Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




3284 posts

Uber Geek


#272871 21-Jul-2020 18:31
Send private message quote this post

Is there any way to configure an EdgeSwitch to function as a DNS server?

 

For some reason I thought you could, but there certainly isn't anything in the GUI and Google has only told me that it wasn't possible as of 4 years ago - so not exactly up to date info.


Create new topic
/dev/null
9449 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #2526694 21-Jul-2020 18:39
Send private message quote this post

Why would you? Just use the Edgerouter for DNS. The Edgeswitch is just a switch, not a router.







3284 posts

Uber Geek


  #2526700 21-Jul-2020 18:49
Send private message quote this post

michaelmurfy:

 

Why would you? Just use the Edgerouter for DNS. The Edgeswitch is just a switch, not a router.

 

 

I have specific reasons why I need 2 DNS servers. I'd been using an old Fritz for one but was hoping to ditch it.


 
 
 
 


4181 posts

Uber Geek

Trusted
Lifetime subscriber

  #2526716 21-Jul-2020 19:33
Send private message quote this post

Paul1977:

 

michaelmurfy:

 

Why would you? Just use the Edgerouter for DNS. The Edgeswitch is just a switch, not a router.

 

 

I have specific reasons why I need 2 DNS servers. I'd been using an old Fritz for one but was hoping to ditch it.

 

 

Could you run 2 DHCP scopes on separate edgerouter ports, and thus have '2' DNS servers (being the ER's IP on 2 separate sub nets)?





/dev/null
9449 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #2526719 21-Jul-2020 19:59
Send private message quote this post

Lias:

 

Could you run 2 DHCP scopes on separate edgerouter ports, and thus have '2' DNS servers (being the ER's IP on 2 separate sub nets)?

 

Yes, you can run multiple DNS servers on the Edgerouter. And as an Edgeswitch is used just pass a VLAN to the device.







3284 posts

Uber Geek


  #2533850 3-Aug-2020 16:32
Send private message quote this post

Without going into the details of why, I require 2 DNS servers on one subnet. The DNS needs to resolve FQDNs to different IPs depending on the client making the request.


1337 posts

Uber Geek


  #2533855 3-Aug-2020 16:49
Send private message quote this post

Paul1977:

 

Without going into the details of why, I require 2 DNS servers on one subnet. The DNS needs to resolve FQDNs to different IPs depending on the client making the request.

 

 

Is there a reason why you can't use the hosts file on the client for this?


1993 posts

Uber Geek

Trusted
Subscriber

  #2533860 3-Aug-2020 16:59
Send private message quote this post

Sounds like you need to do further subnetting so the clients can only access the dns server and IPs in their range...

 

two dns servers in the same range serving different clients doesn't sound close to ideal....





CPU: Intel 3770k| RAM: F3-2400C10D-16GTX G.Skill Trident X |MB:  Gigabyte Z77X-UD5H-WB | GFX: GV-N660OC-2GD gv-n660oc-2gd GeForce GTX 660 | Monitor: Qnix 27" 2560x1440

 

 


 
 
 
 


570 posts

Ultimate Geek


  #2534205 4-Aug-2020 01:20
Send private message quote this post

Paul1977:

 

Without going into the details of why, I require 2 DNS servers on one subnet. The DNS needs to resolve FQDNs to different IPs depending on the client making the request.

 

 

If you are using ISC Bind 9 for the DNS server, then you can easily do what you want using two different "view"s - dual horizon.  I am doing this so that I have different DNS for internal and external requests, but the ACL controls you have for selecting which view is used are quite flexible.  This is what I have for selecting to use my "internal-view":

 

acl internal-acl {

 

   localnets;

 

   localhost;

 

   10.0.0.0/8;

 

   XXXX:XXXX:1:2800::/56; /* Delegated static IPv6 prefix. */

 

   fe80::/10;

 

   xxx.xxx.xxx.xxx;   /* External static IPv4 address. */

 

   172.16.0.0/12;

 

   192.168.0.0/16;

 

};

 

 

 

So if you want to specify individual IPv4 addresses to match that ACL specification, you would do with a /32 mask like this:

 

 

 

   192.168.22.7/32;

 

 

 

You set up the ACL so that anything that matches the ACL goes to one view, and anything that does not match goes to the other view.



3284 posts

Uber Geek


  #2534245 4-Aug-2020 09:06
Send private message quote this post

Thanks for the replies guys.

 

I want to keep devices on the same subnet. It all works perfectly as long as I have 2 separate DNS servers on the subnet. I was really just enquiring if the EdgeSwitch could function as a DNS server so I could have one less box in my cabinet.

