[dnsdist] Configure dnsdist to match domain

Jacob Bunk Nielsen jbn at one.com
Mon May 13 08:44:01 UTC 2019


Hi

On 12/05/2019 21.38, Oga Ajima wrote:
> I have pdns authoritative server configured on three servers and pdns 
> recursor configured on two other servers. dnsdist is configure on a 
> sixth server with the following configuration:
>
> *setLocal("10.240.70.91:53 <http://10.240.70.91:53>")
> newServer({address="10.240.70.81:53 
> <http://10.240.70.81:53>",pool="auth"})
> newServer({address="10.240.70.82:53 
> <http://10.240.70.82:53>",pool="auth"})
> newServer({address="10.240.70.83:53 
> <http://10.240.70.83:53>",pool="auth"})
> newServer({address="10.240.70.84:53 <http://10.240.70.84:53>",pool="rec"})
> newServer({address="10.240.70.85:53 <http://10.240.70.85:53>",pool="rec"})
> addAction("homelab.test.", PoolAction("auth"))
> addAction(RDRule(), PoolAction("rec"))*

This matches queries that have the RD (recursion desired) flag set and 
sends them to the "rec" pool.

> I get the following result when querying dnsdist server:
>
> *dig powerdns-1.homelab.test @10.240.70.91 <http://10.240.70.91>
> *

This sends a query with the RD flag set.

Try:

$ dig +norec powerdns-1.homelab.test @10.240.70.91

Best regards,

Jacob

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20190513/855c1de6/attachment.html>


More information about the dnsdist mailing list