DNS Infrastructure SOP

From FedoraProject

(Difference between revisions)
Jump to: navigation, search
m (Infrastructure/SOP/DNS moved to DNS Infrastructure SOP: Natural language title)
(Update ns info.)
Line 7: Line 7:
 
Owner: Fedora Infrastructure Team
 
Owner: Fedora Infrastructure Team
  
Contact: #fedora-admin, sysadmin-main group, Jesse Keating (f13) and Mike McGrath (mmcgrath)
+
Contact: #fedora-admin, sysadmin-main
  
Location: ServerBeach and a Colo in Detroit
+
Location: ServerBeach and ibiblio
  
Servers: ns1.fedoraproject.org, DNS1.J2SOLUTIONS.NET
+
Servers: ns1.fedoraproject.org, ns2.fedorparoject.org
  
 
Purpose: Provides DNS to our users
 
Purpose: Provides DNS to our users
  
 
== Troubleshooting, Resolution and Maintenance ==
 
== Troubleshooting, Resolution and Maintenance ==
 
{{Admon/note |  Note, dns1.j2solutions.net is not run by Fedora's Infrastructure Team.  Its resources have been donated by Jesse Keating.}}
 
  
 
=== DNS update ===
 
=== DNS update ===
Line 25: Line 23:
 
<pre>
 
<pre>
 
git clone /git/puppet
 
git clone /git/puppet
cd configs/dns/master
+
cd modules/bind/files/master
 
vi fedoraproject.org # Don't forget to increment the serial!
 
vi fedoraproject.org # Don't forget to increment the serial!
 
cd ../..
 
cd ../..
cvs commit -m "What you did"
+
git commit -m "What you did"
make install
+
git push
 
</pre>
 
</pre>
  
 
It should update within a half hour.  You can test the new configs with dig:
 
It should update within a half hour.  You can test the new configs with dig:
 
  
 
<pre>
 
<pre>
 
dig @ns1.fedoraproject.org fedoraproject.org
 
dig @ns1.fedoraproject.org fedoraproject.org
dig @dns1.j2solutions.net cvs.fedoraproject.org
+
dig @ns2.fedorpaorject.org cvs.fedoraproject.org
 
</pre>
 
</pre>
  

Revision as of 03:27, 13 August 2009

Infrastructure InfrastructureTeamN1.png
Shortcut:
ISOP:DNS

We have two DNS server, the primary is at ns1.fedoraproject.org and is hosted at ServerBeach, from there it replicates to dns1.j2solutions.net.

Contents

Contact Information

Owner: Fedora Infrastructure Team

Contact: #fedora-admin, sysadmin-main

Location: ServerBeach and ibiblio

Servers: ns1.fedoraproject.org, ns2.fedorparoject.org

Purpose: Provides DNS to our users

Troubleshooting, Resolution and Maintenance

DNS update

DNS config files are puppet managed on puppet1. The update is standard to the puppet configs at http://fedoraproject.org/wiki/Infrastructure/Puppet/QuickStart

From puppet1:

git clone /git/puppet
cd modules/bind/files/master
vi fedoraproject.org # Don't forget to increment the serial!
cd ../..
git commit -m "What you did"
git push

It should update within a half hour. You can test the new configs with dig:

dig @ns1.fedoraproject.org fedoraproject.org
dig @ns2.fedorpaorject.org cvs.fedoraproject.org


resolv.conf

In order to make the network more transparent to the admins we do a lot of search based relative names. Below is a list of what a resolv.conf should look like.

Important.png
Any machine that is not on our vpn or has not yet joined the vpn should _NOT_ have the vpn.fedoraproject.org search until after it has been added to the vpn (if it ever does)

Phoenix

search fedora.phx.redhat.com vpn.fedoraproject.org fedoraproject.org

Non-Phoenix

search vpn.fedoraproject.org fedoraproject.org

The idea here is that we can, when need be, setup local domains to contact instead of having to go over the VPN directly but still have sane configs. For example if we tell the proxy server to hit "app1" and that box is in PHX, it will go directly to app1, if its not, it will go over the vpn to app1.