MindServer

Well-Known Member
Mar 18, 2020
246
32
28
Spain
cPanel Access Level
Root Administrator
Hi,

I configured a Cluster DNS with:

-1 Master server (WHM/cPanel)
-3 slave servers (cPanel DNSOnly): dns1.mydomain.com -> VPS 1, dns2.mydomain.com -> VPS 2, dns3.mydomain.com -> VPS3

But some things not work properly:

1- When I open cPanel DNSOnly hostname in my browser (https://hostname.mydomain.com:2087), not have SSL (not work https). How can I add SSL to cPanel DNSOnly hostname?.

2- Can I install CSF?, because I not have terminal in your panel. If I access since SSH, and install CSF, will appear CSF in my cPanel DNSOnly and can manage all since the panel?.

3- Can I install "ConfigServer Explorer" since SSH and will work correctly with cPanel DNSOnly?, or I can provoke problems?.

4- It's available the upgrade MySQL 5.7 to MariaDB 10.3. Is useful in cPanel DNSOnly for the system be more fast?. Or not will win nothing if I change to MariaDB 10.3?.

Thank you very much. Have a nice day.
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
1- When I open cPanel DNSOnly hostname in my browser (https://hostname.mydomain.com:2087), not have SSL (not work https). How can I add SSL to cPanel DNSOnly hostname?.
Did you also create an A record for the hostname where DNS for mydomain.com is hosted?

2- Can I install CSF?, because I not have terminal in your panel. If I access since SSH, and install CSF, will appear CSF in my cPanel DNSOnly and can manage all since the panel?.
You would need to install CSF via the CLI but you can manage it through the WHM UI on DNSOnly Servers.

3- Can I install "ConfigServer Explorer" since SSH and will work correctly with cPanel DNSOnly?, or I can provoke problems?.
I'd assume this would function normally as well, though they should be aware of any issues with installing on DNSOnly

4- It's available the upgrade MySQL 5.7 to MariaDB 10.3. Is useful in cPanel DNSOnly for the system be more fast?. Or not will win nothing if I change to MariaDB 10.3?.
This is probably not mandatory and mostly a preference issue since the nameserver won't be using a MySQL database for DNS records, it does use a SQLlite database but that's a flat file and not relevant to this portion.
 
  • Like
Reactions: MindServer

MindServer

Well-Known Member
Mar 18, 2020
246
32
28
Spain
cPanel Access Level
Root Administrator
Thank you very much. I configured all and now it work correctly. I have a last question for can finalize my Cluster DNS:

1- Until now I added the cluster DNS to my Web server: Access to WHM/cPanel in the Web server -> DNS Cluster -> Add a new server to the cluster -> Configure -> add the 3 cPanel DNSOnly here.

In DNS Role, "Synchronize Changes" is the correct mode?. Or you recommend me another mode?.

I need enable the option "Setup Reverse Trust Relationship"?.

2- You recommend me do the same steps in the 3 slave servers which make up the Cluster DNS?: Access to the 3 cPanel DNSOnly -> DNS Cluster -> Add a new server to the cluster -> Configure -> add the Web servers here.

If the reply is "yes", which "DNS Role" is better in this case?.

3- In the web servers I edited the file "/etc/host.conf" and added this:

Code:
order bind,hosts
multi on
Maybe need add him too in the slave servers which make up the Cluster DNS?.

Thank you again for all. This is the first time that I use WHM/cPanel for configure Cluster DNS and not know the correct relationship and options.

Have a nice day.
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
  • Like
Reactions: MindServer

MindServer

Well-Known Member
Mar 18, 2020
246
32
28
Spain
cPanel Access Level
Root Administrator
@MindServer I think this would be the most helpful Guide to DNS Cluster Configurations | cPanel & WHM Documentation as far as I know you shouldn't need to edit the host.conf file for any of these actions
Thank you very much. I configured all and the new DNS are working correctly now.

I have 2 last questions please:

1- When I use "zonemaster.net" with a test domain which is using the new DNS, I received this error message:

Code:
DELEGATION  ERROR   Child does not list enough (0) nameservers (). Lower limit set to 2.
DELEGATION  WARNING Child lists no nameserver that resolves to an IPv4 address. If any were present, the minimum allowed would be 2.
DELEGATION  ERROR   Parent has nameserver(s) not listed at the child (dns1.domain.net; dns2.domain.net; dns3.domain.net). 
DELEGATION  ERROR   None of the nameservers listed at the parent are listed at the child.
This domain load correctly her web (the Cluster DNS are working), however I receive the mentioned error.

2- My Cluster DNS have 3 servers with cPanel DNSOnly. In 2 servers the SSL are working correctly, but the third server not have SSL and I receive every day this message:

Code:
The following cPanel service generated warnings from the checkallsslcerts script.

The system failed to acquire a signed certificate from the cPanel Store because of the following error: Neither HTTP nor DNS DCV preflight checks succeeded!
Thank you again. Have a nice day.
 
Last edited:

MindServer

Well-Known Member
Mar 18, 2020
246
32
28
Spain
cPanel Access Level
Root Administrator
UPDATE:

I solved the first error. I only need know whay not generate SSL:

2- My Cluster DNS have 3 servers with cPanel DNSOnly. In 2 servers the SSL are working correctly, but the third server not have SSL and I receive every day this message:


Code:
The following cPanel service generated warnings from the checkallsslcerts script.

The system failed to acquire a signed certificate from the cPanel Store because of the following error: Neither HTTP nor DNS DCV preflight checks succeeded!
Thank you again. Have a nice day.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
15,235
2,422
363
cPanel Access Level
Root Administrator
Hey there, @MindServer,

Usually that error indicates a problem with the DNS on the hostname of the machine. It may be worth using a tool like IntoDNS to check the domain name of the hostname to make sure there is no errors, and then ensuring the subdomain of the hostame you are using (such as server1.domain.com) does resolve properly.

It can also be helpufl to ensure your machine can reach the root nameservers correctly. You can run this command to make sure those queries work:

Code:
for i in {a..m}; do echo -n "$i: "; dig +short $i.root-servers.net @$i.root-servers.net; done
but if not, there are errors you'll want to speak with your host about.

Let me know if any of that is helpful!
 
  • Like
Reactions: MindServer

MindServer

Well-Known Member
Mar 18, 2020
246
32
28
Spain
cPanel Access Level
Root Administrator
EDIT: finally this is solved automatically after 1 week, I don't know why.

I have a last question please:

In WHM/cPanel I can change the update hour in: Cron Jobs -> upcp. But this not exist in cPanel DNSOnly, where can I change the update hour?.

Thank you very much for your help. Have a nice day.
 
Last edited:

MindServer

Well-Known Member
Mar 18, 2020
246
32
28
Spain
cPanel Access Level
Root Administrator
@MindServer - the DNSOnly system doesn't have all the same interface features as a full install of WHM. However, you can still manually edit the cron through the command line by entering "crontab -e" on your system and then manually adjusting the cron hour there.
Perfect, the cPanel DNSOnly update cron is this?:

Code:
15 0 * * * (/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null)
When I update cPanel, can I lose the cron job changes?, or this changes in "crontab -e" are permanent?.

Have a nice day.