Dynamic Domain Name Provisioning for large hosting setups. Peter Janssen Technical the.eu Registry EURid vzw/asbl

Size: px

Start display at page:

Download "Dynamic Domain Name Provisioning for large hosting setups. Peter Janssen Technical Manager @ the.eu Registry EURid vzw/asbl"

Scot Dean
8 years ago
Views:

1 Dynamic Domain Name Provisioning for large hosting setups Peter Janssen Technical the.eu Registry EURid vzw/asbl

2 Domain Names Services AGENDA Domain Name Server roles Hosting vs. Configuration Domain Name services in hosting Configuration vs. Data Dynamic DNS zone provisioning

3 DNS servers everywhere ISPs Name Servers Non authoritative Hunt and cache Very high query load Root Name Servers 1 (small) zone Infrequent updates Very high query load TLD Name Servers 1 (large) zone Frequent updates Very high query load domain.tld Name Servers Many (small) zones Infrequent updates Frequent zone provisioning (add/remove) Low to very high query load

Servers 1 (large) zone Frequent updates Very high query load domain.

4 Customer provisioning Services provisioning addresses/boxes Aliases, filtering, Access control Website Web site configuration (vhost, packages, ) Access control Other services Databases, DNS IP address of website Mail server address (MX record and IP) Service records,

configuration (vhost, packages, ) Access control Other services

5 Web site provisioning /etc/apache/httpd.conf Include /etc/apache/vhosts.d/*.conf /etc/apache/vhosts.d Site1.conf Site2.conf /etc/apache/vhosts.d/site1.conf <VirtualHost *:80> DocumentRoot /var/www/site1 ServerName </VirtualHost>

6 provisioning Files /etc/postfix/main.cf virtual_mailbox_maps = hash:/etc/postfix/virtual_mailboxes /etc/postfix/virtual_mailboxes info@somedomain.eu info@example.com SQL database hheyes kcurry /etc/postfix/main.cf virtual_mailbox_maps = mysql:/etc/postfix/virtual_mailbox_maps.cf /etc/postfix/virtual_mailbox_maps.cf user = postfix ; password = postfixpassword ; hosts = dbname = postfix table = mailbox select_field = maildir where_field = username

eu info@example.com SQL database hheyes kcurry /etc/postfix/main.

7 DNS provisioning (BIND) /etc/named.conf (master server) zone somedomain.eu" { type master; file "/var/bind/somedomain.eu ; allow-transfer }; }; /etc/named.conf (slave server) zone somedomain.eu" { type slave; file "/var/bind/somedomain.eu"; masters }; };

$eu ; allow-transfer { @ip_secondary; }; }; /etc/named.$

8 DNS provisioning (BIND) /var/bind/somedomain.eu somedomain.eu. NS ns1.somedomain.eu. somedomain.eu. NS ns2.somedomain.eu. ns1.somedomain.eu. A ns2.somedomain.eu. A somedomain.eu. MX smtp.somedomain.eu. www A smtp A

somedomain.eu. A 192.168.0.1 ns2.somedomain.eu. A 192.168.0.2 somedomain.

9 DNS provisioning (powerdns) pdns.conf launch=gmysql gmysql-host= gmysql-user=root gmysql-dbname=pdns Database tables Domains (id, name, master, type, ) Records (id, domain_id, name, type, content, ttl, )

10 Customer provisioning

11 Provisioning Config files Generation Distribution Database backend Inserting/updating Replication Is it configuration or is it just data?

12 Dynamic provisioning of DNS Goals Performance Easy provisioning of zones Implementation flexibility (different vendors) Security Protocol security As few as possible entry points Support for DNSSEC Simplicity of software setup

(different vendors) Security Protocol security As few as

13 Config file based provisioning Flow Generate config files Distribute config files Chef, Puppet, CFEngine, rsync, Reload config files cron, gearman, Challenges Config file layout per name server implementation Reload command per name server implementation Reload without stopping answering queries Extra layer of software for distribution and command

layout per name server implementation Reload command per name server implementation

14 Database backend provisioning Flow Insert/update in database tables Challenges Database running on all nodes Replication Performance?

15 Dynamic DNS Updating zone somedomain.eu Dynamic Update Message Notify AXFR/IXFR Name Server (master) Notify AXFR/IXFR In band communication Self managed No other software Interoperable - Dynamic Update : RFC AXFR/IXFR : RFC1995/RFC5936 No downtime when updating Name Server (slave) Name Server (slave)

AXFR/IXFR In band communication Self managed No other software Interoperable

16 Dynamic DNS provisioning Configuration data (zones) Data in a (meta) zone A zone somedomain.eu" { type master; file "/var/bind/somedomain.eu ; allow-transfer } }; Use DNS channel to communicate configuration data to DNS servers Name servers at startup Have no configuration (Potentially) ACL/TSIG key (who to trust)

$eu ; allow-transfer { @ip_secondary; } }; Use DNS channel to communicate configuration$

17 Dynamic DNS provisioning 2. Notify 1. Dynamic Update Message : Add somedomain.eu NS1 = master NS2, NS3 = slaves NS1 (Master Provisioner) 3. AXFR somedomain.eu meta info 5. Notify 6. AXFR somedomain.eu NS2 NS4 4. Dynamic Update Message : Add www A to somedomain.eu 2. Notify 5. Notify 3. AXFR somedomain.eu meta info 6. AXFR somedomain.eu NS3

eu meta info 5. Notify 6. AXFR somedomain.eu NS2 NS4 4.

18 YADIFA Clean Name Server impl. (for TLD needs) Authoritative (Very) high performance Standards (RFC) compliant AXFR/IXFR support DNSSEC support Secure (TSIG, ACLs, ) BSD Open source license Release : YADIFA Running.eu since July 2012

19 YADIFA (in our labs) Efficient handling of (very) high number of zones Dynamic provisioning extension Command line tools Libraries/API Standardize the protocol FLAGS IP / / PORT / / TSIGN

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ FLAGS IP /

20 Conclusion A standards based, interoperable, DNS message based, dynamic zone provisioning protocol. YADIFA info@yadifa.eu EURid, the.eu registry info@eurid.eu

YADIFA http://www.yadifa.eu info@yadifa.

DNS and BIND. David White

DNS and BIND. David White DNS and BIND David White DNS: Backbone of the Internet Translates Domains into unique IP Addresses i.e. developcents.com = 66.228.59.103 Distributed Database of Host Information Works seamlessly behind