wiki/Services-DNS-Configuration.md

# forwarder setup
## BIND

If you already run a local DNS server, you can tell it to query the dn42 anycast servers for the relevant domains
by adding the following to /etc/bind/named.conf.local 

```
zone "dn42" {
  type forward;
  forwarders { 172.22.0.53; };
};
zone "22.172.in-addr.arpa" {
  type forward;
  forwarders { 172.22.0.53; };
};
zone "23.172.in-addr.arpa" {
  type forward;
  forwarders { 172.22.0.53; };
};
```

## dnsmasq

If you are running dnsmasq under openwrt, you just have to add 

```
config dnsmasq
        option boguspriv '0'
        option rebind_protection '1'
        list rebind_domain 'dn42'
        list server '/dn42/172.22.0.53'
        list server '/22.172.in-addr.arpa/172.22.0.53'
        list server '/23.172.in-addr.arpa/172.22.0.53'
```

to `/etc/config/dhcp` and run `/etc/init.d/dnsmasq` restart. After that you are able to resolve `.dn42` 
with the anycast DNS-Server, while your normal requests go to your standard DNS-resolver.

For normal dnsmasq use

```
server=/dn42/172.22.0.53
server=/22.172.in-addr.arpa/172.22.0.53
server=/23.172.in-addr.arpa/172.22.0.53
```
in `dnsmasq.conf`.

## PowerDNS recursor
Add this to /etc/powerdns/recursor.conf (at least in Debian)

```
dont-query=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10
forward-zones= dn42=172.22.0.53,22.172.in-addr.arpa=172.22.0.53,23.172.in-addr.arpa=172.22.0.53
```

## MaraDNS
Put this in your mararc:

```
ipv4_alias["dn42_root"] = "172.22.0.53"
root_servers["dn42."] = "dn42_root"
root_servers["22.172.in-addr.arpa."] = "dn42_root"
root_servers["23.172.in-addr.arpa."] = "dn42_root"
```

## Unbound
unbound.conf for 172.22.0.53

```
server:
        interface: 172.22.0.53@53
        access-control: 0.0.0.0/0 allow
        access-control: ::0/0 allow
        local-zone: "22.172.in-addr.arpa." nodefault
        local-zone: "23.172.in-addr.arpa." nodefault
        local-zone: "d.f.ip6.arpa." nodefault

stub-zone:
        name: "dn42"
        stub-prime: yes
        stub-addr: 172.22.119.139
        stub-addr: 172.22.119.129

stub-zone:
        name: "22.172.in-addr.arpa"
        stub-prime: yes
        stub-addr: 172.22.119.139
        stub-addr: 172.22.119.129

stub-zone:
        name: "23.172.in-addr.arpa"
        stub-prime: yes
        stub-addr: 172.22.119.139
        stub-addr: 172.22.119.129

stub-zone:
        name: "d.f.ip6.arpa"
        stub-prime: yes
        stub-addr: 172.22.119.139
        stub-addr: 172.22.119.129

stub-zone:
        name: "ffhh"
        stub-prime: yes
        stub-addr: 10.112.1.1
        stub-addr: 10.112.14.1

stub-zone:
        name: "ffhl"
        stub-prime: yes
        stub-addr: 10.130.10.1
        stub-addr: 10.130.12.1
        stub-addr: 10.130.14.1

stub-zone:
        name: "ffc"
        stub-prime: yes
        stub-addr: 10.8.6.6

stub-zone:
        name: "rzl"
        stub-prime: yes
        stub-addr: 172.22.36.1
```