Adding Downstream Servers to a Primary DNS Zone

Set up secondary egress from OCI DNS to an external DNS provider.

Obtain the following items before you begin:

  • IP addresses of the external downstream servers.
  • (Optional) TSIG keys to assign to each downstream server.
  • Ensure that externally managed primary DNS servers can access OCI egress nameservers. The OCI nameservers perform the required zone transfers that keep the secondary zone in sync. To list OCI egress nameserver IP addresses for the root compartment, see Listing Zone Transfer Servers. The provided transfer name server IP addresses vary by region.

See Secondary DNS for more information and a feature overview.

    1. On the Public zones list page, select the zone you want to work with. If you need help finding the list page, see Listing DNS Zones.
    2. Select the Downstream servers tab.
    3. Select Manage downstream servers.
    4. Enter a downstream server IP address. The IP address can be IPv4 or IPv6.
    5. (Optional) Select a TSIG key.
    6. (Optional) Select Add additional server IP to add more downstream servers.
    7. Select Submit.
  • Use the zone update command and required parameters to update the external secondary (downstream) servers for a zone:

    oci dns zone update --zone-name-or-id zone_name or zone_OCID --external-downstream  '[{"address":"new_external_server_ip"}]' ... [OPTIONS]

    For a complete list of flags and variable options for CLI commands, see the CLI Command Reference.

  • Run the UpdateZone operation to update the external secondary (downstream) servers for a zone.