Ubuntu 22.04
Sponsored Link

OpenStack Antelope : Designate 利用方法2023/03/28

 
OpenStack DNS Service(Designate)の利用方法です。
当例では以下のような環境を例に Designate をインストールしています。
------------+--------------------------+--------------------------+------------
            |                          |                          |
        eth0|10.0.0.30             eth0|10.0.0.50             eth0|10.0.0.51
+-----------+-----------+  +-----------+-----------+  +-----------+-----------+
|   [ dlp.srv.world ]   |  | [ network.srv.world ] |  |  [ node01.srv.world ] |
|     (Control Node)    |  |     (Network Node)    |  |     (Compute Node)    |
|                       |  |                       |  |                       |
|  MariaDB    RabbitMQ  |  |      Open vSwitch     |  |        Libvirt        |
|  Memcached  Nginx     |  |     Neutron Server    |  |      Nova Compute     |
|  Keystone   httpd     |  |      OVN-Northd       |  |      Open vSwitch     |
|  Glance     Nova API  |  |  Nginx  iSCSI Target  |  |   OVN Metadata Agent  |
|  Cinder API           |  |     Cinder Volume     |  |     OVN-Controller    |
|                       |  |   Designate Services  |  |                       |
+-----------------------+  +-----------------------+  +-----------------------+

[1] Openstack システムを利用可能な任意のユーザーで認証して、DNS エントリを作成します。
作業は、どこでもよいですが、当例ではコントロールノード上で行います。
例として [server.education] の正引きゾーンを作成します。
ubuntu@dlp ~(keystone)$
openstack zone create --email dnsmaster@server.education server.education.

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| action         | CREATE                               |
| attributes     |                                      |
| created_at     | 2023-03-28T04:22:33.000000           |
| description    | None                                 |
| email          | dnsmaster@server.education           |
| id             | 1a012993-cd65-4c44-bb41-4a72988fe667 |
| masters        |                                      |
| name           | server.education.                    |
| pool_id        | 794ccc2c-d751-44fe-b57f-8894c9f5c842 |
| project_id     | e294bd7c00314facacdb46c36fb54ee9     |
| serial         | 1679977353                           |
| shared         | False                                |
| status         | PENDING                              |
| transferred_at | None                                 |
| ttl            | 3600                                 |
| type           | PRIMARY                              |
| updated_at     | None                                 |
| version        | 1                                    |
+----------------+--------------------------------------+

# [status] が [ACTIVE] であれば OK

ubuntu@dlp ~(keystone)$
openstack zone list

+--------------------------------------+-------------------+---------+------------+--------+--------+
| id                                   | name              | type    |     serial | status | action |
+--------------------------------------+-------------------+---------+------------+--------+--------+
| 1a012993-cd65-4c44-bb41-4a72988fe667 | server.education. | PRIMARY | 1679977353 | ACTIVE | NONE   |
+--------------------------------------+-------------------+---------+------------+--------+--------+

# A レコードを登録する

ubuntu@dlp ~(keystone)$
openstack recordset create --record '192.168.100.10' --type A server.education. node01

+-------------+--------------------------------------+
| Field       | Value                                |
+-------------+--------------------------------------+
| action      | CREATE                               |
| created_at  | 2023-03-28T04:23:08.000000           |
| description | None                                 |
| id          | 73be1936-6295-4f5e-bacd-16e5d38064f9 |
| name        | node01.server.education.             |
| project_id  | e294bd7c00314facacdb46c36fb54ee9     |
| records     | 192.168.100.10                       |
| status      | PENDING                              |
| ttl         | None                                 |
| type        | A                                    |
| updated_at  | None                                 |
| version     | 1                                    |
| zone_id     | 1a012993-cd65-4c44-bb41-4a72988fe667 |
| zone_name   | server.education.                    |
+-------------+--------------------------------------+

# [status] が [ACTIVE] であれば OK

ubuntu@dlp ~(keystone)$
openstack recordset list server.education.

+--------------------------------------+--------------------------+------
| id                                   | name                     | type 
+--------------------------------------+--------------------------+------
| 04528cce-00e0-4aee-aee5-2d4d133ff977 | server.education.        | SOA  
| 6849d137-08aa-4420-8600-e8ebe6a7c773 | server.education.        | NS   
| 73be1936-6295-4f5e-bacd-16e5d38064f9 | node01.server.education. | A    
+--------------------------------------+--------------------------+------
+-------------------------------------------------------------------------------+--------+--------+
| records                                                                       | status | action |
+-------------------------------------------------------------------------------+--------+--------+
| network.srv.world. dnsmaster.server.education. 1679977388 3578 600 86400 3600 | ACTIVE | NONE   |
| network.srv.world.                                                            | ACTIVE | NONE   |
| 192.168.100.10                                                                | ACTIVE | NONE   |
+-------------------------------------------------------------------------------+--------+--------+

# 確認

ubuntu@dlp ~(keystone)$
dig -p 5354 @network.srv.world node01.server.education.


