Cluster DNS Server configuration

4 posts / 0 new
Last post
#1 Wed, 07/25/2018 - 06:13
dhofer

Cluster DNS Server configuration

Hi Guys

I have a error in reasoning with planing my infrastructure. :(

I have a Virtualmin Server GPL (WEB07) which holds 10 domains. This one has a official IP address and there is actually no firewall in front of this server. Now I'm setting up a second Virtualmin Server with license (WEB09) which is behind a firewall and because of this it is configured with 172.16.3.3.

WEB07 has 2 Webmin servers as Cluster DNS configured. This works perfect. Now my goal is that WEB09 uses WEB07's DNS zones cluster. So I would like to configured WEB09 that if I create a domain (e.g. test.net) then the Master DNS zone is on WEB09, the slave DNS zone will be automatically created on WEB07 and transferred to the other 2 DNS server from this Cluster DNS configuration.

Now, when I specify WEB07 as Clster DNS server on WEB09 and do a test transfer I receive the error message:

Testing transfer of slave zone from 172.16.3.3 ..
.. from 172.16.3.3 : Failed : ;; Connection to 172.16.3.3#53(172.16.3.3) for servertest.net failed: network unreachable.

If I change on WEB07 at Servers > Bind DNS Servers > "dns-zone" > Edit zone options > from 172.16.3.3 to the official IP address of WEB09 than everything is working fine.

Now my question: how can I configure virtualmin to submit the office IP address to the slave DNS server and not the private one?

BR Dominique

Wed, 07/25/2018 - 10:16
scotwnw

"Connection to 172.16.3.3#53(172.16.3.3) for servertest.net failed: network unreachable"

Im confused on what machine/IP is doing what from your description but that right there says the machine cannot connect to the 172.16.3.0/24 network. Is it pingable from that machine? Do both machines have a 172.16.3.0/24 address? They should if you want them to talk over that network. That error isnt saying it cant connect to the IP, its saying it cant connect to that network at all. I suspect both machines are not on that 172.16.3.x network.

Thu, 07/26/2018 - 02:36
dhofer

WEB09 has internal IP 173.16.3.3 and is reachable via IP address 82.195.xxx.y19 (Firewall) WEB07 is directly reachable via IP address 82.196.xyz.y22

Both servers are only connected via internet and are not in the same datacenter. WEB09 is the virtualmin server which handles different websites. WEB07 should only handles the DNS zones from WEB09. WEB07 and 2 other servers are my domain nameservers for registered domains.

I can successfully configure Cluster DNS service so that WEB09 transferes all zones to WEB07. but as I wrote the interanl IP address 172.16.3.3 is inserted at Servers > Bind DNS Servers > "dns-zone.lab" > Edit zone options so that a transfer is not possible. If I change this IP address on WEB07 to the official IP address of WEB09 than everything is working ...

I'm searching for a way now that WEB09 configures WEB07 with his official IP address instead of 172.16.3.3.

Fri, 07/27/2018 - 09:30
scotwnw

To get my slaves working I had to blank out "Servers > Bind DNS Servers > "dns-zone.lab" > Edit zone options" for all domains. All 4 boxes blank and default check boxes checked.

Then on "Servers > Bind DNS Servers > zone defaults" Put in the IP of web07(slave) in the "Also notify slaves.." box.

Then on the slave "Servers > Bind DNS Servers > zone defaults", put in the IP of web09(main) in the "Allow transfers from.." box.

If web09 is sending wrong ip, Thats another issue unrelated to slave setup. Check A record and /etc/hosts for the correct ip. Thus I think is where I'm confused as "Servers > Bind DNS Servers > "dns-zone.lab" > Edit zone options" does not get updated during slave transfer.

Topic locked