b172846a1f
* Added MSDNS to Known-Broken * Removed Juno Docs * Added CLI docs for designate-manage * Update backend docs to new yaml style Change-Id: I8f6876bfeb33bcad46141030a04fe9127dedcefe
62 lines
1.8 KiB
ReStructuredText
62 lines
1.8 KiB
ReStructuredText
..
|
|
Copyright 2013 Hewlett-Packard Development Company, L.P.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
not use this file except in compliance with the License. You may obtain
|
|
a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
License for the specific language governing permissions and limitations
|
|
under the License.
|
|
|
|
Bind9 Backend
|
|
=============
|
|
|
|
This page documents using the Pool Manager Bind 9 backend.
|
|
The backend uses the rndc utility to create and delete zones remotely.
|
|
|
|
The traffic between rndc and Bind is authenticated with a key.
|
|
|
|
Designate Configuration
|
|
-----------------------
|
|
|
|
Example configuration required for Bind9 operation. One section for each pool target
|
|
|
|
.. literalinclude:: sample_yaml_snippets/bind.yaml
|
|
:language: yaml
|
|
|
|
The key and config files are relative to the host running Pool Manager (and can
|
|
be different from the hosts running Bind)
|
|
|
|
Then update the pools in designate - see :ref:`designate_manage_pool` for further details on
|
|
the ``designate-manage pool`` command
|
|
|
|
.. code-block:: console
|
|
|
|
$ designate-manage pool update
|
|
|
|
Bind9 Configuration
|
|
-------------------
|
|
|
|
Ensure Bind can access the /etc/bind/rndc.conf and /etc/bind/rndc.key files and
|
|
receive rndc traffic from Pool Manager.
|
|
|
|
Enable rndc addzone/delzone functionality by editing named.conf.options or named.conf and add this line under options
|
|
|
|
.. code-block:: c
|
|
|
|
allow-new-zones yes;
|
|
|
|
Example configuration of /etc/bind/rndc.key
|
|
|
|
.. code-block:: c
|
|
|
|
key "rndc-key" {
|
|
algorithm hmac-md5;
|
|
secret "<b64-encoded string>";
|
|
};
|