Learn more on - Master/Slave and Supermaster configurations - Lua-Scripting-Engine - PowerDNS HTTP-API - PowerDNS bundled tools

1. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS
Part!2
Supermaster,!HTTP-API,!Lua-Scripting,!Tools
Thursday 17 September 15

2. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS
•Advanced!features!of!the!PowerDNS!authoritative!
server
•The!PowerDNS!HTTP-API
•Automatic!provisioning!of!slave!servers!via!a!“supermaster”
•Scripting!with!Lua
•PowerDNS!bundled!tools
Thursday 17 September 15

3. ©!Men!&!Mice!!http://menandmice,com!
PowerDNS!HTTP!API
Thursday 17 September 15

4. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!HTTP-API
•The!PowerDNS!authoritative!server!contains!an!HTTP-
API
•Currently!marked!as!“experimental”!and!“work!in!progress”
•Restful!
•Input!validation!via!the!PowerDNS!server
• Better!than!changing!zone-!or!configuration!data!in!a!backend!
database
Thursday 17 September 15

5. ©!Men!&!Mice!!http://menandmice,com!
PowerDNS!HTTP-API
•Function!examples
•Create!zones
•Delete!zones
•Set!zone!metadata
•Add/replace/delete!DNS!
records!in!zones
•Set!server!configuration
•Get!server!and!zone!
statistics
•Access!to!cache!content
•Management!of!TSIG!and!
DNSSEC!keys
Thursday 17 September 15

6. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!HTTP-API
•Use!cases
•DNS!server!automation!via!scripts
•Integration!of!PowerDNS!into!customer!portals
•Own!User-Interface!management!front-end!tools!with!
integrated!special!business!logic
Thursday 17 September 15

7. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!HTTP-API
DEMO
Thursday 17 September 15

8. ©!Men!&!Mice!!http://menandmice,com!
PowerDNS!“supermaster”
Thursday 17 September 15

9. ©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
Primary!
Master
Secondary!
1
Secondary!
2
Secondary!
3
Thursday 17 September 15

10. ©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
SSH!login,!create!
master!zone,!add!
master!zone!to!
configuration
Thursday 17 September 15

11. ©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
SSH!login,!add!
slave!zone!to!
configuration
SSH!login,!add!
slave!zone!to!
configuration
SSH!login,!add!
slave!zone!to!
configuration
Thursday 17 September 15

12. ©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
Zonetransfer request
Zonetransfer request
Zonetransfer request
Thursday 17 September 15

13. ©!Men!&!Mice!!http://menandmice.com!
“traditional”!DNS!replication
Zonetransfer
Zonetransfer
Zonetransfer
Thursday 17 September 15

14. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
SSH!login,!add!
master!to!the!
supermaster!
table
SSH!login,!add!
master!to!the!
supermaster!
table
SSH!login,!add!
master!to!the!
supermaster!
table
Thursday 17 September 15

15. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
SSH!login,!create!
master!zone,!add!
master!zone!to!
configuration
Thursday 17 September 15

16. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Notify
Notify
Notify
Thursday 17 September 15

17. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Notify!from!a!
“supermaster”?
Notify!from!a!
“supermaster”?
Notify!from!a!
“supermaster”?
Thursday 17 September 15

18. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Zonetransfer request
Zonetransfer request
Zonetransfer request
Thursday 17 September 15

19. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
Zonetransfer
Zonetransfer
Zonetransfer
Thursday 17 September 15

20. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”!
requirements
•The!secondary!must!have!the!IP-Address!of!the!master!
in!its!“supermaster”!table
•The!master!must!have!a!SOA!record!for!the!new!zone
•The!NS!record!set!of!the!new!domain!must!include!the!
names!of!the!secondary!and!master!server
Thursday 17 September 15

21. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!“supermaster”
DEMO
Thursday 17 September 15

22. ©!Men!&!Mice!!http://menandmice,com!
Lua!scripting
Thursday 17 September 15

23. ©!Men!&!Mice!!http://menandmice.com!
What!is!Lua?
•Lua!is!a!small!and!fast!scripting!
language!well!suited!for!
embedding
•Started!1993!at!Computer!
Graphics!Technology!Group,!Brazil
•Multi-paradigm,!easy!to!learn
•Executed!as!compiled!bytecode!for!
a!register!virtual-machine
Thursday 17 September 15

