Advanced PowerDNS Configuration & Support

I am expanding an existing PowerDNS (authoritative) deployment and need a seasoned hand to keep everything tight and reliable. The immediate focus is three-fold: full DNS record management, deep-dive troubleshooting when something misbehaves, and a clean, well-documented pdns configuration that can scale.

Records in scope include A, AAAA, CNAME, MX, SOA, and NS, so the job touches almost every corner of the zone file. On top of the basics, I am rolling out DNSSEC for signatures, GeoDNS for location-aware responses, and RPZ for policy-based blocking. These advanced features must mesh smoothly with the existing setup without introducing latency or instability.

Deliverables
• Updated pdns.conf (with comments) reflecting DNSSEC, GeoDNS, and RPZ
• Verified zone files for all listed record types, free of warnings on pdnsutil check-zone
• Troubleshooting report that documents any issues found and the exact steps taken to resolve them
• Post-deployment validation: dig +dnssec and location tests proving that signed and geo-aware answers are served correctly

Success is defined by zero errors in the PowerDNS log, DNSViz clean for DNSSEC, and predictable geo/policy responses in test queries. Clear, step-by-step notes are expected so I can repeat the process in staging and future environments.

If you speak fluent PowerDNS, let’s get this ironed out.