Home Explore Help
Sign In
mark22k
/
dn42-wiki
mirror of https://codeberg.org/mark22k/dn42-wiki.git
Watch 1
Star 0
Fork 0
Files Issues 0 Wiki
Branch: pages
Branches Tags
dn42-wiki
/
services
/
DNS.html

DNS.html 10 KB
Permalink History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234 
  1. <!DOCTYPE html>
    2. 

  2. <html lang="en">
    3. 

  3.     <head>
    4. 

  4. <meta charset="UTF-8">
    5. 

  5. 

  6. 

  7. 

  8. <title>DN42 DNS | dn42 wiki</title>
    9. 

  9. 

  10. <meta name="viewport" content="width=device-width, initial-scale=1.0">
    11. 

  11. <meta name="robots" content="index, follow">
    12. 

  12. <meta name="keywords" content="dn42,wiki,routing,bgp">
    13. 

  13. 

  14. <link rel="canonical" href="https://dn42.obl.ong/services/DNS.html">
    15. 

  15. <link rel="icon" type="image/x-icon" href="/favicon.ico">
    16. 

  16. <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico">
    17. 

  17. 

  18. <link rel="author" type="text/html" href="/docs/people">
    19. 

  19. 

  20. <link rel="stylesheet" href="/css/normalize.css">
    21. 

  21. <link rel="stylesheet" href="/css/simple.min.css">
    22. 

  22. <link rel="stylesheet" href="/css/style.css">
    23. 

  23. <link rel="stylesheet" href="/css/menu.css">
    24. 

  24. 

  25. 

  26. </head>
    27. 

  27.     
    28. 

  28.     <body>
    29. 

  29. 

  30.         <header>
    31. 

  31. 

  32. 

  33. <b>dn42 wiki / DN42 DNS</b>
    34. 

  34. 

  35. <div id="dn42_header">
    36. 

  36.     
    37. 

  37.     <p><a href="/"><img src="/dn42.png" alt="dn42" /></a></p>
    38. 

  38. 

  39. </div>
    40. 

  40. </header>
    41. 

  41. 

  42.         <main>
    43. 

  43.             <h1 id="dn42-dns">DN42 DNS</h1>
    44. 

  44. 

  45. <p>This page covers guidance and examples on using DNS within DN42.</p>
    46. 

  46. 

  47. <h2 id="quick-start">Quick Start</h2>
    48. 

  48. 

  49. <p>It is recommended to run your own DNS resolver as this provides you with the most security and privacy. 
    50. 

  50. However, to get started, or if running your own resolver isn’t desirable an anycast service
    51. 

  51. is available. The anycast service supports DNSSEC and will resolve public DNS names together with all the 
    52. 

  52. relevant DN42 and affiliated networks’ names.</p>
    53. 

  53. 

  54. <h3 id="using-the-dns-anycast-service">Using the DNS Anycast Service</h3>
    55. 

  55. 

  56. <p>The DNS anycast service is provided by multiple operators, with each operator contributing to one of the two separate 
    57. 

  57. anycast services. By configuring both services, users get additional resiliency from having two, independent, resolvers.</p>
    58. 

  58. 

  59. <table>
    60. 

  60.   <thead>
    61. 

  61.     <tr>
    62. 

  62.       <th>Name</th>
    63. 

  63.       <th>IPv4</th>
    64. 

  64.       <th>IPv6</th>
    65. 

  65.     </tr>
    66. 

  66.   </thead>
    67. 

  67.   <tbody>
    68. 

  68.     <tr>
    69. 

  69.       <td>a0.recursive-servers.dn42</td>
    70. 

  70.       <td>172.20.0.53</td>
    71. 

  71.       <td>fd42:d42:d42:54::1</td>
    72. 

  72.     </tr>
    73. 

  73.     <tr>
    74. 

  74.       <td>a3.recursive-servers.dn42</td>
    75. 

  75.       <td>172.23.0.53</td>
    76. 

  76.       <td>fd42:d42:d42:53::1</td>
    77. 

  77.     </tr>
    78. 

