External DNS Management

Yes, I’ve been searching a bit as well and I can’t seem to find anything.

There seem’s to be some interest for it but all I find is instructions on how to configure unbound manually. The few implementations of a webgui in unbound are all in commercial products.
On the other hand there seems to be several solutions available for BIND. The one I’m most familiar is using it as part of webmin.
I also found this interesting article referring how to make unbound and BIND work together in an internal server environment - its mostly cryptic for me but thought it may be interesting to the project:

Unbound DNS cluster with BIND or NSD master server

Unbound is the perfect front line soldier for DNS queries from LAN clients. It is fast, reliable, stable and very secure. BIND (named) or NSD (Name Server Daemon) can be kept on the back end network to be an authoritative DNS to the Unbound cluster. This way you keep your primary DNS data segregated and unencumbered on the BIND or NSD server while the Unbound cluster servers do the resolving, caching and validation of zones for clients.

The idea is to have a few Unbound validating, recursive and caching DNS servers which LAN clients can query. Then use BIND (named) as an authoritative server which can resolve internal LAN names only. LAN clients will NEVER access the BIND DNS server and BIND will never go out to the Internet. BIND’s only job is to serve internal names to the Unbound DNS server cluster. The Unbound cluster will serve all LAN clients. If Unbound needs to resolve a private ip it will ask the BIND server for ips and then cache the response. If the client needs an external ip, lets say from google.com or cnn.com, Unbound will recursively query the Internet root DNS servers and cache the response.

My original idea was to implement some kind of basic webgui for an Authoritative DNS server within Nethserver - something in the lines of the excellent work done by @stephdl with the fail2ban module. Is there an easy way to create such a module with webgui interface in nethserver ? if unbound is already installed, maybe it is just a question of mapping the correct parameters to a webgui?

Of course I have little idea of what I am talking about but let me know if it is a possibility as if it is something relatively simple I would be up for it. Having an authoritative DNS server module in NS7 would be wicked in my opinion.

3 Likes