; <<>> DiG 9.18.1-1ubuntu1.3-Ubuntu <<>> -p 5354 @network.srv.world node01.server.education.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3826
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 8192
;; QUESTION SECTION:
;node01.server.education.       IN      A

;; ANSWER SECTION:
node01.server.education. 3600   IN      A       192.168.100.10

;; Query time: 8 msec
;; SERVER: 10.0.0.50#5354(network.srv.world) (UDP)
;; WHEN: Tue Mar 28 13:23:58 JST 2023
;; MSG SIZE  rcvd: 68
[2] 例として [192.168.100.0/24] の逆引きゾーンを作成します。
ubuntu@dlp ~(keystone)$
openstack zone create --email dnsmaster@server.education 100.168.192.in-addr.arpa.

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| action         | CREATE                               |
| attributes     |                                      |
| created_at     | 2023-03-28T04:24:56.000000           |
| description    | None                                 |
| email          | dnsmaster@server.education           |
| id             | e625affb-0d9d-4c38-af8d-42aef5c28e2a |
| masters        |                                      |
| name           | 100.168.192.in-addr.arpa.            |
| pool_id        | 794ccc2c-d751-44fe-b57f-8894c9f5c842 |
| project_id     | e294bd7c00314facacdb46c36fb54ee9     |
| serial         | 1679977496                           |
| shared         | False                                |
| status         | PENDING                              |
| transferred_at | None                                 |
| ttl            | 3600                                 |
| type           | PRIMARY                              |
| updated_at     | None                                 |
| version        | 1                                    |
+----------------+--------------------------------------+

# [status] が [ACTIVE] であれば OK

ubuntu@dlp ~(keystone)$
openstack zone list

+--------------------------------------+---------------------------+---------+------------+--------+--------+
| id                                   | name                      | type    |     serial | status | action |
+--------------------------------------+---------------------------+---------+------------+--------+--------+
| 1a012993-cd65-4c44-bb41-4a72988fe667 | server.education.         | PRIMARY | 1679977388 | ACTIVE | NONE   |
| e625affb-0d9d-4c38-af8d-42aef5c28e2a | 100.168.192.in-addr.arpa. | PRIMARY | 1679977496 | ACTIVE | NONE   |
+--------------------------------------+---------------------------+---------+------------+--------+--------+

# PTR レコードを登録する

ubuntu@dlp ~(keystone)$
openstack recordset create --record 'node01.server.education.' --type PTR 100.168.192.in-addr.arpa. 10

+-------------+--------------------------------------+
| Field       | Value                                |
+-------------+--------------------------------------+
| action      | CREATE                               |
| created_at  | 2023-03-28T04:25:32.000000           |
| description | None                                 |
| id          | 1ef6589c-81eb-4704-bbe1-3fd149af5a03 |
| name        | 10.100.168.192.in-addr.arpa.         |
| project_id  | e294bd7c00314facacdb46c36fb54ee9     |
| records     | node01.server.education.             |
| status      | PENDING                              |
| ttl         | None                                 |
| type        | PTR                                  |
| updated_at  | None                                 |
| version     | 1                                    |
| zone_id     | e625affb-0d9d-4c38-af8d-42aef5c28e2a |
| zone_name   | 100.168.192.in-addr.arpa.            |
+-------------+--------------------------------------+

# [status] が [ACTIVE] であれば OK

ubuntu@dlp ~(keystone)$
openstack recordset list 100.168.192.in-addr.arpa.

+--------------------------------------+------------------------------+------
| id                                   | name                         | type 
+--------------------------------------+------------------------------+------
| 2c592dff-ecc2-457e-bc56-4999520111f1 | 100.168.192.in-addr.arpa.    | SOA  
| f9aa9714-9565-4a82-a4c7-9b7e9d499542 | 100.168.192.in-addr.arpa.    | NS   
| 1ef6589c-81eb-4704-bbe1-3fd149af5a03 | 10.100.168.192.in-addr.arpa. | PTR  
+--------------------------------------+------------------------------+------
+-------------------------------------------------------------------------------+--------+--------+
| records                                                                       | status | action |
+-------------------------------------------------------------------------------+--------+--------+
| network.srv.world. dnsmaster.server.education. 1679977532 3553 600 86400 3600 | ACTIVE | NONE   |
| network.srv.world.                                                            | ACTIVE | NONE   |
| node01.server.education.                                                      | ACTIVE | NONE   |
+-------------------------------------------------------------------------------+--------+--------+

# 確認

ubuntu@dlp ~(keystone)$
dig -p 5354 @network.srv.world -x 192.168.100.10


; <<>> DiG 9.18.1-1ubuntu1.3-Ubuntu <<>> -p 5354 @network.srv.world -x 192.168.100.10
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47594
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 8192
;; QUESTION SECTION:
;10.100.168.192.in-addr.arpa.   IN      PTR

;; ANSWER SECTION:
10.100.168.192.in-addr.arpa. 3600 IN    PTR     node01.server.education.

