2012-07-18 19:41:26 +02:00
|
|
|
# forwarder setup
|
|
|
|
## BIND
|
|
|
|
|
|
|
|
If you already run a local DNS server, you can tell it to query the dn42 anycast servers for the relevant domains
|
|
|
|
by adding the following to /etc/bind/named.conf.local
|
|
|
|
|
|
|
|
```
|
|
|
|
zone "dn42" {
|
|
|
|
type forward;
|
|
|
|
forwarders { 172.22.0.53; };
|
|
|
|
};
|
|
|
|
zone "22.172.in-addr.arpa" {
|
|
|
|
type forward;
|
|
|
|
forwarders { 172.22.0.53; };
|
|
|
|
};
|
|
|
|
zone "23.172.in-addr.arpa" {
|
|
|
|
type forward;
|
|
|
|
forwarders { 172.22.0.53; };
|
|
|
|
};
|
|
|
|
```
|
|
|
|
|
|
|
|
## dnsmasq
|
|
|
|
|
|
|
|
If you are running dnsmasq under openwrt, you just have to add
|
|
|
|
|
|
|
|
```
|
|
|
|
config dnsmasq
|
|
|
|
option local '/dn42/22.172.in-addr.arpa/172.22.0.53'
|
|
|
|
```
|
|
|
|
|
|
|
|
to /etc/config/dhcp and run /etc/init.d/dnsmasq restart. After that you are able to resolve .dn42
|
|
|
|
with the anycast DNS-Server, while your normal requests go to your standard DNS-resolver.
|
|
|
|
|
|
|
|
for normal dnsmasq use
|
|
|
|
|
|
|
|
```
|
|
|
|
server=/dn42/172.22.0.53
|
|
|
|
server=/22.172.in-addr.arpa/172.22.0.53
|
|
|
|
```
|
|
|
|
in dnsmasq.conf
|
|
|
|
|
|
|
|
## PowerDNS recursor
|
|
|
|
Add this to /etc/powerdns/recursor.conf (at least in Debian)
|
|
|
|
|
|
|
|
```
|
|
|
|
dont-query=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10
|
|
|
|
forward-zones= dn42=172.22.0.53,22.172.in-addr.arpa=172.22.0.53,23.172.in-addr.arpa=172.22.0.53
|
|
|
|
```
|
|
|
|
|
|
|
|
## MaraDNS
|
|
|
|
Put this in your mararc:
|
|
|
|
|
|
|
|
```
|
|
|
|
ipv4_alias["dn42_root"] = "172.22.0.53"
|
|
|
|
root_servers["dn42."] = "dn42_root"
|
|
|
|
root_servers["22.172.in-addr.arpa."] = "dn42_root"
|
|
|
|
root_servers["23.172.in-addr.arpa."] = "dn42_root"
|
2013-05-21 22:30:26 +02:00
|
|
|
```
|
|
|
|
|
|
|
|
## Unbound
|
|
|
|
unbound.conf for 172.22.0.53
|
|
|
|
|
|
|
|
```
|
|
|
|
server:
|
|
|
|
interface: 172.22.0.53@53
|
|
|
|
access-control: 0.0.0.0/0 allow
|
|
|
|
access-control: ::0/0 allow
|
|
|
|
local-zone: "22.172.in-addr.arpa." nodefault
|
|
|
|
local-zone: "23.172.in-addr.arpa." nodefault
|
2013-05-25 01:48:30 +02:00
|
|
|
local-zone: "d.f.ip6.arpa." nodefault
|
2013-05-21 22:30:26 +02:00
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "dn42"
|
2013-05-25 01:48:30 +02:00
|
|
|
stub-prime: yes
|
2013-05-21 22:30:26 +02:00
|
|
|
stub-addr: 172.22.119.139
|
|
|
|
stub-addr: 172.22.119.129
|
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "22.172.in-addr.arpa"
|
2013-05-25 01:48:30 +02:00
|
|
|
stub-prime: yes
|
2013-05-21 22:30:26 +02:00
|
|
|
stub-addr: 172.22.119.139
|
|
|
|
stub-addr: 172.22.119.129
|
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "23.172.in-addr.arpa"
|
2013-05-25 01:48:30 +02:00
|
|
|
stub-prime: yes
|
2013-05-21 22:30:26 +02:00
|
|
|
stub-addr: 172.22.119.139
|
|
|
|
stub-addr: 172.22.119.129
|
2013-05-24 21:43:03 +02:00
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "d.f.ip6.arpa"
|
2013-05-25 01:48:30 +02:00
|
|
|
stub-prime: yes
|
2013-05-24 21:43:03 +02:00
|
|
|
stub-addr: 172.22.119.139
|
|
|
|
stub-addr: 172.22.119.129
|
2013-10-29 23:03:50 +01:00
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "ffhh"
|
|
|
|
stub-prime: yes
|
|
|
|
stub-addr: 10.112.1.1
|
|
|
|
stub-addr: 10.112.14.1
|
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "ffhl"
|
|
|
|
stub-prime: yes
|
|
|
|
stub-addr: 10.130.10.1
|
|
|
|
stub-addr: 10.130.12.1
|
|
|
|
stub-addr: 10.130.14.1
|
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "ffc"
|
|
|
|
stub-prime: yes
|
|
|
|
stub-addr: 10.8.6.6
|
2013-10-29 23:05:08 +01:00
|
|
|
|
|
|
|
stub-zone:
|
|
|
|
name: "rzl"
|
|
|
|
stub-prime: yes
|
|
|
|
stub-addr: 172.22.36.1
|
2012-07-18 19:41:26 +02:00
|
|
|
```
|