Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
linux_router:dns_dhcp [2024-06-23 Sun wk25 10:32] – [secure DNS] baumkplinux_router:dns_dhcp [2024-12-15 Sun wk50 11:35] (current) – [Main references used (2017)] baumkp
Line 6: Line 6:
 I have moved my DNS and DHCP servers to Docker, [[https://wiki.kptree.net/doku.php?id=docker_notes:docker-dns#docker_-_dns_server|Docker-DNS Server]].  I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022. I have moved my DNS and DHCP servers to Docker, [[https://wiki.kptree.net/doku.php?id=docker_notes:docker-dns#docker_-_dns_server|Docker-DNS Server]].  I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022.
  
-Further to this I am no looking at backups for both these services on my local area network.  Whilst these services worked reliably well, when ever I shutdown the the router with DNS/DHCP servers my LAN would stop working. Hence the need for back-up DNS. +++++tl;dr;| 
 +Further to this I am not looking at backups for both these services on my local area network.  Whilst these services worked reliably well, when ever I shutdown the the router with DNS/DHCP servers my LAN would stop working. Hence the need for back-up DNS.  Many of my home server applications now are set up to operate via https via Traefik and this also relies upon correct local DNS resolution.  Hence DNS is even more critical.  The DHCP server is less critical, however all the IT equipment that relies upon DHCP will not function without this service.  Most my critical services have static IP address.
  
 These notes still have some utility.  I will presumably archive (tl;dr; roll-up) eventually. These notes still have some utility.  I will presumably archive (tl;dr; roll-up) eventually.
  
-Actually my router that I was running these services was totally lost when upgrading from Debian 11 to Debian 12, circa June 2023. So I had to rebuild from scratch using these various notes.+Actually my router that I was running these services was totally lost when upgrading from Debian 11 to Debian 12, circa June 2023. So I had to rebuild from scratch using these various notes.  This went reasonably well as the notes seemed suitable for purpose.
  
-This setup was primarily written in 2017 and is based upon ISC Bind9 and ISC DHCP, which are the main internet backbone software used for DNS and DHCP.  +This setup was primarily written in 2017 and is based upon ISC Bind9 and ISC DHCP, which are the main internet backbone software used for DNS and DHCP.    I no longer use ISC DHCP as this has been formally replaced by ISC Kea.
  
 (2022) ISC has a newer DHCP software called Kea that is designed to replace ISC DHCP. Kea was primarily developed around 2014-2020. They also are currently developing a monitor for Kea and Bind9 called Stork.  A future plan would be to review and replace ISC DHCP with Kea and also implement Stork. (2022) ISC has a newer DHCP software called Kea that is designed to replace ISC DHCP. Kea was primarily developed around 2014-2020. They also are currently developing a monitor for Kea and Bind9 called Stork.  A future plan would be to review and replace ISC DHCP with Kea and also implement Stork.
- +++++ 
-===Main references used (2017)===+====Main references used (2017)====
 An interesting older resource is BigDinosaur Blog [[https://blog.bigdinosaur.org/running-bind9-and-isc-dhcp/|Running BIND9 and ISC-DHCP]]. ++Unfortunately, no longer readily available, Kill-9 Ubuntu 16.04 based Router, Part 2 - DHCP| does not seem to be saved on [[https://web.archive.org/|Wayback Machine Internet Archive]], but [[https://web.archive.org/web/20190410000003/https://killtacknine.com/building-an-ubuntu-16-04-router-part-5-dns/|Part 5 - DNS]] is. (As are [[https://web.archive.org/web/20190410005152/https://killtacknine.com/building-an-ubuntu-16-04-router-part-6-remote-access/|Building an Ubuntu 16.04 Router Part 6: Remote Access]], [[https://web.archive.org/web/20190410001839/https://killtacknine.com/building-an-ubuntu-16-04-router-part-7-proxies-and-caching//|Building an Ubuntu 16.04 Router Part 7: Proxies and Caching]] & [[https://web.archive.org/web/20190410000841/https://killtacknine.com/building-an-ubuntu-16-04-router-part-8-monitoring/|Building an Ubuntu 16.04 Router Part 8: Monitoring]].  It looks like parts 2 and 3 are missing only.)++ An interesting older resource is BigDinosaur Blog [[https://blog.bigdinosaur.org/running-bind9-and-isc-dhcp/|Running BIND9 and ISC-DHCP]]. ++Unfortunately, no longer readily available, Kill-9 Ubuntu 16.04 based Router, Part 2 - DHCP| does not seem to be saved on [[https://web.archive.org/|Wayback Machine Internet Archive]], but [[https://web.archive.org/web/20190410000003/https://killtacknine.com/building-an-ubuntu-16-04-router-part-5-dns/|Part 5 - DNS]] is. (As are [[https://web.archive.org/web/20190410005152/https://killtacknine.com/building-an-ubuntu-16-04-router-part-6-remote-access/|Building an Ubuntu 16.04 Router Part 6: Remote Access]], [[https://web.archive.org/web/20190410001839/https://killtacknine.com/building-an-ubuntu-16-04-router-part-7-proxies-and-caching//|Building an Ubuntu 16.04 Router Part 7: Proxies and Caching]] & [[https://web.archive.org/web/20190410000841/https://killtacknine.com/building-an-ubuntu-16-04-router-part-8-monitoring/|Building an Ubuntu 16.04 Router Part 8: Monitoring]].  It looks like parts 2 and 3 are missing only.)++
  
