This ticket is to integrate the PTR support between netbox and the DNS for the 2a02:ec80:a100::/48 prefix.
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Add INCLUDEs for newly-assigned IPv6 networks WMCS Codfw | operations/dns | master | +19 -0 |
Event Timeline
Comment Actions
This patch covers the delegation for the openstack-managed ranges, I think it's correct?
https://gerrit.wikimedia.org/r/c/operations/dns/+/1076713
Assuming that is the right server to delegate to, it would need to allow DNS requests from resolvers (everywhere I've tried so far it just gives me REFUSED status back). And this needs to work before we merge:
dig SOA 0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. @ns0.openstack.codfw1dev.wikimediacloud.org.
I'll create another patch shortly for the reverse ranges we will set DNS for in Netbox (currently the 4 subnets assigned 2a02:ec80:a100:fc00::/55).
Comment Actions
To be more clear, you need to make sure these two zones are working on the openstack authdns:
0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. 0.0.1.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa.
The server should respond to an SOA request for these similar to how it does for the v4 reverse zone:
cmooney@cloudnet2005-dev:~$ dig +short SOA 16.172.in-addr.arpa. @ns0.openstack.codfw1dev.wikimediacloud.org. ns0.openstack.codfw1dev.wikimediacloud.org. root.wmcloud.org. 1728040484 3505 600 86400 3600
Comment Actions
aborrero opened https://gitlab.wikimedia.org/repos/cloud/cloud-vps/tofu-infra/-/merge_requests/85
codfw1dev: dns: add reverse zones for 2a02:ec80:a100::/48
Comment Actions
aborrero merged https://gitlab.wikimedia.org/repos/cloud/cloud-vps/tofu-infra/-/merge_requests/85
codfw1dev: dns: add reverse zones for 2a02:ec80:a100::/48
Comment Actions
before and after merging the tofu-infra patch above:
arturo@nostromo:~ $ dig SOA 0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. @ns0.openstack.codfw1dev.wikimediacloud.org. ; <<>> DiG 9.20.2-1-Debian <<>> SOA 0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. @ns0.openstack.codfw1dev.wikimediacloud.org. ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 61354 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. IN SOA ;; Query time: 160 msec ;; SERVER: 185.15.57.25#53(ns0.openstack.codfw1dev.wikimediacloud.org.) (UDP) ;; WHEN: Fri Oct 04 13:14:52 CEST 2024 ;; MSG SIZE rcvd: 69 arturo@nostromo:~ $ dig SOA 0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. @ns0.openstack.codfw1dev.wikimediacloud.org. ; <<>> DiG 9.20.2-1-Debian <<>> SOA 0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. @ns0.openstack.codfw1dev.wikimediacloud.org. ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17164 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. IN SOA ;; ANSWER SECTION: 0.0.0.0.0.0.1.a.0.8.c.e.2.0.a.2.ip6.arpa. 3600 IN SOA ns0.openstack.codfw1dev.wikimediacloud.org. root.wmcloud.org. 1728042767 3587 600 86400 3600 ;; Query time: 152 msec ;; SERVER: 185.15.57.25#53(ns0.openstack.codfw1dev.wikimediacloud.org.) (UDP) ;; WHEN: Fri Oct 04 13:53:12 CEST 2024 ;; MSG SIZE rcvd: 160
Comment Actions
Change #1078972 had a related patch set uploaded (by Cathal Mooney; author: Cathal Mooney):
[operations/dns@master] Add INCLUDEs for newly-assigned IPv6 networks WMCS Codfw
Comment Actions
Change #1078972 merged by Cathal Mooney:
[operations/dns@master] Add INCLUDEs for newly-assigned IPv6 networks WMCS Codfw
Comment Actions
The delegations for the 4 subnets used so far on the infra-side are working also:
cmooney@cumin1002:~$ dig +short +noall +answer -x 2a02:ec80:a100:fe01::2 xe-0-0-46-1001.cloudsw1-b1-codfw.wikimedia.org. cmooney@cumin1002:~$ dig +short +noall +answer -x 2a02:ec80:a100:fe02::2 xe-0-0-47-1001.cloudsw1-b1-codfw.wikimedia.org. cmooney@cumin1002:~$ dig +short +noall +answer -x 2a02:ec80:a100:fe03::1 irb-1120.cloudsw1-b1-codfw.wikimedia.org. cmooney@cumin1002:~$ dig +short +noall +answer -x 2a02:ec80:a100:fe04::2:1 cloudinstances2b-gw.openstack.codfw1dev.wikimediacloud.org.