services/dns/Configuration.md
... ...
@@ -2,6 +2,15 @@
2 2
3 3
Configuration of common resolver softwares to forward DNS queries for `.dn42` (and reverse DNS) IPv4 and IPv6 anycast services.
4 4
5
+You can use any *.delegation-servers.dn42 (where * is a letter) for resolving .dn42 domains. The current list is:
6
+
7
+* b.delegation-servers.dn42 fd42:4242:2601:ac53::1, 172.20.129.1
8
+* j.delegation-servers.dn42 fd42:5d71:219:1:a526:d935:281e:22d6, 172.20.1.254
9
+
10
+The most up-to-date information is available at the [DN42 registry](https://git.dn42.us/dn42/registry/src/master/data/dns/delegation-servers.dn42)
11
+
12
+All the examples here list 172.20.129.1, but you can use any other *.delegation-servers.dn42
13
+
5 14
## BIND
6 15
7 16
If you already run a local DNS server, you can tell it to query the dn42 anycast servers for the relevant domains
... ...
@@ -10,19 +19,19 @@ by adding the following to /etc/bind/named.conf.local
10 19
```
11 20
zone "dn42" {
12 21
type forward;
13
- forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
22
+ forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
14 23
};
15 24
zone "20.172.in-addr.arpa" {
16 25
type forward;
17
- forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
26
+ forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
18 27
};
19 28
zone "22.172.in-addr.arpa" {
20 29
type forward;
21
- forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
30
+ forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
22 31
};
23 32
zone "23.172.in-addr.arpa" {
24 33
type forward;
25
- forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
34
+ forwarders { 172.20.129.1; fd42:4242:2601:ac53::1; };
26 35
};
27 36
```
28 37
... ...
@@ -37,12 +46,12 @@ config dnsmasq
37 46
option boguspriv '0'
38 47
option rebind_protection '1'
39 48
list rebind_domain 'dn42'
40
- list server '/dn42/172.20.0.53'
41
- list server '/20.172.in-addr.arpa/172.20.0.53'
42
- list server '/21.172.in-addr.arpa/172.20.0.53'
43
- list server '/22.172.in-addr.arpa/172.20.0.53'
44
- list server '/23.172.in-addr.arpa/172.20.0.53'
45
- list server '/d.f.ip6.arpa/fd42:d42:d42:54::1'
49
+ list server '/dn42/172.20.129.1'
50
+ list server '/20.172.in-addr.arpa/172.20.129.1'
51
+ list server '/21.172.in-addr.arpa/172.20.129.1'
52
+ list server '/22.172.in-addr.arpa/172.20.129.1'
53
+ list server '/23.172.in-addr.arpa/172.20.129.1'
54
+ list server '/d.f.ip6.arpa/fd42:4242:2601:ac53::1'
46 55
47 56
```
48 57
... ...
@@ -54,12 +63,12 @@ Attention: If you go with the default config you'll have to disable "boguspriv"
54 63
For normal dnsmasq use
55 64
56 65
```
57
-server=/dn42/172.20.0.53
58
-server=/20.172.in-addr.arpa/172.20.0.53
59
-server=/21.172.in-addr.arpa/172.20.0.53
60
-server=/22.172.in-addr.arpa/172.20.0.53
61
-server=/23.172.in-addr.arpa/172.20.0.53
62
-server=/d.f.ip6.arpa/fd42:d42:d42:54::1
66
+server=/dn42/172.20.129.1
67
+server=/20.172.in-addr.arpa/172.20.129.1
68
+server=/21.172.in-addr.arpa/172.20.129.1
69
+server=/22.172.in-addr.arpa/172.20.129.1
70
+server=/23.172.in-addr.arpa/172.20.129.1
71
+server=/d.f.ip6.arpa/fd42:4242:2601:ac53::1
63 72
```
64 73
in `dnsmasq.conf`.
65 74
... ...
