[Kea-users] DDNS between kea-dhcp and powerdns

[luckydog xf]

Just curious, IPs 192.168.1.4 and 192.168.1.5 are IPs of PowerDNS, right?

On Tue, Jul 30, 2024 at 2:56 AM Lee Porte <lee at leeporte.co.uk> wrote:

> Hi,
>
> Here;s what I have in my DHCP4 config to enable the DDNS updates
>
>     "dhcp-ddns": {
>       "enable-updates": true,
>     },
>     "ddns-qualifying-suffix": "example.com",
>     "ddns-override-no-update": true,
>     "ddns-override-client-update": true,
>     "ddns-update-on-renew": true,
>     "hostname-char-set": "[^A-Za-z0-9.-]",
>     "hostname-char-replacement": "-",
>
>
> And this is what I have in DDNS config
>
> {
>   "DhcpDdns": {
>     "ip-address": "127.0.0.1",
>     "port": 53001,
>     "control-socket": {
>       "socket-type": "unix",
>       "socket-name": "/var/lib/kea/kea-ddns-ctrl.sock"
>     },
>     "tsig-keys": [
>       {
>         "name": "dhcp-key",
>         "algorithm": "HMAC-SHA256",
>         "secret": "SUPERsecretKEY"
>       }
>     ],
>     "forward-ddns": {
>       "ddns-domains": [
>         {
>           "name": "example.com.",
>           "key-name": "dhcp-key",
>           "dns-servers": [
>             {
>               "ip-address": "192.168.1.4"
>             },
>             {
>               "ip-address": "192.168.1.5"
>             }
>           ]
>         }
>       ]
>     },
>     "reverse-ddns": {
>       "ddns-domains": [
>         {
>           "name": "1.168.192.in-addr.arpa.",
>           "key-name": "dhcp-key",
>           "dns-servers": [
>             {
>               "ip-address": "192.168.1.4"
>             },
>             {
>               "ip-address": "192.168.1.5"
>             }
>           ]
>         },
>         {
>           "name": "7.168.192.in-addr.arpa.",
>           "key-name": "dhcp-key",
>           "dns-servers": [
>             {
>               "ip-address": "192.168.1.4"
>             },
>             {
>               "ip-address": "192.168.1.5"
>             }
>           ]
>         }
>       ]
>     },
>     "loggers": [
>       {
>         "name": "kea-dhcp-ddns",
>         "output_options": [
>           {
>             "output": "/var/log/kea/kea-ddns.log",
>             "maxsize": 1048576,
>             "maxver": 8
>           }
>         ],
>         "severity": "INFO",
>         "debuglevel": 0
>       }
>     ]
>   }
> }
>
> On the power DNS side I have
>
> #################################
> # allow-dnsupdate-from  A global setting to allow DNS updates from these
> IP ranges.
> #
> #allow-dnsupdate-from=
> allow-dnsupdate-from=
>
> #################################
> # dnsupdate     Enable/Disable DNS update (RFC2136) support. Default is no.
> #
> dnsupdate=yes
>
> I have also generated key values and added the to the database as per
> https://doc.powerdns.com/authoritative/dnsupdate.html#dns-update-how-to-setup-dyndns-rfc2136-with-dhcpd
> Though I did tweak the key generation to use SHA256 rather than MD5
>
> dnssec-keygen -a hmac-sha256 -b 4096 USER dhcpdupdate
>
> Cheers
>
> L
>
> On Mon, 29 Jul 2024 at 08:53, Lee Porte <lee at leeporte.co.uk> wrote:
>
>> Hi,
>>
>> Yes it definitely is possible as I'm running kea with DDNS updates to
>> PowerDNS currently.
>>
>> I can grab some config snippets later on for you.
>>
>> Cheers
>>
>> L
>>
>> On Mon, 29 Jul 2024, 02:52 luckydog xf, <luckydogxf at gmail.com> wrote:
>>
>>> Hello, list
>>>
>>>  Is it possible to integrate kea-dhcp with PowerDNS by DDNS ? I read the
>>> docs and didn't find related pages. Only one kea-dhcp-ddns exists.
>>>
>>>  Thanks.
>>> --
>>> ISC funds the development of this software with paid support
>>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>>> information.
>>>
>>> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>>>
>>> Kea-users mailing list
>>> Kea-users at lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/kea-users
>>>
>>
>
> --
> Lee Porte
> 07989 310 952
> --
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>
> Kea-users mailing list
> Kea-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20240730/d3d6f3e1/attachment-0001.htm>