Introduction:

DNSControl is an open-source Infrastructure as Code (IaC) tool that lets you manage DNS records using configuration files instead of manually editing them through a web interface. When used with PowerDNS Authoritative Server, DNSControl communicates with the PowerDNS REST API to create, update, and delete DNS records safely and consistently.

In this article, we will explain how to install PowerDNS Authoritative Server, enable its REST API, install DNSControl, and connect the two so you can manage your DNS zones from the command line.

What is DNSControl?

DNSControl is an open-source Infrastructure as Code (IaC) tool that helps you manage DNS records using configuration files instead of manually editing them through a web-based control panel.

With DNSControl, you define all your DNS records in a single configuration file. Whenever you need to make changes, you simply update the file and let DNSControl apply those changes automatically to your DNS provider or DNS server.

This approach makes DNS management more reliable, consistent, and easier to maintain, especially if you manage multiple domains or servers.

Key Features of DNSControl:

Manage DNS records using simple configuration files.

Automatically detect and apply only the required DNS changes.

Supports version control systems such as Git, allowing you to track every DNS modification.

Works with many popular DNS providers and self-hosted DNS servers.

Reduces the risk of manual configuration errors.

Makes it easy to manage multiple domains from a single location.

Allows you to preview changes before applying them.

Benefits of DNSControl:

Consistency: Keep DNS records identical across multiple environments.

Automation: Reduce repetitive manual tasks.

Version History: Track every DNS change with Git.

Faster Recovery: Restore DNS configurations quickly if needed.

Scalability: Easily manage hundreds or thousands of DNS records.

What is PowerDNS?

PowerDNS is a powerful, open-source DNS server that provides authoritative DNS services and recursive DNS resolution. It is designed for high performance, flexibility, and reliability, making it a popular choice for hosting providers, enterprises, cloud platforms, and large-scale infrastructures.

Unlike traditional DNS servers that primarily use static zone files, PowerDNS can store DNS records in databases such as MySQL, MariaDB, PostgreSQL, or SQLite. This makes DNS management more dynamic and easier to integrate with web applications and automation tools.

Prerequisites:

Before you begin, ensure you have:

Ubuntu 24.04 VPS

Root or sudo privileges

Step 1: Update the System

sudo apt update && sudo apt upgrade -y

Step 2: Install PowerDNS

For this article, we'll use the SQLite backend, which is simple to set up and ideal for learning or small deployments.

Install PowerDNS and the SQLite backend:

sudo apt install pdns-server pdns-backend-sqlite3 sqlite3 -y

Verify the installation:

pdns_server --version

Step 3: Configure the SQLite Database

Create the database directory:

sudo mkdir -p /var/lib/powerdns

Create the database:

sudo sqlite3 /var/lib/powerdns/pdns.sqlite3

Inside the SQLite prompt, create the required tables:

CREATE TABLE domains (

 id INTEGER PRIMARY KEY,

 name VARCHAR(255) NOT NULL,

 master VARCHAR(128) DEFAULT NULL,

 last_check INTEGER DEFAULT NULL,

 type VARCHAR(8) NOT NULL,

 notified_serial INTEGER DEFAULT NULL,

 account VARCHAR(40) DEFAULT NULL

);

CREATE UNIQUE INDEX name_index ON domains(name);

CREATE TABLE records (

 id INTEGER PRIMARY KEY,

 domain_id INTEGER DEFAULT NULL,

 name VARCHAR(255) DEFAULT NULL,

 type VARCHAR(10) DEFAULT NULL,

 content VARCHAR(65535) DEFAULT NULL,

 ttl INTEGER DEFAULT NULL,

 prio INTEGER DEFAULT NULL,

 disabled TINYINT DEFAULT 0,

 ordername VARCHAR(255),

 auth TINYINT DEFAULT 1

);

.quit

Setting permissions on the SQLite database:

sudo chown -R pdns:pdns /var/lib/powerdns

sudo chmod 700 /var/lib/powerdns

sudo chmod 600 /var/lib/powerdns/pdns.sqlite3

Step 4: Configure PowerDNS

Open the configuration file:

sudo nano /etc/powerdns/pdns.conf

Add or modify these settings:

launch=gsqlite3

gsqlite3-database=/var/lib/powerdns/pdns.sqlite3

api=yes

api-key=YourStrongAPIKey

webserver=yes

webserver-address=127.0.0.1

webserver-port=8081

Save the file.

Step 5: Restart PowerDNS

sudo systemctl restart pdns

Enable it to start automatically:

sudo systemctl enable pdns

Verify the service:

sudo systemctl status pdns

Step 6: Test the PowerDNS API

Run:

curl -H "X-API-Key: YourStrongAPIKey" \

http://127.0.0.1:8081/api/v1/servers

If you receive this response, the API is working correctly.

Step 7: Install Go

sudo apt install golang-go -y

Verify:

go version

Step 8: Install DNSControl

Install the latest version:

go install github.com/DNSControl/dnscontrol/v4@latest

Add Go to your PATH:

echo 'export PATH=$PATH:$HOME/go/bin' >> ~/.bashrc

source ~/.bashrc

Verify:

dnscontrol version

Step 9: Create a Working Directory

mkdir ~/dnscontrol

cd ~/dnscontrol

Step 10: Create creds.json

nano creds.json

{

  "powerdns": {

    "TYPE": "POWERDNS",

    "apikey": "YourStrongAPIKey",

    "serverurl": "http://127.0.0.1:8081"

  }

}

Step 11: Create dnsconfig.js

nano dnsconfig.js

Example:

var REG_NONE = NewRegistrar("none");

var PDNS = NewDnsProvider("powerdns");

D("example.com",

    REG_NONE,

    DnsProvider(PDNS),

    A("@", "203.0.113.10"),

    A("www", "203.0.113.10"),

    MX("@", 10, "mail.example.com."),

    TXT("@", "v=spf1 mx -all")

);

Note: Please replace the example domain and IP addresses with your own.

Initialize the Zone in PowerDNS:

Create the zone in PowerDNS:

sudo pdnsutil create-zone example.com ns1.example.com

Set SOA-EDIT-API so DNSControl can manage serial numbers automatically:

sudo pdnsutil set-meta example.com SOA-EDIT-API DEFAULT

Validating Configurations (dnscontrol check):

Before running preview or push, mention running:

dnscontrol check

This checks dnsconfig.js for syntax errors or invalid domain names without opening an HTTP connection to the API.

Step 12: Preview Changes

dnscontrol preview

This command shows what changes will be made without modifying any DNS records.

Step 13: Apply Changes

dnscontrol push

DNSControl will update your PowerDNS server with the changes defined in your configuration.
Step 14: Verify the Record

You can verify that the record was created using PowerDNS's CLI tool:

pdnsutil list-zone example.com

Conclusion:

DNSControl and PowerDNS are powerful tools that simplify modern DNS management. PowerDNS provides a fast, flexible, and reliable DNS server, while DNSControl makes it easy to manage DNS records through configuration files and automation.

When used together, they create an efficient, version-controlled, and scalable DNS management solution that reduces manual work, minimizes configuration errors, and streamlines DNS administration. Whether you're managing a single website or a large enterprise environment, this combination can help make DNS management more organized, secure, and easier to maintain.