How can I make a powerdns act as an authoritative and also forward recursive ?

[baalchina]

Hi, I am new to PowerDNS.
We had a bind name server for a long time, It works as a authoritative for my domain, and many of my servers using it as a recursor, we also make my bind only response our intranet query.

Now we want to change bind to powerdns, we already configure a pdns authoritative server, but how can it be a recursor in the same ip and port? Because if bind stopped working, we should change the dns in hundreds of my servers, which is an impossible mission.

So we want to do like this:

1. Deploy a dnsdist, and listen in port 53
2. Deploy a authoritative, listen in port 5300
3. In dnsdist, forward all recursive from my servers to a public dns such as 8.8.8.8
4. Deny any recursive querys.

Is this a good idea? Thanks!

[omoerbeek]

That looks like the right approach. Don't forget to forward non-recursive queries to your authoritative server as well. It is also very well possible to forward recursive queries to a resolver like PowerDNS Recursor you're running yourself.