  78.   </tbody>
    79. 

  79. </table>
    80. 

  80. 

  81. <p>To configure the service, ping both sets of addresses then set your primary nameserver to the lowest latency 
    82. 

  82. service and configure the other service as the secondary or backup nameserver.</p>
    83. 

  83. 

  84. <p>Example resolv.conf, preferring a0.recursive-servers.dn42 and IPv4:</p>
    85. 

  85. 

  86. <div class="language-conf highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="n">nameserver</span> <span class="m">172</span>.<span class="m">20</span>.<span class="m">0</span>.<span class="m">53</span>
    87. 

  87. <span class="n">nameserver</span> <span class="m">172</span>.<span class="m">23</span>.<span class="m">0</span>.<span class="m">53</span>
    88. 

  88. <span class="n">nameserver</span> <span class="n">fd42</span>:<span class="n">d42</span>:<span class="n">d42</span>:<span class="m">54</span>::<span class="m">1</span>
    89. 

  89. <span class="n">nameserver</span> <span class="n">fd42</span>:<span class="n">d42</span>:<span class="n">d42</span>:<span class="m">53</span>::<span class="m">1</span>
    90. 

  90. <span class="n">search</span> <span class="n">dn42</span>
    91. 

  91. </code></pre></div></div>
    92. 

  92. 

  93. <p>Example resolv.conf, preferring a3.recursive-servers.dn42 and IPv6:</p>
    94. 

  94. 

  95. <div class="language-conf highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="n">nameserver</span> <span class="n">fd42</span>:<span class="n">d42</span>:<span class="n">d42</span>:<span class="m">53</span>::<span class="m">1</span>
    96. 

  96. <span class="n">nameserver</span> <span class="n">fd42</span>:<span class="n">d42</span>:<span class="n">d42</span>:<span class="m">54</span>::<span class="m">1</span>
    97. 

  97. <span class="n">nameserver</span> <span class="m">172</span>.<span class="m">23</span>.<span class="m">0</span>.<span class="m">53</span>
    98. 

  98. <span class="n">nameserver</span> <span class="m">172</span>.<span class="m">20</span>.<span class="m">0</span>.<span class="m">53</span>
    99. 

  99. <span class="n">option</span> <span class="n">inet6</span>       <span class="c"># Linux/glibc
    100. 

  100. </span><span class="n">family</span> <span class="n">inet6</span> <span class="n">inet4</span> <span class="c"># BSD
    101. 

  101. </span><span class="n">search</span> <span class="n">dn42</span>
    102. 

  102. </code></pre></div></div>
    103. 

  103. 

  104. <h2 id="advanced-configuration">Advanced Configuration</h2>
    105. 

  105. 

  106. <p>There are multiple top level domains (TLDs) associated with DN42, its affiliated networks and for reverse DNS that must
    107. 

  107. be configured in order to run your own resolver. The registry is the authoritative source of active TLDs, but see also
    108. 

  108. this page <a href="/services/dns/External-DNS">dns/External-DNS</a> in the wiki.</p>
    109. 

  109. 

  110. <h3 id="split-horizon-dns">Split horizon DNS</h3>
    111. 

  111. 

  112. <p>In this configuration, you run your own, caching resolver but forward DN42 related queries (with recursion bit set) 
    113. 

  113. to the anycast service. Example configurations for different recursor implementations are included in the <a href="/services/dns/Configuration">dns/Configuration</a> page.</p>
    114. 

  114. 

  115. <h3 id="full-recursion">Full recursion</h3>
    116. 

  116. 

  117. <p>Authoritative DNS for DN42 is provided by the *.delegation-servers.dn42 servers, see the DNS architecture here 
    118. 

  118. <a href="/services/New-DNS">New DNS</a> Delegations servers have full support for DNSSEC. Example configuration unbound implementations are included in the <a href="/services/dns/Configuration#resolver-setup">dns/Configuration</a> page.</p>
    119. 

  119. 

  120. <h2 id="further-information">Further Information</h2>
    121. 

  121. 

  122. <ul>
    123. 

