[yadifa-users] listening on non-local interfaces

Peter Hudec phudec at cnc.sk
Mon Oct 19 09:00:04 CEST 2015


Hi,

so do I.
But the BGP is configured to work with the addresses on the interfaces.
If the interface is up, the bgp annouces the IPv4/6 prefix, if down don't.

So if I do some maintenance, I put the dummyX interfaces down. This
works well, but if I restart the DNS process it will not start due
missing ip addresses to listen.

I can't use 0.0.0.0 or ::0 while the Yadifa/the same the others dns
servers/ is using send/receive function,This will choose the primary IP
of outgoing interface for udp/dns response messages.

There are few other solutions when listening on 0.0.0.0, ::0

Use  sendmsg/ recvfrom as for example here
http://www.opensource.apple.com/source/freeradius/freeradius-32/freeradius/src/lib/udpfromto.c.


Enumerate interfaces as BIND do and bind to specific interface. Debain
scripts do 'reload' on ifup/ifdown and the BIND will bind/unbind the
address.

But I think adding listen to non-local interfaces is much more simpler.

    best regards
        Peter

On 19/10/15 08:10, Jürgen Geinitz wrote:
> Hello,
> to speak for .DE, we are using dummy network devices to solve this
>
> example:
> [root at xxxxxx ~]# ifconfig -a
> dummy0    Link encap:Ethernet  HWaddr XX
>           inet addr:194.0.0.53  Bcast:194.0.0.53  Mask:255.255.255.255
>           inet6 addr: XXXXX/64 Scope:Link
>           inet6 addr: 2a02:568:0:2::53/64 Scope:Global
>           inet6 addr: XXXXXXXXX/128 Scope:Global
>           UP BROADCAST RUNNING NOARP  MTU:1500  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0 
>           RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
>
> dummy0:1  Link encap:Ethernet  HWaddr XXX
>           inet addr:194.246.96.1  Bcast:194.246.96.1  Mask:255.255.255.255
>           UP BROADCAST RUNNING NOARP  MTU:1500  Metric:1
>
> eth0      Link encap:Ethernet  HWaddr XXXX
>       (irrelevant)
>
> eth1      Link encap:Ethernet  HWaddr XX 
>           inet addr:192.168.255.xx  Bcast:192.168.255.255 
> Mask:255.255.255.0
>           inet6 addr: xxx/64 Scope:Link
>           inet6 addr: 2001:678:2:ffff::xx/64 Scope:Global
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:145436420885 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:132964649796 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:1000 
>           RX bytes:11455520307663 (10.4 TiB)  TX bytes:21461066840528 
> (19.5 TiB)
>
> lo        Link encap:Local Loopback 
>           inet addr:127.0.0.1  Mask:255.0.0.0
>           inet6 addr: ::1/128 Scope:Host
>           UP LOOPBACK RUNNING  MTU:16436  Metric:1
>           RX packets:522 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:522 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0 
>           RX bytes:40337 (39.3 KiB)  TX bytes:40337 (39.3 KiB)
>
> [root at xxxxxxx ~]# 
>
> In the good old days when we were still using SunOS, similar setups were 
> done using aliases on the lo interface
>
> All the other nasty things are done inside the cisco boxes (using static 
> arp tables as far as I remember).
>
> Regards 
> Juergen
>
> yadifa-users-bounces at mailinglists.yadifa.eu schrieb am 07.10.2015 
> 14:36:17:
>
>> Von: Gery Van Emelen <Gery.VanEmelen at eurid.eu>
>> An: "yadifa-users at mailinglists.yadifa.eu" 
> <yadifa-users at mailinglists.yadifa.eu>
>> Datum: 07.10.2015 14:36
>> Betreff: Re: [yadifa-users] listening on non-local interfaces
>> Gesendet von: yadifa-users-bounces at mailinglists.yadifa.eu
>>
>> Hi,
>>
>>
>> You did not missed any configuration option.
>>
>> This feature will be implemented in the near future.
>>
>>
>> Gery
>>
>>
>>
>> -----Original Message-----
>> From: yadifa-users-bounces at mailinglists.yadifa.eu [
> mailto:yadifa-users-bounces at mailinglists.yadifa.eu] On Behalf Of Peter 
> Hudec
>> Sent: Wednesday, October 7, 2015 1:46 PM
>> To: yadifa-users at mailinglists.yadifa.eu
>> Subject: [yadifa-users] listening on non-local interfaces
>>
>> Hi,
>>
>> our dns anycast setup requires to listen on non-local IPv4/IPv6 
> addresses.
>> I tested the latest version 2.1.3, but if the dns daemon tried to bind 
> on non/existent address /listed in listen directive/.
>> I did this test also on the other dns server with this result
>> - Knot DNS 1.X KO
>> - Knot DNS 2.X OK
>> - NSD3 KO
>> - NSD4 OK, with ip-transparent options
>> - BIND 9.9.5 OK
>>
>> Is there any configuration option I missed to activate this feature?
>> If not, there is +1 vote for this feature to implement.
>>
>>    best regards
>>       Peter
>>
>> --
>> *Peter Hudec*
>> Infraštruktúrny architekt
>> phudec at cnc.sk <mailto:phduec at cnc.sk>
>>
>> *CNC, a.s.*
>> Borská 6, 841 04 Bratislava
>> Recepcia: +421 2  35 000 100
>>
>> Mobil:+421 905 997 203
>> *www.cnc.sk* <http:///www.cnc.sk>
>>
>> _______________________________________________
>> yadifa-users mailing list
>> yadifa-users at mailinglists.yadifa.eu
>> http://www.yadifa.eu/mailman/listinfo/yadifa-users
>> _______________________________________________
>> yadifa-users mailing list
>> yadifa-users at mailinglists.yadifa.eu
>> http://www.yadifa.eu/mailman/listinfo/yadifa-users
>>
>>
>> _______________________________________________
>> yadifa-users mailing list
>> yadifa-users at mailinglists.yadifa.eu
>> http://www.yadifa.eu/mailman/listinfo/yadifa-users


-- 
*Peter Hudec*
Infraštruktúrny architekt
phudec at cnc.sk <mailto:phduec at cnc.sk>

*CNC, a.s.*
Borská 6, 841 04 Bratislava
Recepcia: +421 2  35 000 100

Mobil:+421 905 997 203
*www.cnc.sk* <http:///www.cnc.sk>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.yadifa.eu/archives/yadifa-users/attachments/20151019/399312bc/attachment-0001.html 


More information about the yadifa-users mailing list