diff --git a/dns/powerdns/Makefile b/dns/powerdns/Makefile
index d4ee78b31ce8..00a904bade92 100644
--- a/dns/powerdns/Makefile
+++ b/dns/powerdns/Makefile
@@ -1,133 +1,133 @@
 PORTNAME=	powerdns
-DISTVERSION=	4.6.2
+DISTVERSION=	4.6.3
 CATEGORIES=	dns
 MASTER_SITES=	https://downloads.powerdns.com/releases/
 DISTNAME=	pdns-${DISTVERSION}
 
 MAINTAINER=	tremere@cainites.net
 COMMENT=	Advanced DNS server with multiple backends including SQL
 
 LICENSE=	GPLv2
 
 BROKEN_sparc64=	does not compile: error: to_string is not a member of std
 NOT_FOR_ARCHS=	i386
 NOT_FOR_ARCHS_REASON=	archs with 32-bits time_t are no longer supported by upstream
 
 LIB_DEPENDS=	libboost_serialization.so:devel/boost-libs \
 		libcurl.so:ftp/curl
 
 USES=		autoreconf compiler:c++11-lib cpe gmake libtool \
 		localbase:ldflags pathfix pkgconfig ssl tar:bzip2
 
 USE_RC_SUBR=	pdns
 USE_SUBMAKE=	YES
 
 GNU_CONFIGURE=	YES
 CONFIGURE_ARGS=	--disable-static \
 		--docdir="${PREFIX}/share/doc/powerdns" \
 		--sysconfdir="${PREFIX}/etc/pdns" \
 		--with-boost="${LOCALBASE}" \
 		--with-dynmodules="pipe bind ${MODULES}" \
 		--with-libsodium=no \
 		--with-modules=""
 
 SCRIPTS_ENV=	CURDIR2="${.CURDIR}" \
 		DISTNAME="${DISTNAME}" \
 		MKDIR="${MKDIR}" \
 		POWERDNS_OPTIONS="${POWERDNS_OPTIONS}" \
 		WRKDIRPREFIX="${WRKDIRPREFIX}"
 INSTALL_TARGET=	install-strip
 SUB_FILES=	pkg-message
 
 USERS=		pdns
 GROUPS=		pdns
 
 OPTIONS_DEFINE=			DOCS EXAMPLES GEOIP IXFRDIST LMDB LUABACKEND \
 				MYSQL OPENLDAP PGSQL REMOTE SQLITE3 TINYDNS \
 				TOOLS UNIXODBC
 OPTIONS_DEFAULT=		LMDB LUA MYSQL PGSQL SQLITE3
 OPTIONS_GROUP=			GEOIPOPT REMOTEOPT
 OPTIONS_GROUP_REMOTEOPT=	ZEROMQ
 OPTIONS_SINGLE=			EXTLUA
 OPTIONS_SINGLE_EXTLUA=		LUA LUAJIT LUAJITOR
 
 OPTIONS_SUB=	yes
 
 GEOIPOPT_DESC=		GeoIP DB options
 GEOIP_DESC=		GeoIP backend (GeoIP2 DB)
 IXFRDIST_DESC=		Build ixfrdist
 LMDB_DESC=		LMDB backend
 LUABACKEND_DESC=	Lua2 backend
 LUAJITOR_DESC=		Use lang/luajit-openresty
 LUAJIT_DESC=		Use lang/luajit
 LUA_DESC=		Use lang/lua
 MYSQL_DESC=		MySQL backend
 OPENLDAP_DESC=		OpenLDAP backend
 PGSQL_DESC=		PostgreSQL backend
 REMOTEOPT_DESC=		Remote backend connectors
 REMOTE_DESC=		Remote backend
 SQLITE3_DESC=		SQLite 3 backend
 TINYDNS_DESC=		TinyDNS backend
 TOOLS_DESC=		Build extra tools
 ZEROMQ_DESC=		Enable ZeroMQ connector (Implies REMOTE enabled)
 
 GEOIP_LIB_DEPENDS=	libmaxminddb.so:net/libmaxminddb \
 			libyaml-cpp.so:devel/yaml-cpp
 GEOIP_VARS=		MODULES+=geoip
 
 IXFRDIST_LIB_DEPENDS=		libyaml-cpp.so:devel/yaml-cpp
 IXFRDIST_CONFIGURE_ENABLE=	ixfrdist
 
 LMDB_LIB_DEPENDS=	liblmdb.so:databases/lmdb
 LMDB_CONFIGURE_ON=	--with-lmdb=${LOCALBASE}
 LMDB_CONFIGURE_OFF=	--without-lmdb
 LMDB_VARS=		MODULES+=lmdb
 
 LUABACKEND_VARS=	MODULES+=lua2
 
 LUAJITOR_LIB_DEPENDS=	libluajit-5.1.so.2:lang/luajit-openresty
 LUAJITOR_CONFIGURE_ON=	--with-lua=luajit
 
 LUAJIT_LIB_DEPENDS=	libluajit-5.1.so.2:lang/luajit
 LUAJIT_CONFIGURE_ON=	--with-lua=luajit
 
 LUA_USES=	lua
 
 MYSQL_USES=		mysql
 MYSQL_CONFIGURE_ON=	--with-mysql=${LOCALBASE}
 MYSQL_CONFIGURE_OFF=	--without-mysql
 MYSQL_VARS=		MODULES+=gmysql
 
