[Kea-users] ddns for a zone in multiple views
Ben Sparks (bzsparks.com)
ben at bzsparks.com
Tue Nov 25 13:34:15 UTC 2025
Hi Peter,
Thank you, your suggestion pointed me in the correct direction. I'm now using the "in-view" zone option to share zones between views. Kea is now sending ddns updates to the primary view which are visible to all other views now. This also simplified the bind9 configuration.
Thanks again,
Ben
On Tuesday, November 25th, 2025 at 11:26 AM, Peter Davies <peterd at isc.org> wrote:
> Hi Ben,
> In a kea-dhcp-ddns configuration file, each “dns-domain” definition can include
> a single "key-name" statement, which refers to a previously defined TSig key.
>
> Since kea-dhcp-ddns does not permit duplicate dns-domain definitions, assigning
> multiple keys to the same domain is not possible.
>
> One option to overcome this is to load the same zone in all views on your DNS
> server. This could address the key limitation of the assignment.
>
> If multiple forward zones were updated at each lease renewal, implementing
> conflict resolution would be rather complex.
>
> Kind Regards Peter
>
> On 24/11/2025 16.30, Ben Sparks (bzsparks.com) via Kea-users wrote:
>
>> Hello,
>>
>> I have a question about kea ddns sending to bind9 with multiple views for the same zone. We separate different networks by view for control of response policy zones but I would like all users to be able to perform forward and reserve resolutions for devices.
>>
>> Is something like this possible?
>>
>> #bind9 views
>> view 1
>> tsig1-key
>> zone iot.example.com
>>
>> view 2
>> tsig2-key
>> zone iot.example.com
>>
>> view 3
>> tsig3-key
>> zone iot.example.com
>>
>> #kea ddns
>> "ddns-domains": [
>> {
>> "name": "iot.example.com.",
>> "key-names": [
>> "tsig1-key",
>> "tsig2-key",
>> "tsig3-key"
>> ],
>> "dns-servers": [
>> { "ip-address": "10.1.1.1" }
>> ]
>> }
>> ]
>>
>> "ddns-domains": [
>> {
>> "name": "1.2.10.in-addr.arpa.",
>> "key-names": [
>> "tsig1-key",
>> "tsig2-key",
>> "tsig3-key"
>> ],
>> "dns-servers": [
>> { "ip-address": "10.1.1.1" }
>> ]
>> } ]
>>
>> Thank you,
>>
>> Ben
>
> --
> Peter Davies
> Support Engineer
> Internet Systems Corporation
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20251125/83101705/attachment.htm>
More information about the Kea-users
mailing list