DynDNS: updates via TSIG #187

New Issue

saavagebueno · 2025-11-20T04:21:17-05:00

saavagebueno commented

2025-11-20 04:21:17 -05:00

Originally created by @luis-guilherme on GitHub (Mar 24, 2022).

Originally assigned to: @qdm12 on GitHub.

Dyn provides an account level key which can be used to update DNS hosts instead of our HTTP-based DNS Update API. You can generate and obtain your key from your TSIG account settings page. Your account must be a paid account to use this mechanism.

Please note: IPv6 is not supported via TSIG

TSIG updates are a mechanism to transport zone updates over a secured mechanism. This feature is available for paid accounts (DynDNS Pro and Dyn Standard DNS) and can be used with nsupdate or with dhcpd. For more information on this mechanism, please see RFC 2845 and the Wikipedia page for TSIG.

TTL values are only respected for Dyn Standard DNS hosts.

Using nsupdate for dynamic DNS TSIG Updates
To update a DNS server dynamically using TSIG for authorization, run nsupdate by doing the following:

$ nsupdate -d

server update.dyndns.com
zone $ZONE
key $KEY_NAME $KEY_HMAC
update add $HOST.$ZONE 60 A 10.0.0.1
send
quit
For Dynamic DNS hosts, $ZONE should match the host name (3rd level domain) to be updated (eg. myhost.dyndns.org)

Originally created by @luis-guilherme on GitHub (Mar 24, 2022). Originally assigned to: @qdm12 on GitHub. Dyn provides an account level key which can be used to update DNS hosts instead of our HTTP-based DNS Update API. You can generate and obtain your key from your [TSIG account settings page](https://account.dyndns.com/profile/tsig.html). Your account must be a paid account to use this mechanism. Please note: IPv6 is not supported via TSIG TSIG updates are a mechanism to transport zone updates over a secured mechanism. This feature is available for paid accounts (DynDNS Pro and Dyn Standard DNS) and can be used with nsupdate or with dhcpd. For more information on this mechanism, please see [RFC 2845](http://tools.ietf.org/html/rfc2845) and the [Wikipedia page for TSIG](http://en.wikipedia.org/wiki/TSIG). TTL values are only respected for Dyn Standard DNS hosts. Using nsupdate for dynamic DNS TSIG Updates To update a DNS server dynamically using TSIG for authorization, run nsupdate by doing the following: $ nsupdate -d > server update.dyndns.com > zone $ZONE > key $KEY_NAME $KEY_HMAC > update add $HOST.$ZONE 60 A 10.0.0.1 > send > quit For Dynamic DNS hosts, $ZONE should match the host name (3rd level domain) to be updated (eg. myhost.dyndns.org)

saavagebueno added the Priority: 💤 Low priority Category: Provider update ♻️ labels 2025-11-20 04:21:17 -05:00

saavagebueno referenced this issue

2025-11-20 04:25:34 -05:00

[PR #187] [MERGED] HTTP and DNS Public IP fetching options #648

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/ddns-updater#187