services/dns/Configuration.md
... ...
@@ -2,14 +2,11 @@
2 2
3 3
Configuration of common resolver softwares to forward DNS queries for `.dn42` (and reverse DNS) IPv4 and IPv6 anycast services.
4 4
5
-You can use any *.delegation-servers.dn42 (where * is a letter) for resolving .dn42 domains. The current list is:
5
+You can use any *.recursive-servers.dn42 (where * is a letter) for resolving .dn42 domains. The current list is available at the [DN42 registry](https://git.dn42.us/dn42/registry/src/master/data/dns/recursive-servers.dn42). To ease the resolving, an anycast server is provided to the whole network:
6 6
7
-* b.delegation-servers.dn42 fd42:4242:2601:ac53::1, 172.20.129.1
8
-* j.delegation-servers.dn42 fd42:5d71:219:1:a526:d935:281e:22d6, 172.20.1.254
7
+* a.recursive-servers.dn42 172.20.0.53, fd42:d42:d42:54::1
9 8
10
-The most up-to-date information is available at the [DN42 registry](https://git.dn42.us/dn42/registry/src/master/data/dns/delegation-servers.dn42)
11
-
12
-All the examples here list 172.20.129.1, but you can use any other *.delegation-servers.dn42
9
+All the examples here list 172.20.0.53, but you can use any other *.recursive-servers.dn42
13 10
14 11
## BIND
15 12
... ...
@@ -19,19 +16,19 @@ by adding the following to /etc/bind/named.conf.local
19 16
```
20 17
zone "dn42" {
21 18
type forward;
22
- forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
19
+ forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
23 20
};
24 21
zone "20.172.in-addr.arpa" {
25 22
type forward;
26
- forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
23
+ forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
27 24
};
28 25
zone "22.172.in-addr.arpa" {
29 26
type forward;
30
- forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
27
+ forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
31 28
};
32 29
zone "23.172.in-addr.arpa" {
33 30
type forward;
34
- forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
31
+ forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
35 32
};
36 33
```
37 34
... ...
@@ -46,12 +43,12 @@ config dnsmasq
46 43
option boguspriv '0'
47 44
option rebind_protection '1'
48 45
list rebind_domain 'dn42'
49
- list server '/dn42/172.20.129.1'
50
- list server '/20.172.in-addr.arpa/172.20.129.1'
51
- list server '/21.172.in-addr.arpa/172.20.129.1'
52
- list server '/22.172.in-addr.arpa/172.20.129.1'
53
- list server '/23.172.in-addr.arpa/172.20.129.1'
54
- list server '/d.f.ip6.arpa/fd42:4242:2601:ac53::1'
46
+ list server '/dn42/172.20.0.53'
47
+ list server '/20.172.in-addr.arpa/172.20.0.53'
48
+ list server '/21.172.in-addr.arpa/172.20.0.53'
49
+ list server '/22.172.in-addr.arpa/172.20.0.53'
50
+ list server '/23.172.in-addr.arpa/172.20.0.53'
51
+ list server '/d.f.ip6.arpa/fd42:d42:d42:54::1'
55 52
56 53
```
57 54
... ...
@@ -63,12 +60,12 @@ Attention: If you go with the default config you'll have to disable "boguspriv"
63 60
For normal dnsmasq use
64 61
65 62
```
66
-server=/dn42/172.20.129.1
67
-server=/20.172.in-addr.arpa/172.20.129.1
68
-server=/21.172.in-addr.arpa/172.20.129.1
69
-server=/22.172.in-addr.arpa/172.20.129.1
70
-server=/23.172.in-addr.arpa/172.20.129.1
71
-server=/d.f.ip6.arpa/fd42:4242:2601:ac53::1
63
+server=/dn42/172.20.0.53
64
+server=/20.172.in-addr.arpa/172.20.0.53
65
+server=/21.172.in-addr.arpa/172.20.0.53
66
+server=/22.172.in-addr.arpa/172.20.0.53
67
+server=/23.172.in-addr.arpa/172.20.0.53
68
+server=/d.f.ip6.arpa/fd42:d42:d42:54::1
72 69
```
73 70
in `dnsmasq.conf`.
