sample1.json 4.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143
  1. // This is an example configuration file for D2, Kea's DHCP-DDNS processor.
  2. // It supports updating two Forward DNS zones "four.example.com" and
  3. // "six.example.com"; and one Reverse DNS zone, "2.0.192.in-addr.arpa."
  4. {
  5. // ------------------ DHCP-DDNS ---------------------
  6. //
  7. "DhcpDdns":
  8. {
  9. // -------------- Global Parameters ----------------
  10. //
  11. // D2 will listen for update requests for Kea DHCP servers at 172.16.1.10
  12. // on port 53001. Maximum time to we will wait for a DNS server to
  13. // respond to us is 1000 ms.
  14. "ip-address": "172.16.1.10",
  15. "port": 53001,
  16. "dns-server-timeout" : 1000,
  17. //
  18. // ----------------- Forward DDNS ------------------
  19. //
  20. // 1. Zone - "four.example.com.
  21. // It uses TSIG, key name is "d2.md5.key"
  22. // It is served by one DNS server which listens for DDNS requests at
  23. // 172.16.1.1 on the default port 53 (standard DNS port)
  24. //
  25. // 2. Zone - "six.example.com."
  26. // It does not use TSIG.
  27. // It is server by one DNS server at "2001:db8:1::10" on port 7802
  28. "forward-ddns":
  29. {
  30. "ddns-domains":
  31. [
  32. // DdnsDomain for zone "four.example.com."
  33. {
  34. "name": "four.example.com.",
  35. "key-name": "d2.md5.key",
  36. "dns-servers":
  37. [
  38. {
  39. "ip-address": "172.16.1.1"
  40. }
  41. ]
  42. },
  43. // DdnsDomain for zone "six.example.com."
  44. {
  45. "name": "six.example.com.",
  46. "dns-servers":
  47. [
  48. {
  49. "ip-address": "2001:db8:1::10",
  50. "port": 7802
  51. }
  52. ]
  53. }
  54. ]
  55. },
  56. // ----------------- Reverse DDNS ------------------
  57. //
  58. // We will update Reverse DNS for one zone "2.0.192.in-addr-arpa". It
  59. // uses TSIG with key "d2.sha1.key" and is served by two DNS servers:
  60. // one listening at "172.16.1.1" on 53001 and the other at "192.168.2.10".
  61. //
  62. "reverse-ddns":
  63. {
  64. "ddns-domains":
  65. [
  66. {
  67. "name": "2.0.192.in-addr.arpa.",
  68. "key-name": "d2.sha1.key",
  69. "dns-servers":
  70. [
  71. {
  72. "ip-address": "172.16.1.1",
  73. "port": 53001
  74. },
  75. {
  76. "ip-address": "192.168.2.10"
  77. }
  78. ]
  79. }
  80. ]
  81. },
  82. // ------------------ TSIG keys ---------------------
  83. //
  84. // Each key has a name, an algorithm (HMAC-MD5, HMAC-SHA1, HMAC-SHA224...)
  85. // and a base-64 encoded shared secret.
  86. //
  87. "tsig-keys":
  88. [
  89. {
  90. "name": "d2.md5.key",
  91. "algorithm": "HMAC-MD5",
  92. "secret": "LSWXnfkKZjdPJI5QxlpnfQ=="
  93. },
  94. {
  95. "name": "d2.sha1.key",
  96. "algorithm": "HMAC-SHA1",
  97. "secret": "hRrp29wzUv3uzSNRLlY68w=="
  98. },
  99. {
  100. "name": "d2.sha512.key",
  101. "algorithm": "HMAC-SHA512",
  102. "digest-bits": 256,
  103. "secret": "/4wklkm04jeH4anx2MKGJLcya+ZLHldL5d6mK+4q6UXQP7KJ9mS2QG29hh0SJR4LA0ikxNJTUMvir42gLx6fGQ=="
  104. }
  105. ]
  106. },
  107. // The following configures logging. It assumes that messages with at least
  108. // informational level (info, warn, error and fatal) should be logged to stdout.
  109. "Logging": {
  110. "loggers": [
  111. {
  112. "name": "kea-dhcp-ddns",
  113. "output_options": [
  114. {
  115. "output": "stdout",
  116. // Several additional parameters are possible in addition
  117. // to the typical output. Flush determines whether logger
  118. // flushes output to a file. Maxsize determines maximum
  119. // filesize before the file is being rotated. maxver
  120. // specifies the maximum number of rotated files being
  121. // kept.
  122. "flush": true,
  123. "maxsize": 204800,
  124. "maxver": 4
  125. }
  126. ],
  127. "debuglevel": 0,
  128. "severity": "INFO"
  129. }
  130. ]
  131. }
  132. }