 

The reason I need 2 DNS servers is that I have some devices that I want to use my EdgeRouter for DNS resolution (which uses dnsmasq for geo-unblocking), but other devices I specifically don't want geo-unblocked.

 

What I currently do is assign the EdgeRouter as the DNS server for everything via DHCP, but redirect DNS requests from certain clients to the 2nd DNS server. That way all clients are on the same subnet, all are assignmed addresses etc via DHCP, but I can control what DNS server each client uses from one place (the EdgeRouter).

 

I currently use an old FritzBox as the second DNS server, was just hoping I could ditch it. EdgeSwitch can be configured to function as a DHCP server, and I think I must have misread that as DNS server.

 

Alternatively, if there was a way to tell the EdgeRouter to use the dnsmasq file for requests from some client but not others? I don't think this is possible, but happy to be corrected.


/dev/null
9449 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #2534249 4-Aug-2020 09:16
Send private message quote this post

You can use a DNAT rule to redirect DNS from these clients to an external DNS server (eg - Cloudflare DNS or your ISP's DNS servers) achieving the same thing.





1993 posts

Uber Geek

Trusted
Subscriber

  #2534349 4-Aug-2020 11:21
Send private message quote this post

ahhh "clients" as in devices... not "clients" as in customers.





CPU: Intel 3770k| RAM: F3-2400C10D-16GTX G.Skill Trident X |MB:  Gigabyte Z77X-UD5H-WB | GFX: GV-N660OC-2GD gv-n660oc-2gd GeForce GTX 660 | Monitor: Qnix 27" 2560x1440

 

 




3284 posts

Uber Geek


  #2534598 4-Aug-2020 16:18
Send private message quote this post

michaelmurfy:

 

You can use a DNAT rule to redirect DNS from these clients to an external DNS server (eg - Cloudflare DNS or your ISP's DNS servers) achieving the same thing.

 

 

Only downside with that is I can't set a secondary DNS server. When using router as a DNS "server" it's really only a forwarder to the ISPs DNS servers - and you specify primary and secondary. With the DNAT rule you can only only redirect to one address. So if the ISP has issues with their primary DNS server then those clients won't get their requests resolved. Probably a very infrequent occurrence though.


/dev/null
9449 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #2534635 4-Aug-2020 17:21
Send private message quote this post

Paul1977:

 

Only downside with that is I can't set a secondary DNS server. When using router as a DNS "server" it's really only a forwarder to the ISPs DNS servers - and you specify primary and secondary. With the DNAT rule you can only only redirect to one address. So if the ISP has issues with their primary DNS server then those clients won't get their requests resolved. Probably a very infrequent occurrence though.

 

It is very infrequent. For example the below graph to 2degrees primary DNS server:

 

 

Basically what happens is if your closest DNS server is having issues then you get routed to the next closest working DNS server so you may see latency jump a little like this graph shows. I've otherwise never had an issue using this method and would prefer it than running another appliance :)





Create new topic




News »

Freeview On Demand app launches on Sony Android TVs
Posted 6-Aug-2020 13:35


UFB hits more than one million connections
Posted 6-Aug-2020 09:42


D-Link A/NZ extends COVR Wi-Fi EasyMesh System series with new three-pack
Posted 4-Aug-2020 15:01


New Zealand software Rfider tracks coffee from Colombia all the way to New Zealand businesses
Posted 3-Aug-2020 10:35


Logitech G launches Pro X Wireless gaming headset
Posted 3-Aug-2020 10:21


Sony Alpha 7S III provides supreme imaging performance
Posted 3-Aug-2020 10:11


Sony introduces first CFexpress Type A memory card
Posted 3-Aug-2020 10:05


Marsello acquires Goody consolidating online and in-store marketing position
Posted 30-Jul-2020 16:26


Fonterra first major customer for Microsoft's New Zealand datacentre
Posted 30-Jul-2020 08:07


Everything we learnt at the IBM Cloud Forum 2020
Posted 29-Jul-2020 14:45


Dropbox launches native HelloSign workflow and data residency in Australia
Posted 29-Jul-2020 12:48


Spark launches 5G in Palmerston North
Posted 29-Jul-2020 09:50


Lenovo brings speed and smarter features to new 5G mobile gaming phone
Posted 28-Jul-2020 22:00


Withings raises $60 million to enable bridge between patients and healthcare
Posted 28-Jul-2020 21:51


QNAP integrates Catalyst Cloud Object Storage into Hybrid Backup solution
Posted 28-Jul-2020 21:40



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.