74 71
... ...
@@ -77,14 +74,14 @@ Add this to /etc/powerdns/recursor.conf (at least in Debian and CentOS), the **f
77 74
78 75
```
79 76
dont-query=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10
80
-forward-zones-recurse=dn42=172.20.129.1,hack=172.20.129.1,ffhh=172.20.129.1,ffac=172.20.129.1,020=172.20.129.1,adm=172.20.129.1,ffa=172.20.129.1,ffhb=172.20.129.1,ffc=172.20.129.1,ffda=172.20.129.1,ffdh=172.20.129.1,ff3l=172.20.129.1,fffl=172.20.129.1,ffffm=172.20.129.1,fffr=172.20.129.1,fffd=172.20.129.1,ffgl=172.20.129.1,fflln=172.20.129.1,ffbcd=172.20.129.1,ffbgl=172.20.129.1,ffgoe=172.20.129.1,ffgt=172.20.129.1,ffh=172.20.129.1,helgo=172.20.129.1,ffhef=172.20.129.1,ffj=172.20.129.1,ffka=172.20.129.1,ffki=172.20.129.1,ffhl=172.20.129.1,fflux=172.20.129.1,ffms=172.20.129.1,mueritz=172.20.129.1,ffnord=172.20.129.1,ffnw=172.20.129.1,ffoh=172.20.129.1,ffpb=172.20.129.1,ffpi=172.20.129.1,ffrade=172.20.129.1,ffrgb=172.20.129.1,ffrg=172.20.129.1,rzl=172.20.129.1,ffsaar=172.20.129.1,fftr=172.20.129.1,fftdf=172.20.129.1,ffwk=172.20.129.1,ffgro=172.20.129.1,ffwk=172.20.129.1,ffwp=172.20.129.1,ffw=172.20.129.1,20.172.in-addr.arpa=172.20.129.1,22.172.in-addr.arpa=172.20.129.1,23.172.in-addr.arpa=172.20.129.1,31.172.in-addr.arpa=172.20.129.1,c.f.ip6.arpa=172.20.129.1
77
+forward-zones-recurse=dn42=172.20.0.53,hack=172.20.0.53,ffhh=172.20.0.53,ffac=172.20.0.53,020=172.20.0.53,adm=172.20.0.53,ffa=172.20.0.53,ffhb=172.20.0.53,ffc=172.20.0.53,ffda=172.20.0.53,ffdh=172.20.0.53,ff3l=172.20.0.53,fffl=172.20.0.53,ffffm=172.20.0.53,fffr=172.20.0.53,fffd=172.20.0.53,ffgl=172.20.0.53,fflln=172.20.0.53,ffbcd=172.20.0.53,ffbgl=172.20.0.53,ffgoe=172.20.0.53,ffgt=172.20.0.53,ffh=172.20.0.53,helgo=172.20.0.53,ffhef=172.20.0.53,ffj=172.20.0.53,ffka=172.20.0.53,ffki=172.20.0.53,ffhl=172.20.0.53,fflux=172.20.0.53,ffms=172.20.0.53,mueritz=172.20.0.53,ffnord=172.20.0.53,ffnw=172.20.0.53,ffoh=172.20.0.53,ffpb=172.20.0.53,ffpi=172.20.0.53,ffrade=172.20.0.53,ffrgb=172.20.0.53,ffrg=172.20.0.53,rzl=172.20.0.53,ffsaar=172.20.0.53,fftr=172.20.0.53,fftdf=172.20.0.53,ffwk=172.20.0.53,ffgro=172.20.0.53,ffwk=172.20.0.53,ffwp=172.20.0.53,ffw=172.20.0.53,20.172.in-addr.arpa=172.20.0.53,22.172.in-addr.arpa=172.20.0.53,23.172.in-addr.arpa=172.20.0.53,31.172.in-addr.arpa=172.20.0.53,c.f.ip6.arpa=172.20.0.53
81 78
```
82 79
83 80
## MaraDNS
84 81
Put this in your mararc:
85 82
86 83
```
87
-ipv4_alias["dn42_root"] = "172.20.129.1"
84
+ipv4_alias["dn42_root"] = "172.20.0.53"
88 85
root_servers["dn42."] = "dn42_root"
89 86
root_servers["20.172.in-addr.arpa."] = "dn42_root"
90 87
root_servers["22.172.in-addr.arpa."] = "dn42_root"
... ...