@@ -68,14 +77,14 @@ Add this to /etc/powerdns/recursor.conf (at least in Debian and CentOS), the **f
68 77
69 78
```
70 79
dont-query=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10
71
-forward-zones-recurse=dn42=172.20.0.53,hack=172.20.0.53,ffhh=172.20.0.53,ffac=172.20.0.53,020=172.20.0.53,adm=172.20.0.53,ffa=172.20.0.53,ffhb=172.20.0.53,ffc=172.20.0.53,ffda=172.20.0.53,ffdh=172.20.0.53,ff3l=172.20.0.53,fffl=172.20.0.53,ffffm=172.20.0.53,fffr=172.20.0.53,fffd=172.20.0.53,ffgl=172.20.0.53,fflln=172.20.0.53,ffbcd=172.20.0.53,ffbgl=172.20.0.53,ffgoe=172.20.0.53,ffgt=172.20.0.53,ffh=172.20.0.53,helgo=172.20.0.53,ffhef=172.20.0.53,ffj=172.20.0.53,ffka=172.20.0.53,ffki=172.20.0.53,ffhl=172.20.0.53,fflux=172.20.0.53,ffms=172.20.0.53,mueritz=172.20.0.53,ffnord=172.20.0.53,ffnw=172.20.0.53,ffoh=172.20.0.53,ffpb=172.20.0.53,ffpi=172.20.0.53,ffrade=172.20.0.53,ffrgb=172.20.0.53,ffrg=172.20.0.53,rzl=172.20.0.53,ffsaar=172.20.0.53,fftr=172.20.0.53,fftdf=172.20.0.53,ffwk=172.20.0.53,ffgro=172.20.0.53,ffwk=172.20.0.53,ffwp=172.20.0.53,ffw=172.20.0.53,20.172.in-addr.arpa=172.20.0.53,22.172.in-addr.arpa=172.20.0.53,23.172.in-addr.arpa=172.20.0.53,31.172.in-addr.arpa=172.20.0.53,c.f.ip6.arpa=172.20.0.53
80
+forward-zones-recurse=dn42=172.20.129.1,hack=172.20.129.1,ffhh=172.20.129.1,ffac=172.20.129.1,020=172.20.129.1,adm=172.20.129.1,ffa=172.20.129.1,ffhb=172.20.129.1,ffc=172.20.129.1,ffda=172.20.129.1,ffdh=172.20.129.1,ff3l=172.20.129.1,fffl=172.20.129.1,ffffm=172.20.129.1,fffr=172.20.129.1,fffd=172.20.129.1,ffgl=172.20.129.1,fflln=172.20.129.1,ffbcd=172.20.129.1,ffbgl=172.20.129.1,ffgoe=172.20.129.1,ffgt=172.20.129.1,ffh=172.20.129.1,helgo=172.20.129.1,ffhef=172.20.129.1,ffj=172.20.129.1,ffka=172.20.129.1,ffki=172.20.129.1,ffhl=172.20.129.1,fflux=172.20.129.1,ffms=172.20.129.1,mueritz=172.20.129.1,ffnord=172.20.129.1,ffnw=172.20.129.1,ffoh=172.20.129.1,ffpb=172.20.129.1,ffpi=172.20.129.1,ffrade=172.20.129.1,ffrgb=172.20.129.1,ffrg=172.20.129.1,rzl=172.20.129.1,ffsaar=172.20.129.1,fftr=172.20.129.1,fftdf=172.20.129.1,ffwk=172.20.129.1,ffgro=172.20.129.1,ffwk=172.20.129.1,ffwp=172.20.129.1,ffw=172.20.129.1,20.172.in-addr.arpa=172.20.129.1,22.172.in-addr.arpa=172.20.129.1,23.172.in-addr.arpa=172.20.129.1,31.172.in-addr.arpa=172.20.129.1,c.f.ip6.arpa=172.20.129.1
72 81
```
73 82
74 83
## MaraDNS
75 84
Put this in your mararc:
76 85
77 86
```
78
-ipv4_alias["dn42_root"] = "172.20.0.53"
87
+ipv4_alias["dn42_root"] = "172.20.129.1"
79 88
root_servers["dn42."] = "dn42_root"
80 89
root_servers["20.172.in-addr.arpa."] = "dn42_root"
81 90
root_servers["22.172.in-addr.arpa."] = "dn42_root"
... ...
