128 lines
3 KiB
YAML
128 lines
3 KiB
YAML
---
|
|
- name: Configure named ns2
|
|
hosts: ns2
|
|
roles:
|
|
- routing-policy-dns-via-balancer
|
|
- named
|
|
vars:
|
|
policy_routing_local_routes:
|
|
- "10.203.2.0/24 dev ens192 scope link src {{ ansible_host }} metric 100"
|
|
|
|
policy_routing_balancers:
|
|
- ip: "{{ hostvars['vm01-balancer'].ansible_host }}"
|
|
mac: "{{ hostvars['vm01-balancer'].nic_ens192_mac }}"
|
|
table_id: 53
|
|
table_name: dns-via-vm01
|
|
fwmark: 53
|
|
- ip: "{{ hostvars['vm02-balancer'].ansible_host }}"
|
|
mac: "{{ hostvars['vm02-balancer'].nic_ens192_mac }}"
|
|
table_id: 54
|
|
table_name: dns-via-vm02
|
|
fwmark: 54
|
|
# Secondary Configuration
|
|
named_listen_ipv4:
|
|
- "any"
|
|
named_listen_ipv4_port:
|
|
- 53
|
|
named_listen_ipv6:
|
|
- "::"
|
|
named_listen_ipv6_port:
|
|
- 53
|
|
named_recursion: true
|
|
named_allow_recursion:
|
|
- "Local"
|
|
named_allow_query:
|
|
- "any"
|
|
named_allow_transfer:
|
|
- "Transfer"
|
|
named_extra_include_files:
|
|
- "{{ named_auth_file }}"
|
|
named_statistics_channels:
|
|
- named_statistics_host: '127.0.0.1'
|
|
- named_statistics_port: '8053'
|
|
- named_statistics_allow:
|
|
- '127.0.0.1'
|
|
|
|
named_acls:
|
|
- name: Transfer
|
|
match_list:
|
|
- 91.218.87.251
|
|
- 10.203.0.84
|
|
- 10.203.0.85
|
|
- name: Local
|
|
match_list:
|
|
- 127.0.0.1
|
|
- 127.0.0.0/8
|
|
- 10.0.0.0/8
|
|
- 172.16.0.0/12
|
|
- 192.168.0.0/16
|
|
- 100.64.0.0/10
|
|
- 91.218.84.0/22
|
|
- 91.236.140.0/22
|
|
- 91.197.57.0/24
|
|
- 213.109.201.0/24
|
|
- 46.255.25.0/24
|
|
- 2a13:af80::/29
|
|
|
|
named_zones:
|
|
# Primary server for domain gigacoms.info (specify zone type explicitly)
|
|
- name: 'gigacoms.info'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: 'gigacoms.ru'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: 'serverok.ru'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: 'vermax.com'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '84.218.91.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '85.218.91.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '86.218.91.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '87.218.91.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '140.236.91.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '141.236.91.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '201.109.213.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|
|
|
|
- name: '0.203.10.in-addr.arpa'
|
|
type: secondary
|
|
primaries:
|
|
- 10.203.2.11
|