@@ -111,33 +108,33 @@ server:
111 108
112 109
forward-zone:
113 110
name: "dn42"
114
- forward-addr: fd42:4242:2601:ac53::1
115
- forward-addr: 172.20.129.1
111
+ forward-addr: fd42:d42:d42:54::1
112
+ forward-addr: 172.20.0.53
116 113
117 114
forward-zone:
118 115
name: "20.172.in-addr.arpa"
119
- forward-addr: fd42:4242:2601:ac53::1
120
- forward-addr: 172.20.129.1
116
+ forward-addr: fd42:d42:d42:54::1
117
+ forward-addr: 172.20.0.53
121 118
122 119
forward-zone:
123 120
name: "21.172.in-addr.arpa"
124
- forward-addr: fd42:4242:2601:ac53::1
125
- forward-addr: 172.20.129.1
121
+ forward-addr: fd42:d42:d42:54::1
122
+ forward-addr: 172.20.0.53
126 123
127 124
forward-zone:
128 125
name: "22.172.in-addr.arpa"
129
- forward-addr: fd42:4242:2601:ac53::1
130
- forward-addr: 172.20.129.1
126
+ forward-addr: fd42:d42:d42:54::1
127
+ forward-addr: 172.20.0.53
131 128
132 129
forward-zone:
133 130
name: "23.172.in-addr.arpa"
134
- forward-addr: fd42:4242:2601:ac53::1
135
- forward-addr: 172.20.129.1
131
+ forward-addr: fd42:d42:d42:54::1
132
+ forward-addr: 172.20.0.53
136 133
137 134
forward-zone:
138 135
name: "d.f.ip6.arpa"
139
- forward-addr: fd42:4242:2601:ac53::1
140
- forward-addr: 172.20.129.1
136
+ forward-addr: fd42:d42:d42:54::1
137
+ forward-addr: 172.20.0.53
141 138
```
142 139
143 140
## JunOS (SRX 12.1X46)
... ...
@@ -156,26 +153,26 @@ system {
156 153
}
157 154
default-domain dn42 {
158 155
forwarders {
159
- 172.20.129.1;
160
- fd42:4242:2601:ac53::1;
156
+ 172.20.0.53;
157
+ fd42:d42:d42:54::1;
161 158
}
162 159
}
163 160
default-domain 20.172.in-addr.arpa {
164 161
forwarders {
165
- 172.20.129.1;
166
- fd42:4242:2601:ac53::1;
162
+ 172.20.0.53;
163
+ fd42:d42:d42:54::1;
167 164
}
168 165
}
169 166
default-domain 22.172.in-addr.arpa {
170 167
forwarders {
171
- 172.20.129.1;
172
- fd42:4242:2601:ac53::1;
168
+ 172.20.0.53;
169
+ fd42:d42:d42:54::1;
173 170
}
174 171
}
175 172
default-domain 23.172.in-addr.arpa {
176 173
forwarders {
177
- 172.20.129.1;
178
- fd42:4242:2601:ac53::1;
174
+ 172.20.0.53;
175
+ fd42:d42:d42:54::1;
179 176
}
180 177
}
181 178
}
... ...
@@ -185,4 +182,4 @@ system {
185 182
```
186 183
187 184
## MS DNS
188
-Add a "Conditional Forward" (de: "Bedingte Weiterleitung") for each of "dn42", "20.172.in-addr.arpa", "22.172.in-addr.arpa", "23.172.in-addr.arpa" using 172.20.129.1 as forwarder. Ignore the error message that the server is not authoritative.
... ...
\ No newline at end of file
0
+Add a "Conditional Forward" (de: "Bedingte Weiterleitung") for each of "dn42", "20.172.in-addr.arpa", "22.172.in-addr.arpa", "23.172.in-addr.arpa" using 172.20.0.53 as forwarder. Ignore the error message that the server is not authoritative.
... ...
\ No newline at end of file