@@ -102,33 +111,33 @@ server:
102 111
103 112
forward-zone:
104 113
name: "dn42"
105
- forward-addr: fd42:d42:d42:54::1
106
- forward-addr: 172.20.0.53
114
+ forward-addr: fd42:4242:2601:ac53::1
115
+ forward-addr: 172.20.129.1
107 116
108 117
forward-zone:
109 118
name: "20.172.in-addr.arpa"
110
- forward-addr: fd42:d42:d42:54::1
111
- forward-addr: 172.20.0.53
119
+ forward-addr: fd42:4242:2601:ac53::1
120
+ forward-addr: 172.20.129.1
112 121
113 122
forward-zone:
114 123
name: "21.172.in-addr.arpa"
115
- forward-addr: fd42:d42:d42:54::1
116
- forward-addr: 172.20.0.53
124
+ forward-addr: fd42:4242:2601:ac53::1
125
+ forward-addr: 172.20.129.1
117 126
118 127
forward-zone:
119 128
name: "22.172.in-addr.arpa"
120
- forward-addr: fd42:d42:d42:54::1
121
- forward-addr: 172.20.0.53
129
+ forward-addr: fd42:4242:2601:ac53::1
130
+ forward-addr: 172.20.129.1
122 131
123 132
forward-zone:
124 133
name: "23.172.in-addr.arpa"
125
- forward-addr: fd42:d42:d42:54::1
126
- forward-addr: 172.20.0.53
134
+ forward-addr: fd42:4242:2601:ac53::1
135
+ forward-addr: 172.20.129.1
127 136
128 137
forward-zone:
129 138
name: "d.f.ip6.arpa"
130
- forward-addr: fd42:d42:d42:54::1
131
- forward-addr: 172.20.0.53
139
+ forward-addr: fd42:4242:2601:ac53::1
140
+ forward-addr: 172.20.129.1
132 141
```
133 142
134 143
## JunOS (SRX 12.1X46)
... ...
@@ -147,26 +156,26 @@ system {
147 156
}
148 157
default-domain dn42 {
149 158
forwarders {
150
- 172.20.0.53;
151
- fd42:d42:d42:54::1;
159
+ 172.20.129.1;
160
+ fd42:4242:2601:ac53::1;
152 161
}
153 162
}
154 163
default-domain 20.172.in-addr.arpa {
155 164
forwarders {
156
- 172.20.0.53;
157
- fd42:d42:d42:54::1;
165
+ 172.20.129.1;
166
+ fd42:4242:2601:ac53::1;
158 167
}
159 168
}
160 169
default-domain 22.172.in-addr.arpa {
161 170
forwarders {
162
- 172.20.0.53;
163
- fd42:d42:d42:54::1;
171
+ 172.20.129.1;
172
+ fd42:4242:2601:ac53::1;
164 173
}
165 174
}
166 175
default-domain 23.172.in-addr.arpa {
167 176
forwarders {
168
- 172.20.0.53;
169
- fd42:d42:d42:54::1;
177
+ 172.20.129.1;
178
+ fd42:4242:2601:ac53::1;
170 179
}
171 180
}
172 181
}
... ...
@@ -176,4 +185,4 @@ system {
176 185
```
177 186
178 187
## MS DNS
179
-Add a "Conditional Forward" (de: "Bedingte Weiterleitung") for each of "dn42", "20.172.in-addr.arpa", "22.172.in-addr.arpa", "23.172.in-addr.arpa" using 172.20.0.53 as forwarder. Ignore the error message that the server is not authoritative.
... ...
\ No newline at end of file
0
+Add a "Conditional Forward" (de: "Bedingte Weiterleitung") for each of "dn42", "20.172.in-addr.arpa", "22.172.in-addr.arpa", "23.172.in-addr.arpa" using 172.20.129.1 as forwarder. Ignore the error message that the server is not authoritative.
... ...
\ No newline at end of file