docs: update DNS schema
This commit is contained in:
parent
d5ad4a239c
commit
aef03b0e13
@ -3,30 +3,34 @@
|
|||||||
```mermaid
|
```mermaid
|
||||||
flowchart LR
|
flowchart LR
|
||||||
subgraph External
|
subgraph External
|
||||||
recursor
|
externalRecursor[recursor]
|
||||||
GandiDns[ Gandi ducamps.win]
|
GandiDns[ hetzner ducamps.win]
|
||||||
end
|
end
|
||||||
subgraph Internal
|
subgraph Internal
|
||||||
pihole[pihole]----ducamps.win-->NAS
|
pihole[pihole]--ducamps.win-->NAS
|
||||||
pihole--service.consul-->consul[consul cluster]
|
pihole--service.consul-->consul[consul cluster]
|
||||||
|
pihole--->recursor
|
||||||
|
recursor--service.consul-->consul
|
||||||
DHCP --dynamic update--> NAS
|
DHCP --dynamic update--> NAS
|
||||||
NAS--service.consul-->consul
|
NAS
|
||||||
|
recursor--ducamps.win-->NAS
|
||||||
|
consul--service.consul--->consul
|
||||||
|
clients--->pihole
|
||||||
|
clients--->recursor
|
||||||
end
|
end
|
||||||
NAS --> recursor
|
pihole --> externalRecursor
|
||||||
pihole --> recursor
|
recursor-->External
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
## Detail
|
## Detail
|
||||||
|
|
||||||
Pihole container in nomad cluster is set as primary DNS as add blocker secondary DNS is locate on NAS
|
Pihole container in nomad cluster is set as primary DNS as add blocker secondary DNS recursore is locate on gerard
|
||||||
|
|
||||||
DNS locate on NAS manage domain *ducamps.win* on local network pihole forward each request on *ducamps.win* to this DNS.
|
DNS locate on NAS manage domain *ducamps.win* on local network each recursor forward each request on *ducamps.win* to this DNS.
|
||||||
|
|
||||||
Each DNS forward *service.consul* request to the consul cluster. On Pihole a template configure each consul server.
|
Each DNS forward *service.consul* request to the consul cluster.
|
||||||
|
Each consul node have a consul redirection in systemd-resolved to theire own consul client
|
||||||
On diskstation every request as forward to one consul node this point is to improve we because we have a possibility of outtage. du to synology DNSServer limitation we only put a forward on port 53 so we need on the target consul node to redirect port 53 to 8300 by iptables rules.
|
|
||||||
|
|
||||||
a DHCP service is set to do dynamic update on NAS DNS on lease delivery
|
a DHCP service is set to do dynamic update on NAS DNS on lease delivery
|
||||||
|
|
||||||
external recursor are on cloudflare and FDN
|
external recursor are set on pihole on cloudflare and FDN in case of recursors faillure
|
||||||
|
Loading…
Reference in New Issue
Block a user