MONROE-PROJECT / Maintenance

MONROE Maintenance procedures, and mostly an issue tracker.
0 stars 0 forks source link

DNS server setting for nodes connected to Polito network [#41] #18

Closed ali-safari closed 6 years ago

ali-safari commented 8 years ago

We are distributing nodes in Polito's sites and connect the DHCP supported port to Polito's network. Only DNS query toward Polito network is allowed therefore the interface is not working. Thomas manually add Polito DNS and the interface is working but its state is still RED.

What could be the solution ?

relet commented 8 years ago

The interface is red because you are blocking the test. I do not think that needs fixing, as it is the result of an existing network issue.

What we have to decide however, is how we should treat the resolv.conf file in a multihomed setting. We have to set static resolvers (for the moment) as dhcp from the five interfaces returns different servers, some of which are blocked.

Merging these sensibly is not yet supported.

I have not changed any configuration yet, but I can confirm that adding the (current) polito server to resolv.conf allows the wan interface to be used. As far as I am aware, requests will be sent to the provided servers in parallel.

On Tue, 20 Sep 2016, 13:51 ali-safari, notifications@github.com wrote:

We are distributing nodes in Polito's sites and connect the DHCP supported port to Polito's network. Only DNS query toward Polito network is allowed therefore the interface is not working. Thomas manually add Polito DNS and the interface is working but its state is still RED.

What could be the solution ?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/MONROE-PROJECT/Maintenance/issues/18, or mute the thread https://github.com/notifications/unsubscribe-auth/AAISEFVPzbj3oCWgrsiWgo_tQbk0JO01ks5qr8ipgaJpZM4KBiDU .

jonakarl commented 8 years ago

If I remember correctly you had an script to test connectivity could also this not be used to test dns functionality and enable a working dns ? (sorry for the noise if this is totally unrelated).

2016-09-20 14:01 GMT+02:00 Thomas Hirsch notifications@github.com:

The interface is red because you are blocking the test. I do not think that needs fixing, as it is the result of an existing network issue.

What we have to decide however, is how we should treat the resolv.conf file in a multihomed setting. We have to set static resolvers (for the moment) as dhcp from the five interfaces returns different servers, some of which are blocked.

Merging these sensibly is not yet supported.

I have not changed any configuration yet, but I can confirm that adding the (current) polito server to resolv.conf allows the wan interface to be used. As far as I am aware, requests will be sent to the provided servers in parallel.

On Tue, 20 Sep 2016, 13:51 ali-safari, notifications@github.com wrote:

We are distributing nodes in Polito's sites and connect the DHCP supported port to Polito's network. Only DNS query toward Polito network is allowed therefore the interface is not working. Thomas manually add Polito DNS and the interface is working but its state is still RED.

What could be the solution ?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/MONROE-PROJECT/Maintenance/issues/18, or mute the thread https://github.com/notifications/unsubscribe- auth/AAISEFVPzbj3oCWgrsiWgo_tQbk0JO01ks5qr8ipgaJpZM4KBiDU .

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/MONROE-PROJECT/Maintenance/issues/18#issuecomment-248281208, or mute the thread https://github.com/notifications/unsubscribe-auth/AItal77Xb1BD1gLKOta0UuWRl0kc35RMks5qr8sfgaJpZM4KBiDU .

Jonas Karlsson Senior Research Engineer

Karlstad University SE-651 88 Karlstad, Sweden Telephone: +46 54 700 15 64 Mobile: +46 70 672 06 20 Skype: karlsson.karl.jonas Hangout: karlsson.karl.jonas

twitter.com/kau facebook.com/karlstadsuniversitet KAU.SE

alfs commented 8 years ago

Maybe the node can run a local resolver? But it would also need multihoming awareness and try all available interfaces when forwarding/recursing on a query.

tdely commented 8 years ago

In NorNet Edge this issue is solved by tunneling DNS (among other things) through an SSH proxy.