Adding Downstream Servers to a Primary DNS Zone

Set up secondary egress from OCI DNS to an external DNS provider.

Obtain the following items before you begin:

  • IP addresses of the external downstream servers.
  • (Optional) TSIG keys to assign to each downstream server.
  • Ensure that externally managed primary DNS servers can access OCI egress nameservers. The OCI nameservers perform the required zone transfers that keep the secondary zone in sync. To list OCI egress nameserver IP addresses for the root compartment, see Listing Zone Transfer Servers. The provided transfer name server IP addresses vary by region.

See Secondary DNS for more information and a feature overview.

    1. Open the navigation menu and click Networking. Under DNS management, click Zones.
    2. Under List scope, select the compartment that contains the zone that you want to add external downstream servers to.
      Note

      You can add downstream servers only to a primary zone.
    3. Click the name of the zone to open its details page.
    4. Under Resources, click Downstream servers.
    5. Click Manage downstream servers.
    6. Enter a downstream server IP address. The IP address can be IPv4 or IPv6.
    7. (Optional) Select a TSIG key.
    8. (Optional) Click Add additional server IP to add more downstream servers.
    9. Click Submit.
  • Use the zone update command and required parameters to update the external secondary (downstream) servers for a zone:

    oci dns zone update --zone-name-or-id zone_name or zone_OCID --external-downstream  '[{"address":"new_external_server_ip"}]' ... [OPTIONS]

    For a complete list of flags and variable options for CLI commands, see the CLI Command Reference.

  • Run the UpdateZone operation to update the external secondary (downstream) servers for a zone.