;; Query time: 8 msec
;; SERVER: 10.0.0.50#5354(network.srv.world) (UDP)
;; WHEN: Tue Mar 28 13:26:19 JST 2023
;; MSG SIZE  rcvd: 93
[3] レコードやゾーンを削除するには以下のように実行します。
ubuntu@dlp ~(keystone)$
openstack recordset list server.education.

+--------------------------------------+--------------------------+------
| id                                   | name                     | type 
+--------------------------------------+--------------------------+------
| 04528cce-00e0-4aee-aee5-2d4d133ff977 | server.education.        | SOA  
| 6849d137-08aa-4420-8600-e8ebe6a7c773 | server.education.        | NS   
| 73be1936-6295-4f5e-bacd-16e5d38064f9 | node01.server.education. | A    
+--------------------------------------+--------------------------+------
+-------------------------------------------------------------------------------+--------+--------+
| records                                                                       | status | action |
+-------------------------------------------------------------------------------+--------+--------+
| network.srv.world. dnsmaster.server.education. 1679977388 3578 600 86400 3600 | ACTIVE | NONE   |
| network.srv.world.                                                            | ACTIVE | NONE   |
| 192.168.100.10                                                                | ACTIVE | NONE   |
+-------------------------------------------------------------------------------+--------+--------+

# [node01] レコードを削除する

ubuntu@dlp ~(keystone)$
openstack recordset delete server.education. node01.server.education.

+-------------+--------------------------------------+
| Field       | Value                                |
+-------------+--------------------------------------+
| action      | DELETE                               |
| created_at  | 2023-03-28T04:23:08.000000           |
| description | None                                 |
| id          | 73be1936-6295-4f5e-bacd-16e5d38064f9 |
| name        | node01.server.education.             |
| project_id  | e294bd7c00314facacdb46c36fb54ee9     |
| records     | 192.168.100.10                       |
| status      | PENDING                              |
| ttl         | None                                 |
| type        | A                                    |
| updated_at  | 2023-03-28T04:27:45.000000           |
| version     | 2                                    |
| zone_id     | 1a012993-cd65-4c44-bb41-4a72988fe667 |
| zone_name   | server.education.                    |
+-------------+--------------------------------------+

ubuntu@dlp ~(keystone)$
openstack recordset list server.education.

+--------------------------------------+-------------------+------
| id                                   | name              | type 
+--------------------------------------+-------------------+------
| 04528cce-00e0-4aee-aee5-2d4d133ff977 | server.education. | SOA  
| 6849d137-08aa-4420-8600-e8ebe6a7c773 | server.education. | NS   
+--------------------------------------+-------------------+------
+-------------------------------------------------------------------------------+--------+--------+
| records                                                                       | status | action |
+-------------------------------------------------------------------------------+--------+--------+
| network.srv.world. dnsmaster.server.education. 1679977665 3578 600 86400 3600 | ACTIVE | NONE   |
| network.srv.world.                                                            | ACTIVE | NONE   |
+-------------------------------------------------------------------------------+--------+--------+

ubuntu@dlp ~(keystone)$
openstack zone list

+--------------------------------------+---------------------------+---------+------------+--------+--------+
| id                                   | name                      | type    |     serial | status | action |
+--------------------------------------+---------------------------+---------+------------+--------+--------+
| 1a012993-cd65-4c44-bb41-4a72988fe667 | server.education.         | PRIMARY | 1679977665 | ACTIVE | NONE   |
| e625affb-0d9d-4c38-af8d-42aef5c28e2a | 100.168.192.in-addr.arpa. | PRIMARY | 1679977532 | ACTIVE | NONE   |
+--------------------------------------+---------------------------+---------+------------+--------+--------+

# [server.education.] ゾーンを削除する

ubuntu@dlp ~(keystone)$
openstack zone delete server.education.

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| action         | DELETE                               |
| attributes     |                                      |
| created_at     | 2023-03-28T04:22:33.000000           |
| description    | None                                 |
| email          | dnsmaster@server.education           |
| id             | 1a012993-cd65-4c44-bb41-4a72988fe667 |
| masters        |                                      |
| name           | server.education.                    |
| pool_id        | 794ccc2c-d751-44fe-b57f-8894c9f5c842 |
| project_id     | e294bd7c00314facacdb46c36fb54ee9     |
| serial         | 1679977665                           |
| shared         | False                                |
| status         | PENDING                              |
| transferred_at | None                                 |
| ttl            | 3600                                 |
| type           | PRIMARY                              |
| updated_at     | 2023-03-28T04:28:53.000000           |
| version        | 7                                    |
+----------------+--------------------------------------+

ubuntu@dlp ~(keystone)$
openstack zone list

+--------------------------------------+---------------------------+---------+------------+--------+--------+
| id                                   | name                      | type    |     serial | status | action |
+--------------------------------------+---------------------------+---------+------------+--------+--------+
| e625affb-0d9d-4c38-af8d-42aef5c28e2a | 100.168.192.in-addr.arpa. | PRIMARY | 1679977532 | ACTIVE | NONE   |
+--------------------------------------+---------------------------+---------+------------+--------+--------+
関連コンテンツ