configurations for both master and slave servers. Directory Structure nix-config/ ├── hosts/ │ ├── master/ │ │ ├── default.nix │ │ └── zones/ │ │ ├── example.com.zone │ │ └── example.org.zone │ └── slave/ │ └── default.nix Zone Files First, let’s look at our zone files that will be stored in version control: ...

January 23, 2025 · 5 min · Alexander Holte-Davidsen