1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
.\" Man page generated from reStructuredText.
.
.
.nr rst2man-indent-level 0
.
.de1 rstReportMargin
\\$1 \\n[an-margin]
level \\n[rst2man-indent-level]
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
-
\\n[rst2man-indent0]
\\n[rst2man-indent1]
\\n[rst2man-indent2]
..
.de1 INDENT
.\" .rstReportMargin pre:
. RS \\$1
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
. nr rst2man-indent-level +1
.\" .rstReportMargin post:
..
.de UNINDENT
. RE
.\" indent \\n[an-margin]
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
..
.TH "NPROXY" "1" "Dec 11, 2025" "" "PowerDNS Authoritative Server"
.SH NAME
nproxy \- DNS notification proxy
.SH SYNOPSIS
.sp
\fBnproxy\fP \-\-powerdns\-address \fIADDRESS\fP [\fIOPTION\fP]... \fIADDRESS\fP\&...
.SH DESCRIPTION
.sp
\fBnproxy\fP is a simple daemon that reads DNS NOTIFY queries on one
address and forwards them to an \(aqinner\(aq nameserver that will process the
notification.
.sp
Its usecase is e.g. a private authoritative server inside a NAT or
firewalled LAN where \fBnproxy\fP is deployed in the DMZ.
.sp
The PowerDNS Authoritative Server has the trusted\-notification\-proxy
option that should be set to the address set with \fI\-\-origin\-address\fP to
accept these proxied notifications.
.sp
\fBnproxy\fP also has a health\-check option built in. A query for
\(aqpdns.nproxy.\(aq with QType \(aqTXT\(aq will be responded to with an answer of
"OK" (inside the TXT record. When the query is for an A\-record,
\(aq1.2.3.4.\(aq is returned.
.SH OPTIONS
.INDENT 0.0
.TP
.BI \-\-powerdns\-address \ <ADDRESS>
IP address of the PowerDNS server to forward the notifications to.
.TP
.BI \-\-chroot \ <PATH>
chroot to \fIPATH\fP for additional security.
.TP
.BI \-\-setuid \ <UID>
setuid to this numerical \fIUID\fP\&.
.TP
.BI \-\-setgid \ <GID>
setgid to this numerical \fIGID\fP\&.
.TP
.BI \-\-origin\-address \ <ADDRESS>
Set the source of the notifications sent to PowerDNS to \fIADDRESS\fP\&. By default, the best matching address (kernel\(aqs choice) is used.
.TP
.BI \-\-listen\-address \ <ADDRESS>
IP addresses to listen on.
.TP
.BI \-\-listen\-port \ <PORT>
Source port to listen on, 53 by default.
.TP
.BI \-d\fP,\fB \-\-daemon \ <ARG>
Set \fIARG\fP to 0 to disable running in the background.
.TP
.B \-v\fP,\fB \-\-verbose
Be verbose
.UNINDENT
.SH AUTHOR
PowerDNS.COM BV
.SH COPYRIGHT
PowerDNS.COM BV
.\" Generated by docutils manpage writer.
.
|
