<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div>Hi,</div><div><br></div><div>Thanks for your input. I tried the EDNS method but it doesnt seem to be working for me. It also had a side effect of reducing the caching performance of dnsdist from 80% to 20%, and also slightly increased the CPU usage.</div><div><br></div><div>Tried the following method of replying with the SpoofAction. This seems to be working in test environment. Am going to put it into production and test.</div><div><br></div><div><br></div><div>match_clients_network = newNMG()</div><div>match_clients_network:addMask("192.168.122.1/32")</div><div><br></div><div>addAction(AndRule({NetmaskGroupRule(match_clients_network), QNameRule('my.domain.com.'), QTypeRule(DNSQType.A)}), SpoofAction("192.168.48.10"))</div><div><br></div><div>Regards</div><div><br></div><div>Jahanzeb</div><div><br></div><div><br></div><div>On Wed, 2021-01-27 at 10:33 +0100, frank+pdns@tembo.be wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>Hi,</div><div class=""><br class=""></div><div class="">You would have a few options to do that.</div><div class=""><br class=""></div><div class="">I wrote a blogpost about implementing BIND views using dnsdist and two instances of powerdns-auth. See <a href="https://www.frank.be/implementing-bind-views-with-powerdns/" class="">https://www.frank.be/implementing-bind-views-with-powerdns/</a> for details.</div><div class=""><br class=""></div><div class="">If you want to keep a single BIND as a backend, you could investigate EDNS client subnet support.</div><div class=""><br class=""></div><div class="">There are other options, but the two above would my preferred way...</div><div class=""><br class=""></div><div class="">Kind Regards,</div><div class=""><br class=""></div><div class="">Frank</div><div class=""><br class=""></div><div class=""><div><br class=""><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div class="">On 27 Jan 2021, at 10:23, Jahanzeb Arshad via dnsdist <<a href="mailto:dnsdist@mailman.powerdns.com" class="">dnsdist@mailman.powerdns.com</a>> wrote:</div><div><br class="Apple-interchange-newline"></div><div class=""><div class=""><div class="">Greetings,</div><div class=""><br class=""></div><div class="">We have been using BIND DNS server with views to return different A records for different source networks. Now we have put DNSDIST as frontend to the BIND DNS servers. Now BIND DNS is seeing the dnsdist as the client IP and the views are no more valid. We are unable to figure out how we can we create same type of views on the dnsdist application. Any help would be appreciated. </div><div class=""><br class=""></div><div class="">For example following different A records to be returned for different client IPs for a specific application/domain name.</div><div class=""><br class=""></div><div class=""><a href="http://web.domain.com" class="">web.domain.com</a><span class="Apple-tab-span" style="white-space:pre"> </span>-> 192.168.10.10 for client IPs 10.10.10.0/24</div><div style="caret-color: rgb(0, 0, 0); font-family: Ubuntu; font-size: 14.666666984558105px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="http://web.domain.com" class="">web.domain.com</a><span class="Apple-tab-span" style="white-space: pre;"> </span>-> 192.168.20.20 for client IPs 10.10.20.0/24</div><br class="Apple-interchange-newline"><div class="">Regards</div><div class=""><br class=""></div><div class="">Jahanzeb</div></div>_______________________________________________<br class="">dnsdist mailing list<br class=""><a href="mailto:dnsdist@mailman.powerdns.com" class="">dnsdist@mailman.powerdns.com</a><br class=""><a href="https://mailman.powerdns.com/mailman/listinfo/dnsdist" class="">https://mailman.powerdns.com/mailman/listinfo/dnsdist</a><br class=""></div></blockquote></div><br class=""></div><div class=""><div class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Avenir Next"; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">Frank Louwers<br class="">PowerDNS Certified Consultant @ <a href="http://Kiwazo.be" class="">Kiwazo.be</a><br class=""><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Avenir Next"; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><br class="Apple-interchange-newline"></div></div><br class="Apple-interchange-newline"></div></div></blockquote></body></html>