services/dns/Configuration.md
... ...
@@ -18,6 +18,10 @@ Two independent anycast services are also provided:
18 18
All the examples here list 172.20.0.53/fd42:d42:d42:54::1, but users are encouraged to configure
19 19
multiple services from *.recursive-servers.dn42 for redundancy.
20 20
21
+## Note on ICVPN Zones
22
+
23
+DN42 is [interconnected](/internal/Interconnections) with the Inter City VPN or in short "ICVPN". The registry of the ICVPN includes all the DNS information such as the Top level domains (TLDs) used inside ICVPN and the reverse DNS for the IP ranges of the ICVPN. Additionally, it includes the TLDs of other some other networks that are interconnected with dn42 and share some of the IP space of ICVPN. The ICVPN [repository](https://github.com/freifunk/icvpn-meta) includes a handy script to automatically generate all the required zones.
24
+
21 25
## BIND
22 26
23 27
If you already run a local DNS server, you can tell it to query the dn42 anycast servers for the relevant domains
... ...
@@ -44,6 +48,10 @@ zone "23.172.in-addr.arpa" {
44 48
type forward;
45 49
forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
46 50
};
51
+zone "10.in-addr.arpa" {
52
+ type forward;
53
+ forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
54
+};
47 55
zone "d.f.ip6.arpa" {
48 56
type forward;
49 57
forwarders { 172.20.0.53; fd42:d42:d42:54::1; };
... ...
@@ -73,6 +81,7 @@ options {
73 81
"21.172.in-addr.arpa";
74 82
"22.172.in-addr.arpa";
75 83
"23.172.in-addr.arpa";
84
+ "10.in-addr.arpa";
76 85
"d.f.ip6.arpa";
77 86
};
78 87
... ...
@@ -94,6 +103,7 @@ config dnsmasq
94 103
list server '/21.172.in-addr.arpa/172.20.0.53'
95 104
list server '/22.172.in-addr.arpa/172.20.0.53'
96 105
list server '/23.172.in-addr.arpa/172.20.0.53'
106
+ list server '/10.in-addr.arpa/172.20.0.53'
97 107
list server '/d.f.ip6.arpa/fd42:d42:d42:54::1'
98 108
99 109
```
... ...
@@ -111,6 +121,7 @@ server=/20.172.in-addr.arpa/172.20.0.53
111 121
server=/21.172.in-addr.arpa/172.20.0.53
112 122
server=/22.172.in-addr.arpa/172.20.0.53
113 123
server=/23.172.in-addr.arpa/172.20.0.53
124
+server=/10.in-addr.arpa/172.20.0.53
114 125
server=/d.f.ip6.arpa/fd42:d42:d42:54::1
115 126
```
116 127
in `dnsmasq.conf`.
... ...
@@ -119,8 +130,8 @@ in `dnsmasq.conf`.
119 130
Add this to /etc/powerdns/recursor.conf (at least in Debian and CentOS), the **forward-zone-recurse** is _**one line**_.
120 131
121 132
```
122
-dont-query=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10
123
-forward-zones-recurse=dn42=172.20.0.53,hack=172.20.0.53,ffhh=172.20.0.53,ffac=172.20.0.53,020=172.20.0.53,adm=172.20.0.53,ffa=172.20.0.53,ffhb=172.20.0.53,ffc=172.20.0.53,ffda=172.20.0.53,ffdh=172.20.0.53,ff3l=172.20.0.53,fffl=172.20.0.53,ffffm=172.20.0.53,fffr=172.20.0.53,fffd=172.20.0.53,ffgl=172.20.0.53,fflln=172.20.0.53,ffbcd=172.20.0.53,ffbgl=172.20.0.53,ffgoe=172.20.0.53,ffgt=172.20.0.53,ffh=172.20.0.53,helgo=172.20.0.53,ffhef=172.20.0.53,ffj=172.20.0.53,ffka=172.20.0.53,ffki=172.20.0.53,ffhl=172.20.0.53,fflux=172.20.0.53,ffms=172.20.0.53,mueritz=172.20.0.53,ffnord=172.20.0.53,ffnw=172.20.0.53,ffoh=172.20.0.53,ffpb=172.20.0.53,ffpi=172.20.0.53,ffrade=172.20.0.53,ffrgb=172.20.0.53,ffrg=172.20.0.53,rzl=172.20.0.53,ffsaar=172.20.0.53,fftr=172.20.0.53,fftdf=172.20.0.53,ffwk=172.20.0.53,ffgro=172.20.0.53,ffwk=172.20.0.53,ffwp=172.20.0.53,ffw=172.20.0.53,20.172.in-addr.arpa=172.20.0.53,21.172.in-addr.arpa=172.20.0.53,22.172.in-addr.arpa=172.20.0.53,23.172.in-addr.arpa=172.20.0.53,31.172.in-addr.arpa=172.20.0.53,c.f.ip6.arpa=172.20.0.53
