NPROXY(1) PowerDNS Authoritative Server NPROXY(1)

# [NAME](#NAME)

nproxy - DNS notification proxy

# [SYNOPSIS](#SYNOPSIS)

**nproxy** --powerdns-address *ADDRESS* \[*OPTION*]... *ADDRESS*...

# [DESCRIPTION](#DESCRIPTION)

**nproxy** is a simple daemon that reads DNS NOTIFY queries on one address and forwards them to an 'inner' nameserver that will process the notification.

Its usecase is e.g. a private authoritative server inside a NAT or firewalled LAN where **nproxy** is deployed in the DMZ.

The PowerDNS Authoritative Server has the trusted-notification-proxy option that should be set to the address set with *--origin-address* to accept these proxied notifications.

**nproxy** also has a health-check option built in. A query for 'pdns.nproxy.' with QType 'TXT' will be responded to with an answer of "OK" (inside the TXT record. When the query is for an A-record, '1.2.3.4.' is returned.

# [OPTIONS](#OPTIONS)

[**--powerdns-address <ADDRESS>**](#powerdns)

IP address of the PowerDNS server to forward the notifications to.

[**--chroot <PATH>**](#chroot)

chroot to *PATH* for additional security.

[**--setuid <UID>**](#setuid)

setuid to this numerical *UID*.

[**--setgid <GID>**](#setgid)

setgid to this numerical *GID*.

[**--origin-address <ADDRESS>**](#origin)

Set the source of the notifications sent to PowerDNS to *ADDRESS*. By default, the best matching address (kernel's choice) is used.

[**--listen-address <ADDRESS>**](#listen)

IP addresses to listen on.

[**--listen-port <PORT>**](#listen~2)

Source port to listen on, 53 by default.

[**-d*,--daemon* <ARG>**](#d)

Set *ARG* to 0 to disable running in the background.

[**-v*,* --verbose**](#v)

Be verbose

# [AUTHOR](#AUTHOR)

PowerDNS.COM BV

# [COPYRIGHT](#COPYRIGHT)

PowerDNS.COM BV

October 2, 2026

---

Document: nproxy(1) from pdns-5.1 5.1.10-r9 (Chainguard OS)
Source: https://github.com/PowerDNS/pdns