Skip to main content

​
Overview

Zone transfers replicate zone data from the Polystack DNS service to secondary nameservers or other projects. Administrators control which destinations are permitted to perform zone transfers. Transfer requests use a one-time key mechanism — the requesting admin generates the request and shares the key with the recipient through a secure channel.
Administrator Access Required — This operation requires the admin role. Contact your Polystack administrator if you do not have sufficient permissions.

​
Zone Transfer Workflow

​
Create a Transfer Request

1

Create transfer request as admin

Create zone transfer request
This generates a key that the recipient uses to accept the transfer.
2

Share the transfer key

Share the id and key from the output with the recipient project administrator through a secure channel (e.g., encrypted email, secrets manager).
Never share transfer keys over unencrypted channels. A compromised key allows unauthorized zone transfer.
3

Recipient accepts the transfer

The recipient project accepts the transfer using the provided credentials:
Accept zone transfer
Zone becomes available in the recipient project.

​
Security Best Practices

Audit all accepted zone transfers (admin)

​
Next Steps

Pool Management

Manage nameserver pools that receive transferred zone data

Security

Full DNS security hardening guidelines

Backend Configuration

Configure also_notifies for AXFR consumer nameservers

Admin Troubleshooting

Diagnose zone transfer failures and key errors