133
+dont-query=127.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10
134
+forward-zones-recurse=dn42=172.20.0.53,hack=172.20.0.53,ffhh=172.20.0.53,ffac=172.20.0.53,020=172.20.0.53,adm=172.20.0.53,ffa=172.20.0.53,ffhb=172.20.0.53,ffc=172.20.0.53,ffda=172.20.0.53,ffdh=172.20.0.53,ff3l=172.20.0.53,fffl=172.20.0.53,ffffm=172.20.0.53,fffr=172.20.0.53,fffd=172.20.0.53,ffgl=172.20.0.53,fflln=172.20.0.53,ffbcd=172.20.0.53,ffbgl=172.20.0.53,ffgoe=172.20.0.53,ffgt=172.20.0.53,ffh=172.20.0.53,helgo=172.20.0.53,ffhef=172.20.0.53,ffj=172.20.0.53,ffka=172.20.0.53,ffki=172.20.0.53,ffhl=172.20.0.53,fflux=172.20.0.53,ffms=172.20.0.53,mueritz=172.20.0.53,ffnord=172.20.0.53,ffnw=172.20.0.53,ffoh=172.20.0.53,ffpb=172.20.0.53,ffpi=172.20.0.53,ffrade=172.20.0.53,ffrgb=172.20.0.53,ffrg=172.20.0.53,rzl=172.20.0.53,ffsaar=172.20.0.53,fftr=172.20.0.53,fftdf=172.20.0.53,ffwk=172.20.0.53,ffgro=172.20.0.53,ffwk=172.20.0.53,ffwp=172.20.0.53,ffw=172.20.0.53,20.172.in-addr.arpa=172.20.0.53,21.172.in-addr.arpa=172.20.0.53,22.172.in-addr.arpa=172.20.0.53,23.172.in-addr.arpa=172.20.0.53,31.172.in-addr.arpa=172.20.0.53,10.in-addr.arpa=172.20.0.53,c.f.ip6.arpa=172.20.0.53
124 135
```
125 136
126 137
## MaraDNS
... ...
@@ -133,6 +144,7 @@ root_servers["20.172.in-addr.arpa."] = "dn42_root"
133 144
root_servers["21.172.in-addr.arpa."] = "dn42_root"
134 145
root_servers["22.172.in-addr.arpa."] = "dn42_root"
135 146
root_servers["23.172.in-addr.arpa."] = "dn42_root"
147
+root_servers["10.in-addr.arpa."] = "dn42_root"
136 148
```
137 149
138 150
## Unbound
... ...
@@ -146,6 +158,7 @@ server:
146 158
local-zone: "21.172.in-addr.arpa." nodefault
147 159
local-zone: "22.172.in-addr.arpa." nodefault
148 160
local-zone: "23.172.in-addr.arpa." nodefault
161
+ local-zone: "10.in-addr.arpa." nodefault
149 162
local-zone: "d.f.ip6.arpa." nodefault
150 163
151 164
forward-zone:
... ...
@@ -173,6 +186,11 @@ forward-zone:
173 186
forward-addr: fd42:d42:d42:54::1
174 187
forward-addr: 172.20.0.53
175 188
189
+forward-zone:
190
+ name: "10.in-addr.arpa"
191
+ forward-addr: fd42:d42:d42:54::1
192
+ forward-addr: 172.20.0.53
193
+
176 194
forward-zone:
177 195
name: "d.f.ip6.arpa"
178 196
forward-addr: fd42:d42:d42:54::1
... ...
@@ -223,6 +241,12 @@ system {
223 241
fd42:d42:d42:54::1;
224 242
}
225 243
}
244
+ default-domain 10.in-addr.arpa {
245
+ forwarders {
246
+ 172.20.0.53;
247
+ fd42:d42:d42:54::1;
248
+ }
249
+ }
226 250
}
227 251
}
228 252
}
... ...
@@ -230,4 +254,4 @@ system {
230 254
```
231 255
232 256
## MS DNS
233
-Add a "Conditional Forward" (de: "Bedingte Weiterleitung") for each of "dn42", "20.172.in-addr.arpa", "21.172.in-addr.arpa", "22.172.in-addr.arpa", "23.172.in-addr.arpa" using 172.20.0.53 as forwarder. Ignore the error message that the server is not authoritative.
... ...
\ No newline at end of file
0
+Add a "Conditional Forward" (de: "Bedingte Weiterleitung") for each of "dn42", "20.172.in-addr.arpa", "21.172.in-addr.arpa", "22.172.in-addr.arpa", "23.172.in-addr.arpa", "10.in-addr.arpa" using 172.20.0.53 as forwarder. Ignore the error message that the server is not authoritative.
... ...
\ No newline at end of file