k

I haven't done exactly what you are looking for - I have found a reliable way 
to override the DHCP configured DNS server (add a "supersede 
domain-name-servers xxx.xxx.xxx.xxx" line to /etc/dhcp/dhclient.conf and then 
run "sudo service networking restart"), but I don't think this is enough to 
ensure all DNS queries are routed over a specific interface.  

It might be worth looking at the --server option in dnsmasq (see 
http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html) - this suggests it 
supports configuring the source IP address and interface for DNS queries 
(you'll probably also need to use -R to disable reading of /etc/resolve.conf), 
although I haven't played with this mechanism personally so can't say for sure 
that it will work.

Mike


-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of 
[email protected]
Sent: 16 September 2014 02:54
To: [email protected]
Subject: [Clearwater] DNS config on multi-homed guests

Clearwater users,

 The advice in 
https://github.com/Metaswitch/clearwater-docs/wiki/Clearwater-DNS-Usage#client-configuration
 works very well if the nodes have only one interface (as is the case, for 
example, for nodes on AWS). I'm curious if anyone has a reliable DHCP/DNS setup 
on nodes that have multiple interfaces? For example a bono node with a 
"public-facing" interface for sip clients, a "private" interface that it uses 
to talk to other CW nodes, and a "management" network for administration. Each 
interface IP is assigned an address on a different subnet by DHCP on node 
instantiation, and the operator has control over which interfaces are used to 
issue DNS requests and to whom.

I've done some basic experiments and the interaction between DHCP-supplying-DNS 
details, the local network policy here to restrict DNS queries to always 
emanate from the management interface, the desired ability to possibly override 
the DNS servers and search domains that DHCP gives the node, all conspire to 
make my head hurt.

Anyone tried this and got it working reliably?

--k
_______________________________________________
Clearwater mailing list
[email protected]
http://lists.projectclearwater.org/listinfo/clearwater
_______________________________________________
Clearwater mailing list
[email protected]
http://lists.projectclearwater.org/listinfo/clearwater

Reply via email to