pdyndns 0.3

Backend configuration

The configuration file specifies the DNS domain the backend is responsible for, and information required to answer SOA and NS DNS queries:

{
  "domain": "atlas.peering.usc.edu",
  "soa": "atlas.peering.usc.edu noc.peering.usc.edu 20170723 7200 3600 7200 120",
  "nameservers": [
    "peering-atlas-ns.vms.uscnsl.net",
    "peering-atlas-ns.peering-vms.usc.edu"
  ],
  "ttl": 3600,
  "...": "..."
}

The domain parameter specifies what domain the backend is responsible for. The soa parameter specifies zone-specific timers and configuration, and is used verbatim in replies for DNS SOA queries. The nameserver parameter specifies a list of name servers for the zone, used in replies for NS queries. The time-to-live parameter (ttl) specifies the period for which replies to SOA and NS queries should be cached. Normally, the third field in the soa parameter (20170723, the serial number) needs to be updated whenever a zone is updated. Although updating the serial number when the dynamic addresses are reconfigured is not essential (because replies have a time-to-live of zero to prevent caching), the serial number needs to be updated if the soa or nameservers parameters are updated.

Each dynamic host name within domain is handled by a handler that reads the list of IP addresses from a text file. The handler replies to queries with IP addresses in the text file in round-robin order. Each handler has three parameters:

{
  "...": "...",
  "handlers": [
    {
      "qname": "target1.atlas.peering.usc.edu",
      "qtype": "A",
      "file": "data/peering-v4.txt",
    },
    {
      "qname": "target2.atlas.peering.usc.edu",
      "qtype": "AAAA",
      "file": "data/peering-v6.txt"
    },
    "..."
  ]
}

Parameter qname specifies the fully-qualified domain name that should be answered with IP addresses within file. The qtype field specified whether IP addresses in file are IPv4 addresses (qtype = A) or IPv6 addresses (qtype = AAAA).

Setting up the parent DNS server

We also need to configure the authoritative name server for the parent domain (peering.usc.edu in our case) to forward all requests for atlas.peering.usc.edu to the machine running the dynamic backend.

If using BIND and if the dynamic backend server is peering-atlas-ns.vms.uscnsl.net, this can be achieved by adding the following to the zone database (equivalent entries can be added to PowerDNS to achieve the same effect):

atlas.peering.usc.edu.  NS          peering-atlas-ns.vms.uscnsl.net.