24. ©!Men!&!Mice!!http://menandmice,com!
Lua!uses
• Lua!is!very!popular!as!a!scripting!
engine!in!games
• Other!uses:
• Adobe!Lightroom
• Apache!HTTP-Server
• Cisco!ASA
• LuaTeX
• MediaWiki
• NetBSD!Kernel
• Prosody!Jabber!Server
• Redis!key-value!database
• Snort
• VIM!Editor
• Wireshark
• and!PowerDNS
Thursday 17 September 15

25. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Lua!Backend
• With!the!PowerDNS!Lua!Backend,!DNS!answers!from!a!zone!can!
be!fully!scripted
• Use-cases:
• On-the-fly!creation!of!IPv6!and!IPv4!PTR!records!for!reverse!name!
resolution
• Create!records!from!backend!systems!not!directly!supported!by!
PowerDNS
• On-the-fly!creation!of!special!resource!records!(TLSA,!OPENPGPKEY,!
SMIMEA!...)
Thursday 17 September 15

26. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Lua!Backend
DEMO
Thursday 17 September 15

27. ©!Men!&!Mice!!http://menandmice.com!
more!Lua
•Lua!zone-transfer!filter
•PowerDNS!can!call!a!filter!written!in!Lua!for!incoming!zone-
transfers
•Use!cases:
• Add!special!(informational)!records!to!zone
• Fix!zones!SOA!serial
• Add!zone!changes!to!a!version!control!system
Thursday 17 September 15

28. ©!Men!&!Mice!!http://menandmice,com!
PowerDNS!Tools
Thursday 17 September 15

29. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Tools
•The!PowerDNS!distribution!includes!a!number!of!
interesting!tools
•The!tools!are!independent!from!the!PowerDNS!server!and!
can!also!be!used!with!other!DNS!server!products
Thursday 17 September 15

30. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Tools
•Tools:
• dnsdist!-!a!DNS!load!balancer,!currently!being!transformed!into!
a!separate!product!
http://dnsdist.org/
• Tools!to!analyze!DNS!traffic:!dnswasher,!dnsscope,!dnsscan,!
dnsreplay
• Benchmark!tools:!dnsbulktest,!dnsreplay,!dnstcpbench
• DNS!troubleshooting:!nsec3dig,!saxfr
Thursday 17 September 15

31. ©!Men!&!Mice!!http://menandmice.com!
PowerDNS!Tools
DEMO
Thursday 17 September 15

32. ©!Men!&!Mice!!http://menandmice,com!
Upcoming!Training!and!
Webinars
Thursday 17 September 15

33. ©!Men!&!Mice!!http://menandmice.com!
Upcoming!trainings!(English)
•September!28!–!29,!2015!-!Introduction!to!DNS!&!
BIND!Hands!on!-!Arlington!(VA),!USA!(confirmed)
•September!28!–!October!2,!2015!-!Introduction!&!
Advanced!DNS!and!BIND!Hands!on,!Arlington!(VA),!
USA!(confirmed)
Thursday 17 September 15

34. ©!Men!&!Mice!!http://menandmice.com!
Upcoming!trainings!(German)
•19.!–!21.!October!2015!-!DHCP!Workshop!-!Essen,!
Deutschland
•26.!–!28.!October!2015!-!DNS!und!BIND!–!Die!Grundlagen!
des!Domain!Name!Systems!-!Essen,!Deutschland!(confirmed)
•26.!–!30.!October!2015!-!“DNS!und!Bind”!und!“DNS!
Security!&!DNSSEC”!-!Essen,!Deutschland!(confirmed)
•29.!–!30.!October!2015!-!DNS!Security!&!DNSSEC!-!Essen,!
Deutschland!(confirmed)
Thursday 17 September 15

35. ©!Men!&!Mice!!http://menandmice.com!
Upcoming!webinars
• Keeping!DNS!server!up-and-running!with!“runit”
22th!October!2015
• RIPE!71!and!IETF!94!reports
19th!November!2015
• DNSTAP!-!have!a!deep!look!into!DNS!server!operations!
(featuring!Unbound!and!Knot-DNS)
16th!December!2015
• The!DNS!server!in!Windows!2016!Server!-!a!big!leap!forward!(views,!response!rate!
limiting,!ACLs!and!more)
January!2016
• An!Update!on!DNSSEC!and!DANE:!new!implementations,!adoption!in!the!market,!
new!Internet!standards
Thursday 17 September 15

36. ©!Men!&!Mice!!http://menandmice.com!
Q/A
?
Thursday 17 September 15