cPanel servers often keep BIND zone masters under /var/named/ (file names vary; many use the domain name as the file base). WHM’s DNS zone editor updates those files; BIND is reloaded via cPanel’s tooling (conceptually similar to rndc reload).
- Set
records_source.typetobind_dirandlocationto/var/named(or the path your server uses). - Use
include_patternif only a subset of files should load (default*.dbmay or may not match your naming; adjust the glob to match your zone files). - When zones change on disk, reload dnsplane with
watch: true,POST /dns/records/reload, or TUIrecord load.
dnsplane can sit in front as a caching or hybrid resolver that also serves local answers from merged zones, or act as a read-only mirror of panel-managed data. The exact topology (authoritative vs forwarding) depends on how you point NS glue and which service listens on port 53; this document only covers loading cPanel-style zone files.
- Prefer
api_auth_tokenwhen exposing the REST API. - If
axfr_enabledis true, setaxfr_allowed_networksto the secondary servers’ addresses only.
See zone-files.md and config-files.md for configuration details.