DDNS Update to multiple views

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

DDNS Update to multiple views

Sebastian Kricner

Hello,

is it possible to have ISC DHCP Servers update multiple zones at once,
referring to the same zone?

Selection of views is possible with TSIG keys, that is known and not the
problem. I think, that ISC DHCP would just only update once.
Haven´t tried it yet, but it is important on such setups.

Regards

Sebastian Kricner

http://tuxwave.net -- The difference to think makes it real!

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

signature.asc (836 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: DDNS Update to multiple views

Simon Hobson
Sebastian Kricner <[hidden email]> wrote:

> is it possible to have ISC DHCP Servers update multiple zones at once,
> referring to the same zone?
>
> Selection of views is possible with TSIG keys, that is known and not the
> problem. I think, that ISC DHCP would just only update once.
> Haven´t tried it yet, but it is important on such setups.

No, as you say, it'll only do one update - I assume to the default view.

IMO, a lot of what multiple views are used for could be vastly improved by a "this is a partial zone, if a record exists then serve it, otherwise try <some other zone/view/DNS server> and serve any record(s) you get from there" function.

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users
Reply | Threaded
Open this post in threaded view
|

Re: DDNS Update to multiple views

Sebastian Kricner

Hello Simon,

well, i am thinking about the issue, that some setups are still using
IPv4. At least, for example, i am using IPv4 and IPv6, so it is
preferred to put those private IPv4 addresses into a private view.

But the problem is:

I would like to try IPv6 mobility and after having a DDNS setup with
stateful DHCPv6 it would be great to have it update multiple zones.

Example:

On both zones are global unicast addresses for IPv6 and on the private
zone are also private IPv4 addresses.

When also doing dynamic stateful IPv6 configuration the hosts shall send
the suggested hostname to use to the DHCPv6 server. So it would need to
update both zones.

For reverse DHCP i use common zones "in view" statement from ISC BIND,
this would update both views. But as private addresses shall be kept
private, it would need to update both zones.

Another possibility would be, is it possible to have ISC BIND serve one
zone with multiple sources? Then i could do one common zone ("in view"
statement) just for IPv6 addresses and serve both views and having also
IPv4 addresses in private view.

Sebastian Kricner




Simon Hobson, Mon, Jul 20, 2015 03:40:26PM +0100

>Sebastian Kricner <[hidden email]> wrote:
>
>> is it possible to have ISC DHCP Servers update multiple zones at once,
>> referring to the same zone?
>>
>> Selection of views is possible with TSIG keys, that is known and not the
>> problem. I think, that ISC DHCP would just only update once.
>> Haven´t tried it yet, but it is important on such setups.
>
>No, as you say, it'll only do one update - I assume to the default view.
>
>IMO, a lot of what multiple views are used for could be vastly improved by a "this is a partial zone, if a record exists then serve it, otherwise try <some other zone/view/DNS server> and serve any record(s) you get from there" function.
>
>_______________________________________________
>dhcp-users mailing list
>[hidden email]
>https://lists.isc.org/mailman/listinfo/dhcp-users
http://tuxwave.net -- The difference to think makes it real!

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

signature.asc (836 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: DDNS Update to multiple views

Tony Finch
Sebastian Kricner <[hidden email]> wrote:
>
> Another possibility would be, is it possible to have ISC BIND serve one
> zone with multiple sources? Then i could do one common zone ("in view"
> statement) just for IPv6 addresses and serve both views and having also
> IPv4 addresses in private view.

You can't quite do that, but you can use 'nsdiff' to make one zone a
subset of another, provided you can write a regex to match the records
that you want to exclude.

http://dotat.at/prog/nsdiff/

You can use 'nsnotifyd' to automatically run 'nsdiff' whenever a zone
changes.

http://dotat.at/prog/nsnotifyd/

Tony.
--
f.anthony.n.finch  <[hidden email]>  http://dotat.at/
Fisher, German Bight: West 4 or 5, backing southeast 5 or 6, then veering
southwest 4 or 5 later. Slight, becoming moderate. Rain for a time. Good,
becoming poor for a time.
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users
Reply | Threaded
Open this post in threaded view
|

Re: DDNS Update to multiple views

Sebastian Kricner

Hello Tony,

thanks for your information. I will have a look at it.

Regards

Sebastian Kricner



Tony Finch, Mon, Jul 20, 2015 04:21:36PM +0100

>Sebastian Kricner <[hidden email]> wrote:
>>
>> Another possibility would be, is it possible to have ISC BIND serve one
>> zone with multiple sources? Then i could do one common zone ("in view"
>> statement) just for IPv6 addresses and serve both views and having also
>> IPv4 addresses in private view.
>
>You can't quite do that, but you can use 'nsdiff' to make one zone a
>subset of another, provided you can write a regex to match the records
>that you want to exclude.
>
>http://dotat.at/prog/nsdiff/
>
>You can use 'nsnotifyd' to automatically run 'nsdiff' whenever a zone
>changes.
>
>http://dotat.at/prog/nsnotifyd/
>
>Tony.
>--
>f.anthony.n.finch  <[hidden email]>  http://dotat.at/
>Fisher, German Bight: West 4 or 5, backing southeast 5 or 6, then veering
>southwest 4 or 5 later. Slight, becoming moderate. Rain for a time. Good,
>becoming poor for a time.
>_______________________________________________
>dhcp-users mailing list
>[hidden email]
>https://lists.isc.org/mailman/listinfo/dhcp-users
http://tuxwave.net -- The difference to think makes it real!

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

signature.asc (836 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: DDNS Update to multiple viewsO

Sebastian Kricner
In reply to this post by Tony Finch

Hi Tony,

again thanks, the combination of those programs sound good.

Sebastian Kricner



Tony Finch, Mon, Jul 20, 2015 04:21:36PM +0100

>Sebastian Kricner <[hidden email]> wrote:
>>
>> Another possibility would be, is it possible to have ISC BIND serve one
>> zone with multiple sources? Then i could do one common zone ("in view"
>> statement) just for IPv6 addresses and serve both views and having also
>> IPv4 addresses in private view.
>
>You can't quite do that, but you can use 'nsdiff' to make one zone a
>subset of another, provided you can write a regex to match the records
>that you want to exclude.
>
>http://dotat.at/prog/nsdiff/
>
>You can use 'nsnotifyd' to automatically run 'nsdiff' whenever a zone
>changes.
>
>http://dotat.at/prog/nsnotifyd/
>
>Tony.
>--
>f.anthony.n.finch  <[hidden email]>  http://dotat.at/
>Fisher, German Bight: West 4 or 5, backing southeast 5 or 6, then veering
>southwest 4 or 5 later. Slight, becoming moderate. Rain for a time. Good,
>becoming poor for a time.
>_______________________________________________
>dhcp-users mailing list
>[hidden email]
>https://lists.isc.org/mailman/listinfo/dhcp-users
http://tuxwave.net -- The difference to think makes it real!

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

signature.asc (836 bytes) Download Attachment