> ## Content Index
> Fetch the complete content index at: https://ostreff.info/llms.txt
> Use this file to discover other available public pages before exploring further.

# Using Hurricane Electric free DNS service to speedup your DNS service
- URL: https://ostreff.info/using-hurricane-electric-free-dns-service-for-slaves/
- Published: 2021-01-27T19:03:16.000Z
- Updated: 2021-01-28T10:10:20.000Z
- Author: Jordan Ostreff
- Tags: DNS

So apart from setting ns\[2345\].he.net as your DNS servers at your registrar and adding a slave at [http://dns.he.net](http://t.umblr.com/redirect?z=http%3A%2F%2Fdns.he.net&t=ODAzYzgyYzgyYjc4Nzc3MWYzMGU5ODcxZmU0M2Q2YzA2ZDc5MTQ3NCxjRmFOU21PWA%3D%3D&b=t%3AyC21hTB-EApArzTh4CNbnA&p=http%3A%2F%2Fstuff.baturin.org%2Fpost%2F86747317815&m=1&ref=ostreff.info) you need to do the following:

1. Allow transfer AXFR to **slave.dns.he.net.** Server that pulls zones is **slave.dns.he.net**, not **ns1.he.net**.
2. Remove **ns1.he.net** from allow transfer ACLs if it was there.
3. Set the server to send NOTIFY’s to **ns1.he.net**. Yes, to ns1, not to slave.dns.he.net. slave.dns.he.net doesn’t listen for any DNS requests including NOTIFY’s.

### BIND example

The NOTIFY part is a bit tricky, so here’s an example from my setup.

#### Creating an ACL for slave.dns.he.net

At the top level of named.conf:

> acl he-slaves  
> {  
> 216.218.133.2; // slave.dns.he.net IPv4  
> 2001:470:600::2; // slave.dns.he.net IPv6  
> };

#### Basic zone setup

> zone "example.org" in  
> {  
> type master;  
> allow-transfer  
> {  
> he-slaves;  
> };  
> file "data/example.org";  
> };

#### Notification setup

Add this to the zone:

> notify explicit;  
> also-notify  
> {  
> 216.218.130.2;  
> };

So the zone looks like:

> zone "example.org" in  
> {  
> type master;  
> allow-transfer  
> {  
> he-slaves;  
> };  
>  
> notify explicit;  
> also-notify  
> {  
> 216.218.130.2; // ns1.he.net  
> };  
>  
> file "data/example.org";  
> };

### PowerDNS 4 example

execute this commands on PowerDNS machine

> pdnsutil set-meta example.org ALLOW-AXFR-FROM AUTO-NS 216.218.133.2  
> pdnsutil set-meta example.org ALSO-NOTIFY 216.218.130.2

The result can be checked via:

> pdnsutil get-meta example.org