1 |
On Sunday, October 11, 2015 02:48:23 PM Alan McKinnon wrote: |
2 |
> On 11/10/2015 11:33, J. Roeleveld wrote: |
3 |
> > On Sunday, October 11, 2015 10:43:01 AM Alan McKinnon wrote: |
4 |
> >> On 11/10/2015 10:18, J. Roeleveld wrote: |
5 |
> >>> On Sunday, October 11, 2015 09:35:39 AM Alan McKinnon wrote: |
6 |
> >>>> On 11/10/2015 04:13, James wrote: |
7 |
> >>>>> Howdy, |
8 |
> >>>>> |
9 |
> >>>>> So I now have (5) statics and a fiber feed, with lots of room to grow. |
10 |
> >>>>> |
11 |
> >>>>> I need to setup DNS primary/secondary systems on gentoo. So right now |
12 |
> >>>>> I'm |
13 |
> >>>>> looking for a suggested list of packages to install with Bind, |
14 |
> >>>>> iptables |
15 |
> >>>>> and |
16 |
> >>>>> DNSSEC-tools as these (2) gentoo dns servers will only run the minimum |
17 |
> >>>>> packages to operate securely? |
18 |
> >>>> |
19 |
> >>>> auth or cache? |
20 |
> >>>> |
21 |
> >>>> First of all, bind is a pain to use. Reason: it's actually a reference |
22 |
> >>>> implementation that as usual got forced into production use. It's |
23 |
> >>>> slower |
24 |
> >>>> than it could be because it deals with every possible corner case per |
25 |
> >>>> RFC. |
26 |
> >>>> |
27 |
> >>>> As an auth server (few queries) it's OK |
28 |
> >>>> As a cache (many queries), there are better servers out there. I prefer |
29 |
> >>>> unbound. |
30 |
> >>> |
31 |
> >>> As it is related to this thread, which server would people recommend |
32 |
> >>> when |
33 |
> >>> the DNS records are to be found in a database? |
34 |
> >>> Reason I am asking: |
35 |
> >>> I want to set up a lab environment with VMs coming and going. |
36 |
> >>> These all need to have hostname/mac/ip stored and configured correctly. |
37 |
> >> |
38 |
> >> I don't understand. |
39 |
> > |
40 |
> > <snipped part about ARP tables> |
41 |
> > |
42 |
> >> Perhaps detail more what you are trying to accomplish? |
43 |
> > |
44 |
> > What I do currently: |
45 |
> > |
46 |
> > Edit Bind zone-files and enter IP / Hostname combinations |
47 |
> > Edit DHCP config file and enter MAC / IP / Hostname combinations |
48 |
> > (And hope these actually match and not contain typos) |
49 |
> > |
50 |
> > What I want to do: |
51 |
> > |
52 |
> > In a database I have a table with the following fields: |
53 |
> > MAC, IP, Hostname, domain |
54 |
> > xx:xx:xx:xx:xx , 1.2.3.4 , vmobi1114node1 , vm1.lab.example.com |
55 |
> > |
56 |
> > I want the DNS server to use the IP, Hostname and domain fields for the |
57 |
> > resolving. |
58 |
> > I want the DHCP server to use all the fields for the DHCP assignments. |
59 |
> |
60 |
> OK, that makes sense. You'd think all decent DNS and DHCP servers out |
61 |
> there would support any old arb db backend (very useful, no?) but it |
62 |
> seems not. I've gotten used to independently vi'ing two files and |
63 |
> HUP/reload two daemons over the years :-) |
64 |
|
65 |
Same here. Works for the most part, but I'm not the only one using the system. |
66 |
Which means I prefer to have it easier to use and not end up having to do all |
67 |
the work myself. |
68 |
|
69 |
> Bind can use a mysql backend, so can most auth servers. |
70 |
|
71 |
Need to check how difficult/easy it is to make it listen to PostgreSQL. |
72 |
I'm not overly attached to Bind. Having a DNS server that's easier to configure |
73 |
and maintain would be appreciated. |
74 |
|
75 |
> The only dhcp |
76 |
> server easily available on gentoo seems to be dhcp from ISC which does |
77 |
> not support mysql. But both support ldap, maybe you can use that? |
78 |
> There's lots of ldap frontends so getting your info into it should be |
79 |
> easy enough. |
80 |
|
81 |
That's one option, but that would mean maintaining 2 databases. |
82 |
One with the config for the VMs and OpenLDAP. |
83 |
|
84 |
|
85 |
> You could also look into kea (https://www.isc.org/kea/), a better dhcp |
86 |
> server from ISC. The blurb says it supports SQL backends. |
87 |
|
88 |
I'll have a look at that one. |
89 |
|
90 |
-- |
91 |
Joost |