I have a main server with about 200 domains, most of them imported from a previous instance. There is a slave with everything setup according to the docs (DNS clusters and DNSSEC | Hestia Control Panel), checked thrice and rebooted multiple times, but the slave only receives about 20 domains, and querying it for other domains it refuses.
Both servers have a public IPv4.
Example:
❯ drill ftt.gmbh @ns1.iridion.it
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 23232
;; flags: qr aa rd ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; ftt.gmbh. IN A
;; ANSWER SECTION:
ftt.gmbh. 300 IN A 89.58.52.124
;; AUTHORITY SECTION:
;; ADDITIONAL SECTION:
;; Query time: 28 msec
;; SERVER: 89.58.52.124
;; WHEN: Mon Nov 6 22:59:31 2023
;; MSG SIZE rcvd: 42
❯ drill ftt.gmbh @ns2.iridion.it
;; ->>HEADER<<- opcode: QUERY, rcode: REFUSED, id: 37833
;; flags: qr rd ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; ftt.gmbh. IN A
;; ANSWER SECTION:
;; AUTHORITY SECTION:
;; ADDITIONAL SECTION:
;; Query time: 31 msec
;; SERVER: 152.89.105.120
;; WHEN: Mon Nov 6 22:59:33 2023
;; MSG SIZE rcvd: 26