  123.   <li><a href="/services/dns/Configuration">dns/Configuration</a> - Forwarder/Resolver configuration examples</li>
    124. 

  124.   <li><a href="/services/New-DNS">New DNS</a> - current architecture</li>
    125. 

  125.   <li><a href="/services/dns/External-DNS">dns/External-DNS</a> - external DNS zones from interconnected networks</li>
    126. 

  126.   <li><a href="/services/Old-Hierarchical-DNS">Old Hierarchical DNS</a> - deprecated</li>
    127. 

  127.   <li><a href="/services/Original-DNS-(deprecated)">Original DNS (deprecated)</a> - deprecated</li>
    128. 

  128. </ul>
    129. 

  129. 

  130. 

  131. 

  132.             <div id="menu-container" class="menu-container">
    133. 

  133.                 <hr>
    134. 

  134.                 <div id="menu" class="menu">
    135. 

  135.                     
    136. 

  136.                     <ul>
    137. 

  137.   <li><a href="/Home">Home</a>
    138. 

  138.     <ul>
    139. 

  139.       <li><a href="/howto/Getting-Started">Getting Started</a></li>
    140. 

  140.       <li><a href="/howto/Registry-Authentication">Registry Authentication</a></li>
    141. 

  141.       <li><a href="/howto/Address-Space">Address Space</a></li>
    142. 

  142.       <li><a href="/howto/BGP-communities">BGP communities</a></li>
    143. 

  143.       <li><a href="/FAQ">FAQ</a></li>
    144. 

  144.     </ul>
    145. 

  145.   </li>
    146. 

  146.   <li>How-To
    147. 

  147.     <ul>
    148. 

  148.       <li><a href="/howto/wireguard">Wireguard</a></li>
    149. 

  149.       <li><a href="/howto/openvpn">Openvpn</a></li>
    150. 

  150.       <li><a href="/howto/IPsec-with-PublicKeys">IPsec With Public Keys</a></li>
    151. 

  151.       <li><a href="/howto/tinc">Tinc</a></li>
    152. 

  152.       <li><a href="/howto/GRE-on-FreeBSD">GRE on FreeBSD</a></li>
    153. 

  153.       <li><a href="/howto/GRE-on-OpenBSD">GRE on OpenBSD</a></li>
    154. 

  154.       <li><a href="/howto/IPv6-Multicast">IPv6 Multicast (PIM-SM)</a></li>
    155. 

  155.       <li><a href="/howto/multicast">SSM Multicast</a></li>
    156. 

  156.       <li><a href="/howto/mpls">MPLS</a></li>
    157. 

  157.       <li><a href="/howto/Bird2">Bird2</a></li>
    158. 

  158.       <li><a href="/howto/frr">FRRouting</a></li>
    159. 

  159.       <li><a href="/howto/OpenBGPD">OpenBGPD</a></li>
    160. 

  160.       <li><a href="/howto/mikrotik">Mikrotik RouterOS</a></li>
    161. 

  161.       <li><a href="/howto/EdgeOS-Config">EdgeRouter</a></li>
    162. 

  162.       <li><a href="/howto/Static-routes-on-Windows">Static routes on Windows</a></li>
    163. 

  163.       <li><a href="/howto/networksettings">Universal Network Requirements</a></li>
    164. 

  164.       <li><a href="/howto/vyos1.4.x">VyOS</a></li>
    165. 

  165.       <li><a href="/howto/nixos">NixOS</a></li>
    166. 

  166.     </ul>
    167. 

  167.   </li>
    168. 

  168.   <li>Services
    169. 

  169.     <ul>
    170. 

  170.       <li><a href="/services/IRC">IRC</a></li>
    171. 

  171.       <li><a href="/services/Whois">Whois registry</a></li>
    172. 

  172.       <li><a href="/services/DNS">DNS</a></li>
    173. 

  173.       <li><a href="/services/IX-Collection">IX Collection</a></li>
    174. 

  174.       <li><a href="/services/Clearnet-Domains">Public DNS</a></li>
    175. 

