Hello. On 16/10/2021 15.17, Günther J. Niederwimmer wrote: Currently the options of adding authoritative data are quite limited.  The original zone files can't be used directly, and none of the options will behave exactly like a real zone.  (Except for prefilling the root zone into cache, but that's not your use case and there's a better way than doing that manually anyway.) 1. hints module: just addresses (+ automatic PTR), e.g. in /etc/hosts format https://knot-resolver.readthedocs.io/en/stable/modules-hints.html 2. RPZ: you can individually override almost any record that way. If your zone file always uses fully qualified owner names, I suspect it might even work as-is if you used `$ORIGIN .` Caveats:  - generating CNAMEs by RPZ isn't supported yet  - in kresd <= 5.4.2 you need to specify $ORIGIN unless it's the root (an issue discovered today) Docs, also with links to other sites explaining RPZ (as it's quite complex): https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#response… --Vladimir