vincent/homelab
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

docs: update DNS schema

Browse Source
This commit is contained in:
vincent 2023-10-21 15:54:10 +02:00
parent d5ad4a239c
commit aef03b0e13
1 changed files with 17 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
docs/Concepts/DNS.md
View File

@ -3,30 +3,34 @@
```mermaid ```mermaid
flowchart LR flowchart LR
subgraph External subgraph External
recursor externalRecursor[recursor]
GandiDns[ Gandi ducamps.win] GandiDns[ hetzner ducamps.win]
end end
subgraph Internal subgraph Internal
pihole[pihole]----ducamps.win-->NAS pihole[pihole]--ducamps.win-->NAS
pihole--service.consul-->consul[consul cluster] pihole--service.consul-->consul[consul cluster]
pihole--->recursor
recursor--service.consul-->consul
DHCP --dynamic update--> NAS DHCP --dynamic update--> NAS
NAS--service.consul-->consul NAS
recursor--ducamps.win-->NAS
consul--service.consul--->consul
clients--->pihole
clients--->recursor
end end
NAS --> recursor pihole --> externalRecursor
pihole --> recursor recursor-->External
``` ```
## Detail ## Detail
Pihole container in nomad cluster is set as primary DNS as add blocker secondary DNS is locate on NAS Pihole container in nomad cluster is set as primary DNS as add blocker secondary DNS recursore is locate on gerard
DNS locate on NAS manage domain *ducamps.win* on local network pihole forward each request on *ducamps.win* to this DNS. DNS locate on NAS manage domain *ducamps.win* on local network each recursor forward each request on *ducamps.win* to this DNS.
Each DNS forward *service.consul* request to the consul cluster. On Pihole a template configure each consul server. Each DNS forward *service.consul* request to the consul cluster.
Each consul node have a consul redirection in systemd-resolved to theire own consul client
On diskstation every request as forward to one consul node this point is to improve we because we have a possibility of outtage. du to synology DNSServer limitation we only put a forward on port 53 so we need on the target consul node to redirect port 53 to 8300 by iptables rules.
a DHCP service is set to do dynamic update on NAS DNS on lease delivery a DHCP service is set to do dynamic update on NAS DNS on lease delivery
external recursor are on cloudflare and FDN external recursor are set on pihole on cloudflare and FDN in case of recursors faillure