Do Linode's DNS servers support DNSSEC? I use Linode's servers as slave servers to the primary running on my Linode. I am considering signing my zones, but want to know if Linode supports this.

Thanks for your help.

I second that question. Is it possible to set up Linode DNS servers to use DNSSEC?

I managed to find time to test this configuration and preliminary tests indicate that four of five linode DNS servers support DNSSEC (when set as slaves). I did not make ns2.linode.com to work and as I was told by support, they are working on it to get it done. So, if you remove ns2.linode.com from rotation for now, you are good to go with DNSSEC on Linode.

In slave mode, our authoritatives pretty much do this:

1. Retrieve zone via AXFR.
2. Parse zone.
3. Serve zone.

That's it...as long as the zone parses and the server understands the record type in your zone file, we'll mirror it -- that's why slaving is the way to do PTRs and such, because we pretty much serve any record you put in your zone.

There's a minor issue with ns2.linode.com that we need to work out, and it might drop the DNSSEC records in the transfer...other than that, slaving DNSSEC should work fine.

_________________
Disclaimer: I am no longer employed by Linode; opinions are my own alone.