  175.       <li><a href="/services/Looking-Glasses">Looking Glasses</a></li>
    176. 

  176.       <li><a href="/services/Automatic-Peering">Automatic Peering</a></li>
    177. 

  177.       <li><a href="/services/Repository-Mirrors">Repository Mirrors</a></li>
    178. 

  178.       <li><a href="/services/Distributed-Wiki">Distributed Wiki</a></li>
    179. 

  179.       <li><a href="/services/Certificate-Authority">Certificate Authority</a></li>
    180. 

  180.       <li><a href="/services/Route-Collector">Route Collector</a></li>
    181. 

  181.     </ul>
    182. 

  182.   </li>
    183. 

  183.   <li>Internal
    184. 

  184.     <ul>
    185. 

  185.       <li><a href="/internal/Internal-Services">Internal services</a></li>
    186. 

  186.       <li><a href="/internal/Interconnections">Interconnections</a></li>
    187. 

  187.       <li><a href="/internal/APIs">APIs</a></li>
    188. 

  188.       <li><a href="/internal/ShowAndTell">Show and Tell</a></li>
    189. 

  189.       <li><a href="/internal/Historical-Services">Historical services</a></li>
    190. 

  190.     </ul>
    191. 

  191.   </li>
    192. 

  192.   <li>Historical
    193. 

  193.     <ul>
    194. 

  194.       <li><a href="/historical/Bird">Bird 1</a></li>
    195. 

  195.       <li><a href="/historical/Quagga">Quagga</a></li>
    196. 

  196.     </ul>
    197. 

  197.   </li>
    198. 

  198.   <li>External Tools
    199. 

  199.     <ul>
    200. 

  200.       <li><a href="https://paste.dn42.us">Paste Board</a></li>
    201. 

  201.       <li><a href="https://git.dn42.dev">Git Repositories</a></li>
    202. 

  202.     </ul>
    203. 

  203.   </li>
    204. 

  204. </ul>
    205. 

  205. 

  206. <hr />
    207. 

  207. 

  208. 

  209.                 </div>
    210. 

  210.             </div>
    211. 

  211.         </main>
    212. 

  212.         
    213. 

  213.         <footer><div class="center">
    214. 

  214.     <div id="dn42_footer">
    215. 

  215.         
    216. 

  216.         <table>
    217. 

  217.   <tbody>
    218. 

  218.     <tr>
    219. 

  219.       <td>Hosted by: <a href="mailto:dn42@burble.com">BURBLE-MNT</a>, <a href="mailto:nurtic-vibe@grmml.net">GRMML-MNT</a>, <a href="mailto:xuu@dn42.us">XUU-MNT</a>, <a href="mailto:janeric@ortgies.it">JAN-MNT</a>, <a href="mailto:lare@lare.cc">LARE-MNT</a>, <a href="mailto:danny@saru.moe">SARU-MNT</a>, <a href="mailto:androw95220@gmail.com">ANDROW-MNT</a>, <a href="mailto:dn42@mk16.de">MARK22K-MNT</a></td>
    220. 

  220.       <td>Accessible via: <a href="https://wiki.dn42">dn42</a>, <a href="https://dn42.dev/">dn42.dev</a>, <a href="https://dn42.eu/">dn42.eu</a>, <a href="https://wiki.dn42.us/">wiki.dn42.us</a>, <a href="https://dn42.de/">dn42.de</a> (IPv6-only), <a href="https://dn42.cc/">dn42.cc</a> (wiki-ng), <a href="https://dn42.wiki/">dn42.wiki</a>, <a href="https://dn42.pp.ua/">dn42.pp.ua</a>, <a href="https://dn42.obl.ong/">dn42.obl.ong</a></td>
    221. 

  221.     </tr>
    222. 

  222.   </tbody>
    223. 

  223. </table>
    224. 

  224. 

  225.     </div>
    226. 

  226. </div>
    227. 

  227. </footer>
    228. 

  228. 

  229.         
    230. 

  230. 

  231.     </body>
    232. 

  232. 

  233. </html>
    234. 

  234.