-Another reference is Lani's Weblog - Make your [[https://lani78.com/2012/07/23/make-your-dhcp-server-dynamically-update-your-dns-records-on-ubuntu-12-04-precise-pangolin/|DHCP server dynamically update your DNS records]] on Ubuntu 12.04 (Precise Pangolin). Also dragon.org.uk [[https://blogging.dragon.org.uk/dns-bind9-dhcp-ubuntu-16-04-2/|DNS with bind9 and DHCP on Ubuntu 16.04]].\\+Another reference is Lani's Weblog - Make your [[https://lani78.com/2012/07/23/make-your-dhcp-server-dynamically-update-your-dns-records-on-ubuntu-12-04-precise-pangolin/|DHCP server dynamically update your DNS records]] on Ubuntu 12.04 (Precise Pangolin). Also dragon.org.uk [[https://web.archive.org/web/20231204002736/https://blogging.dragon.org.uk/dns-bind9-dhcp-ubuntu-16-04-2/|DNS with bind9 and DHCP on Ubuntu 16.04]] and [[https://arstechnica.com/gadgets/2016/04/the-ars-guide-to-building-a-linux-router-from-scratch/|The Ars guide to building a Linux router from scratch]]. \\
   *[[https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-private-network-dns-server-on-debian-9|How To Configure BIND as a Private Network DNS Server on Debian 9]]\\   *[[https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-private-network-dns-server-on-debian-9|How To Configure BIND as a Private Network DNS Server on Debian 9]]\\
   *[[https://computingforgeeks.com/configure-slave-bind-dns-server-on-debian/|Configure BIND Slave DNS Server on Debian 11]]   *[[https://computingforgeeks.com/configure-slave-bind-dns-server-on-debian/|Configure BIND Slave DNS Server on Debian 11]]
Line 268: Line 269:
   * [[https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-caching-or-forwarding-dns-server-on-ubuntu-14-04|How To Configure Bind as a Caching or Forwarding DNS Server on Ubuntu 14.04]]   * [[https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-caching-or-forwarding-dns-server-on-ubuntu-14-04|How To Configure Bind as a Caching or Forwarding DNS Server on Ubuntu 14.04]]
 =====DHCP Setup===== =====DHCP Setup=====
 +This section is outdated, ISC DHCP was replaced by ISC Kea, and ISC DHCP is no longer formally supported as of 2022.
  
 +++++Outdated tl;dr;|
 First install or ensure already installed the ISC DHCP server software: ''sudo apt install isc-dhcp-server'' First install or ensure already installed the ISC DHCP server software: ''sudo apt install isc-dhcp-server''
  
-Next edit the dhcp configuration file: ''sudo vim /etc/dhcp/dhcpd.conf''+Next edit the dhcp configuration file: ''sudo vim /etc/dhcp/dhcpd.conf'' ++++ 
 ++++dhcp.conf| ++++dhcp.conf|
 <code> <code>
Line 482: Line 486:
  
 ISC has stopped supporting ISC-DHCP client and relay versions as of 2022 and indicated that they plan to eventually stop support of server version.  They seem to recommend migration to ISC-Kea, the ISC-DHCP replacement. ISC has stopped supporting ISC-DHCP client and relay versions as of 2022 and indicated that they plan to eventually stop support of server version.  They seem to recommend migration to ISC-Kea, the ISC-DHCP replacement.
 +
 +
 ====isc-dhcp-server defaults file==== ====isc-dhcp-server defaults file====
 The default isc-dhcp-server configuration files is: ''sudo vim /etc/default/isc-dhcp-server''. Ensure the interface(s) that the DHCP server is to server requests upon is indicated, for example: The default isc-dhcp-server configuration files is: ''sudo vim /etc/default/isc-dhcp-server''. Ensure the interface(s) that the DHCP server is to server requests upon is indicated, for example:
Line 495: Line 501:
    in your dhcpd.conf file for the network segment    in your dhcpd.conf file for the network segment
    to which interface eno4 is attached. **    to which interface eno4 is attached. **
-</code>++++ +</code> 
 +++++
 ======ipv6====== ======ipv6======
 =====radvd===== =====radvd=====