NetBox DNS introduces DNSSEC key rotation capabilities

NetBox DNS version 1.2.7 and later now allows for the storage of DNSSEC information within the platform. The plugin provides the necessary configuration parameters to automate the signing of DNS zones. While the plugin manages configuration, actual key material is handled by the nameserver to ensure efficiency and security.

Recent updates, including version 1.2.9, have introduced the ‘Parental Agents’ field in zone settings. This feature allows users to enter the IP addresses of authoritative nameservers for a parent zone where the DS record is expected, facilitating smoother key rotation and algorithm transitions, such as moving from RSASHA256 to ECDSAP256SHA256.