 OPENLDAP_USE=		OPENLDAP=YES
 OPENLDAP_CXXFLAGS=	-DLDAP_DEPRECATED=1
 OPENLDAP_VARS=		MODULES+=ldap
 
 PGSQL_USES=		pgsql
 PGSQL_CONFIGURE_ON=	--with-pg-config=${LOCALBASE}/bin/pg_config
 PGSQL_VARS=		MODULES+=gpgsql
 
 REMOTE_VARS=	MODULES+=remote
 
 SQLITE3_USES=	sqlite:3
 SQLITE3_VARS=	MODULES+=gsqlite3
 
 TINYDNS_LIB_DEPENDS=	libcdb.so:databases/tinycdb
 TINYDNS_CONFIGURE_ON=	CDB_CFLAGS="-I${LOCALBASE}/include" \
 			CDB_LIBS="-L${LOCALBASE}/lib -lcdb"
 TINYDNS_VARS=		MODULES+=tinydns
 
 TOOLS_CONFIGURE_ENABLE=	tools
 
 UNIXODBC_LIB_DEPENDS=	libodbc.so:databases/unixODBC
 UNIXODBC_VARS=		MODULES+=godbc
 
 ZEROMQ_IMPLIES=		REMOTE
 ZEROMQ_LIB_DEPENDS=	libzmq.so:net/libzmq4
 ZEROMQ_CONFIGURE_ON=	--enable-remotebackend-zeromq
 
 post-install::
 	@${MKDIR} ${STAGEDIR}${EXAMPLESDIR} ${STAGEDIR}/var/run/pdns
 	@${STAGEDIR}${PREFIX}/sbin/pdns_server --module-dir=${STAGEDIR}${PREFIX}/lib/pdns --launch="pipe bind ${MODULES}" --config > ${STAGEDIR}${EXAMPLESDIR}/pdns.conf
 	@${REINPLACE_CMD} -e 's;${STAGEDIR};;' -i '' ${STAGEDIR}${EXAMPLESDIR}/pdns.conf
 
 .include <bsd.port.mk>
diff --git a/dns/powerdns/distinfo b/dns/powerdns/distinfo
index e65898d62f52..c8c6146f233e 100644
--- a/dns/powerdns/distinfo
+++ b/dns/powerdns/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1649776889
-SHA256 (pdns-4.6.2.tar.bz2) = f443848944bb11bbb4850221613b3a01ffb57febf2671da6caa57362ee0b19b8
-SIZE (pdns-4.6.2.tar.bz2) = 1302527
+TIMESTAMP = 1657734807
+SHA256 (pdns-4.6.3.tar.bz2) = acd06b89ca01d1adf61b906604614f0e1d77a1e94eeecade8ff5d53a16db7389
+SIZE (pdns-4.6.3.tar.bz2) = 1302651
diff --git a/dns/powerdns/pkg-descr b/dns/powerdns/pkg-descr
index 8650b211c41a..fb6bc821f27e 100644
--- a/dns/powerdns/pkg-descr
+++ b/dns/powerdns/pkg-descr
@@ -1,33 +1,13 @@
-The PowerDNS Authoritative Server is the only solution that enables
-authoritative DNS service from all major databases, including but not limited
-to MySQL, PostgreSQL, SQLite3, LDAP and plain text files.
+The PowerDNS Authoritative Server is a versatile nameserver which supports a
+large number of backends. These backends can either be plain zone files or be
+more dynamic in nature.
 
-DNS answers can also be fully scripted using a variety of (scripting) languages
-such as Lua, Java, Perl, Python, Ruby, C and C++. Such scripting can be used
-for dynamic redirection, (spam) filtering or real time intervention.
+PowerDNS has the concepts of ‘backends’. A backend is a datastore that the
+server will consult that contains DNS records (and some metadata). The backends
+range from database backends (MySQL, PostgreSQL) and BIND zone files to
+co-processes and JSON API’s.
 
-In addition, the PowerDNS Authoritative Server is the leading DNSSEC
-implementation, hosting the majority of all DNSSEC domains worldwide. The
-Authoritative Server hosts at least 30% of all domain names in Europe, and
-around 90% of all DNSSEC domains in Europe.
-
- * IPv4, UDP/TCP
- * IPv6, UDP/TCP, 100% compliant
- * Remotely pollable statistics for real time graphing
- * MySQL, PostgreSQL, Oracle, Sybase, Microsoft SQL Server, LDAP, SQLite3
-   - Including replication
- * Near instant start up time
- * Plain BIND zone files
-   - Brief start up time
- * Migration tools from legacy DNS platforms (zone2sql)
- * Internal Lua-based scripted answer generation
- * External high-performance Script-based answer generation
- * Geographical load balancing
- * Full DNSSEC support including all standardized algorithms
- * TSIG for transaction signatures, AXFR authorization/requests
- * Master/Slave support
- * Built-in web server for statistics and limited direct control
- * API for direct control (pdns_control, pdnssec)
-   - Local and remote access
+Multiple backends can be enabled in the configuration by using the launch
+option. Each backend can be configured separately.
 
 WWW: https://www.powerdns.com/auth.html