Is it possible to mix zones with DNSSEC enabled and disabled in BIND?

Question

I have a dozen domains configured in a set of zones in BIND and I need to add a new one with DNSSEC enabled. If I enable DNSSEC:

options {
    dnssec-enable yes;
    dnssec-validation yes;
};

Will it break the other domains? It looks like it won't, but I want to be sure.

I tested it here and yes, you can mix zones with and without DNSSEC and it will work fine! — Adriano P, Aug 01 '15 at 04:13

score 0 · Accepted Answer · answered Sep 21 '15 at 14:26

0

Yes, the DNSSEC settings are per zone. Setting the options for one zone does not affect any others.

answered Sep 21 '15 at 14:26

Calle Dybedahl

1 Answers1