2020-10 upd: we reached the first fundraising goal and rented a server in Hetzner for development! Thank you for donating !
Attention! Current pages describe CBSD version 13.0.x. If you are using an older version, please update first.
Attention! I apologize for the automatic translation of this text. You can improve it by sending me a more correct version of the text or fix html pages via GITHUB repository.
Dynamic DNS for jail
ddns command
% cbsd ddnsDescription:
Carries out registration of the records DNS in the corresponding zones relating to a jail. For its correct work correctly adjusted DNS server and a key is necessary for zone updating. As zones interested in updating at start and a stop of a jails can be a little, it is possible to list them in rc.conf of jails. When parameters ddns_zone_list not empty, at performance jstart и jstop, command
cbsd ddns mode=add jname=xxx
and
cbsd ddns mode=delete jname=xxx
are carried out automatically. Argument mode means carried-out action with record — can be add or delete.
The minimum configuration in jail rc.conf:
ddns_zone_list="";
should have the list of names of configurations for zones. One record for one zone. In a name there should not be points.
ddns_key_name_of_zone="";
The parameter contains a way to the file of a private key of a zone name_of_zone, listed in ddns_zone_list.
ddns_zones_name_of_zone="";
contains the list of those records which should be updated in the corresponding zone.
Example:
configuration for updating of two zones: my.domain and bsdstore.ru and addition or removal jJail IP addresses under the records test1.my.domain + test2.my.domain and relay.bsdstore.ru:
ddns_zone_list="my_domain bsdstore"; ddns_key_my_domain="/usr/jails/etc/zonekeys/Kmy.domain.+157+52142.private"; ddns_key_bsdstore="/usr/jails/etc/zonekeys/Kbsdstore.+157+52142.private"; ddns_zones_my_domain="jail1.my.domain jail1.my.domain"; ddns_zones_bsdstore="relay.bsdstore.ru";
Configuration for DNS with named:
key bsdstore.ru. {algorithm "HMAC-MD5";secret "YrVW9yP6gNMA7VbcU/r2mSIwYnFj/XkCDd6QuqOHE26/ipnrPy+eXrKrUyaFhB2XWNdVLUX7QCUkfhg4zN5YiA==";}; zone "bsdstore.ru" {type master;file "/etc/namedb/dynamic/bsdstore.ru";allow-update {key bsdstore.ru; };};
key and private key generated by:
dnssec-keygen -b 512 -a HMAC-MD5 -v 2 -n HOST bsdstore.ru.