Attention! Current pages describe cbsd version 10.0.3. If you are using an older version, please update first.
Attention! I'm apologize, but it is automatic machine translation of the text. You can improve it if will send to me more correct version of the text or fix html pages via GITHUB repository.
Dynamic DNS for jail
ddns command
% cbsd ddns
Description:
Carries out registration of the records DNS in the corresponding zones relating to a jail. For its correct work correctly adjusted DNS server and a key is necessary for zone updating. As zones interested in updating at start and a stop of a jails can be a little, it is possible to list them in rc.conf of jails. When parameters ddns_zone_list not empty, at performance jstart и jstop, command
cbsd ddns mode=add jname=xxx
and
cbsd ddns mode=delete jname=xxx
are carried out automatically. Argument mode means carried-out action with record — can be add or delete.
The minimum configuration in jail rc.conf:
ddns_zone_list="";
should have the list of names of configurations for zones. One record for one zone. In a name there should not be points.
ddns_key_name_of_zone="";
The parameter contains a way to the file of a private key of a zone name_of_zone, listed in ddns_zone_list.
ddns_zones_name_of_zone="";
contains the list of those records which should be updated in the corresponding zone.
Example:
configuration for updating of two zones: my.domain and bsdstore.ru and addition or removal jJail IP addresses under the records test1.my.domain + test2.my.domain and relay.bsdstore.ru:
ddns_zone_list="my_domain bsdstore";
ddns_key_my_domain="/usr/jails/etc/zonekeys/Kmy.domain.+157+52142.private";
ddns_key_bsdstore="/usr/jails/etc/zonekeys/Kbsdstore.+157+52142.private";
ddns_zones_my_domain="jail1.my.domain jail1.my.domain";
ddns_zones_bsdstore="relay.bsdstore.ru";
Configuration for DNS with named:
key bsdstore.ru. {algorithm "HMAC-MD5";secret "YrVW9yP6gNMA7VbcU/r2mSIwYnFj/XkCDd6QuqOHE26/ipnrPy+eXrKrUyaFhB2XWNdVLUX7QCUkfhg4zN5YiA==";};
zone "bsdstore.ru" {type master;file "/etc/namedb/dynamic/bsdstore.ru";allow-update {key bsdstore.ru; };};
key and private key generated by:
dnssec-keygen -b 512 -a HMAC-MD5 -v 2 -n HOST bsdstore.ru.