Professional PowerDNS Web Console

No. PDNS Console works directly with the PowerDNS database (gmysql backend) in Native mode. This approach provides several advantages:

• No need to configure or secure the PowerDNS API
• Direct database access for optimal performance
• Works with existing PowerDNS installations without modification
• Supports cluster deployments with shared database access

Simply point PDNS Console at the same database your PowerDNS servers use, and it will work seamlessly.

PDNS Console uses a local, offline licensing system that respects your privacy:

• Free tier: Manage up to 5 DNS zones with full functionality
• Commercial licenses: Unlock higher zone limits (50 zones or unlimited)
• Offline validation: No phone-home or external dependencies
• Cluster-friendly: One license works across multiple web servers sharing the same database

The license is validated using cryptographic signatures and stored locally in your database. No internet connection is required for license validation.

Yes. PDNS Console provides comprehensive DNSSEC support including:

• Easy enable/disable: One-click DNSSEC activation for zones
• Key generation: Support for multiple algorithms (ECDSA, ED25519, RSA)
• Safe rollover: Three rollover modes (Add, Immediate, Timed) with automated lifecycle management
• DS assistance: Copy DS records for registrar submission with verification tools
• Registrar verification: Check if DS records are properly published
• Automated cron jobs: Handle timed rollover completion and key cleanup

The DNSSEC implementation follows best practices and integrates seamlessly with PowerDNS's native DNSSEC capabilities.

Dynamic DNS allows automated updates of A and AAAA records, perfect for devices with changing IP addresses:

• ddclient compatible: Works with the popular ddclient software out of the box
• Token-based authentication: Secure API access with per-zone tokens
• Rate limiting: Prevents abuse with configurable update limits
• Audit logging: Track all dynamic updates for security and troubleshooting

Simply generate a token for your zone, configure ddclient or any compatible client, and your records will update automatically when your IP address changes.

PDNS Console is designed for service providers and organizations with multiple users:

• Tenant isolation: Each tenant can only access their assigned zones
• Role-based access: Super Admin (global access) and Tenant Admin (tenant-specific access)
• Audit logging: Track all actions by user and tenant for compliance
• White labeling: Customize branding and themes for each tenant

Perfect for DNS hosting providers, managed service providers, or large organizations with multiple departments managing their own zones.

Security is a top priority in PDNS Console:

• Two-Factor Authentication: TOTP support with encrypted backup codes
• Human verification: Cloudflare Turnstile or Google reCAPTCHA integration
• CSRF protection: Prevents cross-site request forgery attacks
• Database-backed sessions: Secure session management with optional encryption
• Encryption: Sensitive data encrypted at rest using strong algorithms
• Audit logging: Comprehensive logging of all critical actions
• Input validation: Server-side validation for all user inputs

All security features are enabled by default and require no additional configuration.

Yes. PDNS Console provides comprehensive import/export capabilities:

• CSV import: Bulk import with validation and conflict detection
• Dry-run mode: Preview changes before applying them
• Conflict resolution: Smart handling of duplicate records
• CSV export: Export zones for backup or migration
• Validation: Comprehensive checks ensure data integrity

If you have existing PowerDNS zones in the database, PDNS Console will work with them immediately. For other formats, use the CSV import feature to migrate your records.